Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier: IF8xlnXiF3dNJPkRoJFLnKhsOvKUeDcQlMpkdpqrb20=
Subject key identifier: 25:D5:7B:90:0E:60:B4:03:CF:7D:98:96:36:15:C1:66:76:31:DE:DA
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial: 019697BC8EB446F3EBD1AD0E60F86DF8D20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number: 02C3
Signing time: Sat 03 May 2025 20:00:39 +0000
Manifest this update: Sat 03 May 2025 20:00:39 +0000
Manifest next update: Sun 04 May 2025 20:00:39 +0000
Files and hashes: 1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=)
2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: r+7/BucQKRfICVZS5DsOQbT2YDqXybFcOAVySYbrPYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:bc:8e:b4:46:f3:eb:d1:ad:0e:60:f8:6d:f8:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Validity
Not Before: May 3 20:00:39 2025 GMT
Not After : May 4 20:00:39 2025 GMT
Subject: CN=25d57b900e60b403cf7d98963615c1667631deda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:aa:ce:e9:37:cb:54:2e:da:0a:ab:8c:d4:
8f:ea:62:69:0a:04:92:81:db:cd:7d:4d:f7:87:1b:
56:b2:21:59:4d:16:21:dd:f5:13:97:a7:59:28:64:
7c:6b:80:8d:27:98:af:8c:b3:48:97:4a:a3:bf:44:
e0:80:28:f2:b7:ce:fa:ba:c8:e3:e3:14:e1:b7:49:
66:86:73:81:85:d3:4b:fc:61:f6:f5:ea:32:e0:58:
54:5f:ff:00:09:18:33:95:c2:75:c7:8c:15:9c:b1:
23:17:a9:d6:4c:75:4b:61:bf:67:35:de:b6:fc:d4:
a5:5a:2f:c1:9a:31:bc:f5:24:27:7c:f0:2b:dc:ef:
7b:5c:08:f9:da:b4:ff:c2:2a:1b:43:7e:e5:a9:1b:
8b:cd:41:d1:1e:9c:03:4d:0c:47:f0:f5:82:a3:87:
cd:6e:95:1e:0b:9b:75:52:85:5b:ab:a1:ba:9f:66:
22:c5:69:48:e4:eb:d1:e1:0a:79:a4:05:d9:b7:02:
77:45:2a:2a:69:1e:a6:14:6f:79:a0:42:34:57:30:
b1:d4:5f:ae:23:90:f1:53:f2:af:dd:25:56:55:d2:
da:c4:a9:fa:d6:18:7a:62:1e:6a:2b:f9:93:8e:ec:
7b:af:a1:bb:49:fa:69:48:e4:d0:57:79:fa:50:a6:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:7B:90:0E:60:B4:03:CF:7D:98:96:36:15:C1:66:76:31:DE:DA
X509v3 Authority Key Identifier:
keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:37:55:1d:bd:dd:49:83:04:65:3d:75:da:db:43:1a:37:a7:
96:d4:bf:d1:f5:7f:cc:f2:bb:bb:ca:e8:d3:d1:bd:95:84:cb:
7c:23:09:ac:cb:47:f6:f1:47:d3:9f:22:93:df:6e:fb:05:92:
5c:0a:79:a4:a6:92:06:59:8a:ff:a6:2e:d7:55:18:ce:9a:e3:
16:64:fe:82:8d:1a:98:ae:ea:5e:fc:d7:09:10:8a:78:2f:36:
a7:53:7a:5f:6b:c5:f1:54:42:60:a2:f9:d1:2c:18:e7:70:be:
75:d5:83:4e:a6:26:11:47:fd:f2:53:63:4c:3c:21:83:a3:99:
ed:6e:69:d4:d3:c7:8d:4b:6c:7b:40:66:e0:45:56:4c:7a:da:
3c:75:36:4c:ec:d4:78:3d:10:ac:cf:59:2f:3a:21:cf:aa:38:
c4:1f:39:63:58:6e:16:9e:0c:bd:01:90:54:94:88:85:76:b5:
24:d7:95:75:f0:3b:3e:d4:e0:8a:75:7a:4b:cc:0a:73:2d:14:
9a:ec:b0:4c:43:aa:3e:bd:ac:0f:82:b1:1a:b1:de:e3:7d:6d:
4a:aa:58:17:bf:7c:9a:fb:89:16:51:21:26:33:b8:24:50:0d:
f8:df:ab:cc:a4:c9:44:a1:2e:47:3d:9e:cf:0e:c3:05:0e:08:
c6:5c:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:26:33 2025 by rpki-client