Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
File: woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft (raw, json)
Hash identifier: Xcz8YwAaFxWk48Oe2SPi1NUjfl37hnFBERUM+p9HGQ0=
Subject key identifier: 89:63:09:E5:74:27:08:39:DA:14:2F:02:48:11:23:3B:0A:A0:73:13
Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Certificate issuer: /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Certificate serial: 0196802218FC2C2454AE52B87356DBD3ED67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 06:00:40 +0000
Manifest this update: Tue 29 Apr 2025 06:00:40 +0000
Manifest next update: Wed 30 Apr 2025 06:00:40 +0000
Files and hashes: 1: cFpop9dizlBgkUyaV36_gGd8lnU.roa (hash: 4REvNTps3BupjiKoFenAilAIXfeTEPHale+uZfisCuc=)
2: woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl (hash: 7ZkeVseJalXCB0Sc6zy6jWMF2nESTz+Fk5edvW514uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:18:fc:2c:24:54:ae:52:b8:73:56:db:d3:ed:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Validity
Not Before: Apr 29 06:00:40 2025 GMT
Not After : Apr 30 06:00:40 2025 GMT
Subject: CN=896309e574270839da142f024811233b0aa07313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:d8:1f:66:19:57:d9:4f:c9:cf:4c:f6:12:
4c:25:b6:85:72:35:5b:32:da:61:a0:69:d2:a4:f5:
a8:82:20:36:58:9f:5f:01:7b:35:c6:24:9f:ee:35:
08:42:98:8f:9c:12:71:d5:6e:91:32:73:59:24:95:
ab:61:76:53:56:27:32:a6:3f:a0:c0:e0:0c:89:56:
2c:45:d8:c8:f6:da:04:c0:32:97:fd:e7:d9:b8:e2:
9f:bb:f2:fb:c7:cc:49:16:f6:55:45:85:e2:0f:8a:
b3:cb:d8:e2:66:ad:23:06:a8:e9:65:4a:11:2a:a5:
f9:12:48:10:90:18:a3:e8:4b:6d:0c:62:38:db:3e:
45:9b:fa:11:26:e6:cd:c4:62:7e:90:8b:77:f7:43:
ed:cb:d7:81:db:48:26:38:58:2e:f9:8d:aa:1c:bb:
0f:fa:f2:24:14:42:e7:3e:1d:9b:cd:8d:87:5d:c9:
e2:66:3f:af:61:a0:84:7c:c7:e8:3f:ca:03:d1:6d:
a8:ab:cd:6e:89:05:33:da:f0:a1:32:66:37:f3:37:
ac:95:fc:da:47:3c:aa:a7:a0:fd:e6:53:00:a9:2c:
46:6e:c4:d7:41:e7:3e:4a:0f:74:76:9c:e8:e9:cd:
1a:0d:23:bd:ce:d5:5c:37:ca:b1:fe:ca:98:da:8a:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:09:E5:74:27:08:39:DA:14:2F:02:48:11:23:3B:0A:A0:73:13
X509v3 Authority Key Identifier:
keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:ed:fc:03:1f:42:70:ce:d6:69:f3:21:ca:eb:b2:f4:d0:
39:9f:a4:e5:d3:8c:25:b7:c8:c6:e3:d0:55:18:77:ed:c3:4d:
3f:77:cc:c8:c9:19:b2:8d:2e:98:05:ba:63:42:c2:a6:96:8d:
a8:8d:b3:33:21:2c:c5:f5:03:dc:20:7c:11:5a:b4:02:49:14:
9d:a8:09:30:45:aa:0f:76:ec:11:79:cc:bb:6e:44:31:a5:83:
4f:4f:1d:1f:64:89:75:58:c4:67:89:17:6d:96:ed:10:36:5d:
70:b1:60:10:6a:48:8a:73:c6:58:c6:8e:b2:23:c6:7d:a3:6f:
a9:60:5f:9a:e4:9b:04:88:72:69:29:16:e9:59:30:d9:8c:44:
aa:3d:ef:63:0d:7f:1e:22:d4:c1:1f:ca:52:a4:38:e3:dc:bf:
5a:07:ad:bd:d5:99:06:d0:8c:ac:6e:08:ac:4e:1f:67:fe:63:
2a:fe:f2:70:aa:dc:b7:f7:8a:6a:f8:2d:aa:e5:f8:22:b4:8d:
1a:cb:6a:53:17:db:df:98:70:14:e8:1d:4a:8d:94:e8:76:63:
4f:f2:a9:7a:e0:ff:b5:e4:7f:ca:38:a1:4f:e2:e8:8f:bf:e7:
c8:19:b4:a5:a8:0d:f1:23:fe:93:08:c4:b2:38:04:c4:a6:9c:
30:af:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:24 2025 by rpki-client