Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
File: wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json)
Hash identifier: 6TpHfkjfsFCzh8E2DG4nek94jNOiWXvomuIkeEl5t0M=
Subject key identifier: 1B:C7:97:3C:2C:94:D6:45:9C:44:E7:86:EE:87:CE:FF:75:96:4A:FA
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial: 0196846C5726637D5A4D2399333681FF4444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
Manifest number: 1375
Signing time: Wed 30 Apr 2025 02:00:14 +0000
Manifest this update: Wed 30 Apr 2025 02:00:14 +0000
Manifest next update: Thu 01 May 2025 02:00:14 +0000
Files and hashes: 1: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (hash: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=)
2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: 8/6qh3QWnV/c+IOksIT+5nvT4onp7SGOMBXxpVAUG5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:57:26:63:7d:5a:4d:23:99:33:36:81:ff:44:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Validity
Not Before: Apr 30 02:00:14 2025 GMT
Not After : May 1 02:00:14 2025 GMT
Subject: CN=1bc7973c2c94d6459c44e786ee87ceff75964afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:25:c5:7d:a8:ca:94:2c:d8:a5:54:09:d9:
62:4a:8b:93:fa:9c:06:b0:bb:d3:e8:b5:c2:e1:ff:
a3:14:9f:a2:fe:9e:89:47:0c:4d:7a:8a:e7:d7:7b:
7c:f3:a7:d2:fe:0b:50:e4:a0:b6:95:16:02:74:86:
36:09:fe:14:12:a8:3f:76:59:8f:57:68:24:39:e7:
7f:4d:71:26:c1:ec:41:1f:65:ed:c7:3a:c2:c3:74:
f1:bc:08:1b:a3:14:fc:2e:57:5a:e9:61:b3:37:31:
24:d4:3f:2f:ee:78:9e:77:ff:20:01:4d:93:f8:0f:
5d:ad:59:ec:04:a2:a8:0a:3f:fc:6e:f3:95:e3:b4:
56:f1:33:0c:cc:52:c3:42:3e:f7:53:35:1a:d8:2d:
77:d8:79:cb:85:7a:1f:9f:d3:b4:fe:ff:ff:c6:27:
9a:ed:86:bc:fb:49:a7:f7:d9:ca:d1:05:1f:41:eb:
1f:12:8d:53:0e:5f:07:5e:b3:d0:89:ec:89:e7:77:
99:88:d7:b9:d0:01:64:36:33:e3:c5:f5:68:f8:f3:
95:9d:cd:38:0c:6d:49:42:43:7f:f8:c6:46:b5:cd:
5a:e2:0c:74:65:5f:e6:89:03:ff:e6:43:9f:b6:c4:
fa:bb:24:3c:48:ae:de:e7:6d:aa:b1:70:45:52:66:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:97:3C:2C:94:D6:45:9C:44:E7:86:EE:87:CE:FF:75:96:4A:FA
X509v3 Authority Key Identifier:
keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:58:a6:c2:39:17:fb:35:2e:f3:75:ef:d2:2a:d3:25:7e:ca:
a4:df:49:a4:6f:4c:e3:4e:fa:37:a1:4f:9c:05:21:ec:2a:47:
76:30:7f:30:d4:27:0a:ae:c3:4b:2c:fe:b1:64:69:e3:e2:3a:
c4:cc:38:f4:75:58:15:ce:fb:3e:d4:74:00:bc:69:9d:43:8a:
df:21:cf:cf:2e:10:29:e1:79:dd:9f:3c:10:8a:77:3b:6d:e5:
01:8d:ff:63:72:db:49:fc:d1:a7:8a:8a:74:b4:43:3b:07:19:
94:da:d5:4e:cb:ec:de:44:6b:ff:76:9e:c6:0a:8b:28:49:58:
fb:41:d2:f7:be:0e:04:6e:1c:9c:4f:c0:37:6e:1a:14:06:d1:
c0:05:8c:8a:4c:42:b7:55:68:5b:7b:25:fc:80:43:f0:e4:68:
c5:09:09:a2:fb:26:87:86:f4:b9:c9:ab:84:01:52:c5:46:c3:
f6:68:3d:50:d3:2a:5f:b5:11:c0:1e:ad:df:9f:da:0b:ec:6c:
02:e6:81:07:04:70:ea:4d:c9:76:4a:56:77:d9:5a:b6:41:d0:
ba:97:bb:61:f2:8c:87:12:ce:02:e9:26:5d:28:c9:37:2f:3e:
57:df:54:ef:0d:35:c2:8f:df:b5:9a:07:d2:60:b9:c6:1d:49:
c9:69:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:31:37 2025 by rpki-client