Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: zLDyOMdB8mONfAfFIzSDIapgDXD3MKXKn4JQCAd8O3o=
Subject key identifier: 9C:D3:B6:D1:C0:D8:68:04:E1:1A:25:2D:B8:58:56:64:04:C4:40:66
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019688EE564734D071E2DE39195AC5AA64FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 9D
Signing time: Wed 30 Apr 2025 23:00:43 +0000
Manifest this update: Wed 30 Apr 2025 23:00:43 +0000
Manifest next update: Thu 01 May 2025 23:00:43 +0000
Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: Aly05jREbGaF9J4KMi0I62pPM1noWXh9/IKRzsN4900=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:56:47:34:d0:71:e2:de:39:19:5a:c5:aa:64:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Apr 30 23:00:43 2025 GMT
Not After : May 1 23:00:43 2025 GMT
Subject: CN=9cd3b6d1c0d86804e11a252db858566404c44066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:a4:e0:0e:7d:17:6c:b5:0f:79:a1:25:92:
58:2a:9b:fe:1f:61:29:79:11:a8:92:77:16:01:29:
09:6f:0f:0c:5d:ec:27:e8:c9:7f:2b:10:d6:50:d1:
b9:c3:70:07:1d:bc:48:6d:26:1e:2b:b0:78:83:33:
3a:d3:1b:fc:6e:13:58:2f:a2:d8:9c:4f:c0:e2:4a:
2c:b2:5a:f6:1b:97:f5:7e:74:d4:58:7f:04:f8:52:
4d:c4:e2:6e:25:4e:c8:2a:99:c3:db:5a:03:a2:db:
cb:fa:da:8b:c4:47:e6:63:ea:1a:be:82:b3:09:60:
b5:7c:62:cf:b1:81:9f:04:47:1d:18:5f:39:67:26:
ae:9d:b2:45:c3:1e:74:27:c1:3d:e7:61:4a:2a:d6:
fc:b3:ca:d9:a6:eb:8f:0d:0d:83:2d:5e:c6:58:83:
db:8f:43:b5:d1:05:39:d3:7d:e3:74:d3:5b:8e:f2:
4e:87:62:43:95:52:55:0c:47:ae:2b:c7:1d:14:1b:
2e:86:11:31:eb:40:02:f4:fe:78:7f:a5:95:1e:a8:
0c:75:64:ac:3a:53:33:f6:69:b3:e6:e8:36:b4:ac:
31:64:8e:e9:76:c1:db:be:c7:97:5e:47:b1:8b:af:
77:de:7f:f8:3f:1d:09:5d:ef:0a:f9:23:1a:ac:54:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:B6:D1:C0:D8:68:04:E1:1A:25:2D:B8:58:56:64:04:C4:40:66
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:94:6f:ce:57:a7:8f:96:0e:30:07:ee:39:a7:cd:9a:74:7e:
30:39:7d:2e:45:80:a7:9d:f7:26:d8:df:35:b6:d3:20:d9:ab:
1a:fb:4b:02:c7:53:48:f8:7e:01:65:51:3a:66:1f:aa:f8:6e:
ae:19:df:4d:e3:ee:50:57:44:85:9c:c3:6a:e6:bd:10:dc:75:
c4:21:d3:77:a3:e9:d8:98:71:c7:9d:1a:d7:e7:a6:a8:e7:44:
38:03:ff:54:65:80:3f:cf:92:5e:80:0d:98:4f:d4:6f:81:3d:
2d:66:77:7a:66:93:7e:9b:7d:d2:5a:3e:a2:94:42:52:56:96:
66:72:ad:3e:39:1c:cc:f4:8a:60:11:46:fb:ea:a4:95:27:1b:
2d:52:fb:f2:75:94:59:a2:7a:2b:c9:fa:2e:2d:76:f0:01:b7:
b6:ac:67:1f:1a:2c:32:c2:76:6e:6e:d3:b5:32:ec:14:33:29:
9c:d1:8d:62:a3:c3:3b:81:45:e0:2d:97:13:73:a7:a1:ad:90:
dc:1c:b4:98:0a:b3:71:a1:7f:d6:e8:8a:86:24:81:c1:a4:df:
43:79:4c:02:58:48:15:75:4d:e2:a8:8e:98:a7:68:ab:6a:3b:
59:d9:bb:48:52:ee:4e:77:66:4b:17:54:a2:b5:ec:0e:85:89:
2c:a8:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:49:12 2025 by rpki-client