Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier: 8QNXQEJwa6J5mhc8JA4NMcfEVWOwl7whGPYhkg3jpMY=
Subject key identifier: 25:F6:7D:65:9C:87:00:9C:01:DC:86:A6:F8:D2:A4:1D:80:BB:48:6F
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 0196748B91C97E24139B0BB5EA33BD56A121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:25 +0000
Manifest this update: Sun 27 Apr 2025 00:00:25 +0000
Manifest next update: Mon 28 Apr 2025 00:00:25 +0000
Files and hashes: 1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: UpK64jpyEfoMtTZFUV4c2QwAMEj5mBc0U8EUcAj1Ou0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:91:c9:7e:24:13:9b:0b:b5:ea:33:bd:56:a1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Apr 27 00:00:25 2025 GMT
Not After : Apr 28 00:00:25 2025 GMT
Subject: CN=25f67d659c87009c01dc86a6f8d2a41d80bb486f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:73:5f:82:7e:f6:82:58:3f:17:f9:76:87:
01:0d:1e:29:10:8d:69:a3:28:e3:66:d7:f3:c1:26:
d2:d7:41:5a:74:49:f1:0a:56:4a:46:7d:9c:c9:b4:
92:75:12:ce:da:e9:aa:8f:1f:f4:12:b8:61:55:3a:
1f:d9:60:1b:61:d8:99:27:e9:94:15:a0:fe:e5:de:
e0:77:b5:1e:35:72:6a:59:8c:3f:59:17:87:59:63:
d4:b4:0c:71:62:e7:d9:4e:2d:65:1e:44:d5:66:f4:
49:29:d6:4a:42:8c:d5:cb:05:80:79:8e:85:d9:f9:
71:ef:af:ce:12:ed:7f:ae:89:a0:a8:32:65:98:27:
ab:4d:e8:91:5c:c3:d2:97:43:2e:f5:a6:c6:09:02:
db:90:75:40:69:01:c9:c0:63:d2:2f:3a:d0:66:05:
94:0f:5d:2e:90:bc:ba:2d:3a:36:f6:62:ec:74:7e:
cb:25:2e:61:3b:58:c9:79:be:20:be:74:78:1b:28:
b2:1f:f3:77:18:5b:88:bc:1c:aa:0c:a9:8a:b8:7f:
a5:eb:c4:3b:b9:76:a4:c7:dc:e5:27:6e:7e:88:6d:
a8:f8:27:e9:e8:b4:2e:fd:c2:63:61:61:2f:4a:5b:
ee:d3:be:c8:e8:75:89:2b:02:68:67:17:c4:4e:fa:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:7D:65:9C:87:00:9C:01:DC:86:A6:F8:D2:A4:1D:80:BB:48:6F
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:86:98:3d:18:57:ee:4c:0a:02:9e:12:fc:c2:c4:64:2b:c7:
ab:a9:7f:1c:11:5c:7e:6e:f6:82:62:ce:a9:8e:76:f3:79:24:
3d:28:32:46:b4:d8:76:29:80:d6:c4:a5:95:d7:9a:30:00:8b:
56:e6:26:54:71:d2:ea:b6:1a:5e:4f:b4:a3:25:3b:d2:e8:30:
8d:b6:b2:49:f9:ca:66:68:88:57:f9:24:d3:6c:04:22:44:e3:
40:70:ec:e9:64:8e:d0:87:8e:87:f9:d8:65:68:55:b0:59:4e:
56:7e:27:17:10:22:2b:20:89:81:5f:d2:71:63:92:95:0a:d5:
8e:62:a4:54:c4:e0:1e:4a:64:2f:d7:a1:05:d1:fd:1b:e4:fd:
c1:42:0a:83:85:ac:f6:29:40:26:33:ab:e2:1d:9c:18:fe:62:
fe:2d:2f:81:7f:f3:9e:4b:03:01:b1:bb:62:9e:25:b4:be:00:
f6:27:ab:b4:d3:42:b3:77:42:0b:6d:a5:f4:c5:0b:61:96:9b:
a4:7b:38:6c:07:23:cb:5e:6a:77:d8:e3:83:60:dc:08:13:a1:
c9:38:90:6d:b1:5c:3d:a4:22:cb:76:4a:ba:bd:9c:9d:2b:04:
d0:73:8a:76:45:5f:f2:d6:35:c9:c6:75:a2:e8:99:f9:94:59:
79:02:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:44 2025 by rpki-client