Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: pHFZOoiuyKQwMlkL605c+MHYoHcKJIps9cRy9dWCock=
Subject key identifier: 19:D0:2F:25:CC:E8:F2:97:50:30:07:95:32:57:1A:A4:B4:DB:47:2D
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 019672D47D4BF9C0F728919497C343B9958A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 152E
Signing time: Sat 26 Apr 2025 16:00:50 +0000
Manifest this update: Sat 26 Apr 2025 16:00:50 +0000
Manifest next update: Sun 27 Apr 2025 16:00:50 +0000
Files and hashes: 1: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
2: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
3: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
4: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
5: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
6: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
7: sUKcclZahYIz3onbKqmP3P88pdI.roa (hash: CBZMv3jQPhyiFf/dy9HbfwPs9kQApWp7DL2KyK40I5c=)
8: v3O2rk8WaR7VhMc1DaSHWT3Xzz8.roa (hash: QkMQyvC3sEpgXeZ6lU5JRmWJPmKhWgedStjiN3opkDY=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: 3DbLODnwD9Nj77xB6B9s7w6w7j1OsXOy2sm66fk985A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:7d:4b:f9:c0:f7:28:91:94:97:c3:43:b9:95:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Apr 26 16:00:50 2025 GMT
Not After : Apr 27 16:00:50 2025 GMT
Subject: CN=19d02f25cce8f2975030079532571aa4b4db472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:be:1f:44:50:fd:6c:1a:29:c2:4b:00:67:19:
40:b7:9f:a7:5e:0b:79:23:24:c3:29:f9:1e:99:ea:
ac:15:3e:0b:ab:8b:8c:12:59:94:bb:bb:44:ac:5e:
af:d5:98:08:fe:f0:97:02:16:55:15:3e:e1:4f:ad:
b6:73:1f:4f:23:2f:75:06:21:58:9c:c5:57:51:37:
51:f4:fa:68:6f:d6:aa:61:ef:b8:9f:0c:d8:fd:f1:
01:2f:f3:69:02:2c:1d:7b:35:73:08:f1:82:11:a8:
3a:6a:f5:c3:25:88:e5:07:16:ea:d2:f5:88:78:be:
16:b2:c0:03:c1:42:a1:06:cf:98:a0:58:fb:98:c9:
e8:61:a2:10:37:10:41:49:f6:55:3b:10:71:83:64:
0e:72:6a:78:f8:b2:0b:05:cf:8f:e0:d9:2a:a4:85:
da:6f:d7:ee:3d:89:d5:83:f9:00:0b:a5:bf:e6:10:
d8:fe:9c:58:16:41:40:af:9b:72:4e:f9:17:0c:bf:
16:de:0f:72:33:ed:e6:d2:9c:2a:fe:91:3c:ac:48:
e6:a1:79:ac:a5:6c:3d:c5:a4:a1:72:1e:54:49:72:
15:f3:e1:08:e7:17:62:a4:39:99:65:4f:db:1f:3b:
30:1f:fa:d5:15:52:50:2a:4c:0b:e5:e6:53:ae:b1:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:2F:25:CC:E8:F2:97:50:30:07:95:32:57:1A:A4:B4:DB:47:2D
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6a:f8:9d:62:77:5b:ca:05:86:8b:dc:73:35:72:b3:b7:ca:
3a:90:af:dd:9c:9b:23:41:e8:a5:2a:ed:99:a7:b3:f8:28:3b:
e4:7f:8d:f3:77:23:af:9c:4c:46:11:5d:5c:3f:44:3d:f8:6d:
e2:a7:c9:e2:57:0e:28:52:93:76:9a:61:fd:0f:ca:e3:93:9a:
fe:35:0c:c8:8b:08:4d:9e:08:db:c1:8a:f5:3d:76:d9:f5:a5:
f4:38:44:4d:6c:d6:ff:83:ee:89:8c:c9:3f:04:28:b2:6a:52:
a6:a7:c1:5f:2e:3e:5d:53:a9:92:c3:81:9c:fa:87:4e:b2:07:
1e:30:ab:11:8a:96:30:63:54:2c:b0:83:44:2d:a0:23:b5:a2:
f1:65:15:5d:35:c8:17:6a:a1:09:2b:2f:73:33:15:ce:59:94:
ea:46:2b:7d:b2:42:ef:c9:1d:5e:c4:70:10:8d:8a:a0:b3:8d:
fe:18:fe:e7:48:6d:d2:53:26:47:66:4e:3f:45:bd:6f:ec:e4:
e7:3e:b9:84:65:d0:ab:f2:47:0c:ea:25:8d:47:be:a0:9c:03:
a0:7f:5f:58:d1:f1:e7:57:82:de:48:a8:df:85:d2:6b:31:cc:
b6:cf:12:ca:5c:2f:a6:27:cc:02:35:92:91:3d:5a:2a:e8:3e:
cb:27:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:12:45 2025 by rpki-client