Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: bR6VvsBL0OUd3rFf2AhtVKYXPqhBhA6+3ioK45c+tRU=
Subject key identifier: 59:B9:02:0C:3F:B2:B6:BD:9B:B0:05:B5:CD:36:8C:68:D0:92:12:63
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 0196767A3331D3A5D3B910A6A3201892A65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 016A
Signing time: Sun 27 Apr 2025 09:00:42 +0000
Manifest this update: Sun 27 Apr 2025 09:00:42 +0000
Manifest next update: Mon 28 Apr 2025 09:00:42 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: t2n4aeKF87CRcSEVVQV9ivhLMaPT1DONSQ7GADIVso0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:33:31:d3:a5:d3:b9:10:a6:a3:20:18:92:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Apr 27 09:00:42 2025 GMT
Not After : Apr 28 09:00:42 2025 GMT
Subject: CN=59b9020c3fb2b6bd9bb005b5cd368c68d0921263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:a3:6c:ef:2a:ea:89:6a:f6:11:6a:47:f4:
aa:fb:ac:d0:b5:19:39:13:09:0a:08:d9:24:c7:a3:
ce:21:c8:34:f8:cf:7b:0e:52:ac:79:ee:5e:9e:df:
fc:5b:26:9c:b8:53:52:1e:23:93:e6:3d:c9:30:ec:
0c:94:cd:4e:bb:3e:98:b4:3b:2d:93:29:28:b3:07:
02:c6:21:cd:1c:8a:36:f9:18:f0:71:9e:69:0a:26:
5a:94:bc:29:75:88:f6:3a:1a:77:2a:6a:4a:70:ae:
b7:49:a4:fe:86:9d:78:39:e7:31:1b:38:fc:02:d4:
29:fe:c6:79:ac:c9:b7:ee:17:ff:85:ad:e7:2b:a1:
45:aa:3a:c9:9f:2f:6b:30:70:10:f6:22:22:15:3d:
a5:f8:72:92:ce:c7:ef:03:ee:5a:b5:5b:76:98:cc:
d0:29:9e:9c:df:4b:17:cc:b8:8e:ff:0e:85:14:6c:
e2:2c:d3:41:01:7f:9b:4c:5d:3f:1a:e3:94:f9:6b:
4b:59:8e:73:8f:92:33:ab:75:2d:67:01:d9:96:3b:
ad:6a:8c:a5:e7:77:3c:90:bc:c8:f9:a5:84:0c:d9:
f4:23:f4:87:11:fa:0e:78:d5:32:c7:40:eb:a7:9c:
0a:d2:1b:b7:52:58:ce:86:a5:54:6a:71:b3:ef:da:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:02:0C:3F:B2:B6:BD:9B:B0:05:B5:CD:36:8C:68:D0:92:12:63
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:48:8e:4e:4f:78:d5:36:28:06:52:6c:0e:b8:54:43:79:
77:88:0a:2e:14:7b:8b:22:a5:c4:c7:e5:b3:07:2d:20:a9:36:
0d:c7:9e:5c:bc:91:26:a7:20:b1:60:41:92:c1:27:3d:74:29:
84:ae:32:a8:8c:ce:29:1e:0f:f8:69:1a:a2:d9:1c:2d:c3:2a:
ae:f6:ac:e8:71:33:27:3a:ac:2b:db:1e:23:21:a2:8c:e4:6b:
9d:12:8f:b5:ef:6e:13:d4:02:a3:0d:53:5d:b6:94:f5:77:7a:
7d:52:03:8e:48:32:d5:55:07:ed:54:1d:f6:5f:33:48:7d:dd:
fd:0a:8a:84:5f:40:ca:87:8f:5e:92:ff:70:68:da:fb:58:be:
fa:a6:5b:ff:7b:de:8c:8c:c6:a9:0b:63:3d:b0:3f:fe:f6:50:
cc:79:9a:5d:10:a7:64:00:fd:e1:6b:72:73:9b:82:33:b4:e0:
04:6e:d2:0d:c4:98:52:6d:83:c5:41:df:40:fb:80:1d:19:73:
c1:7b:f9:59:dd:d4:8c:b0:89:1d:8c:04:52:54:9a:78:d5:74:
5a:96:61:fb:c5:57:52:4f:8b:02:21:49:c8:23:63:98:a5:05:
53:15:ac:c4:c1:1c:62:5a:c5:95:d8:eb:da:f3:f5:46:04:0b:
15:6e:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:00:08 2025 by rpki-client