Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: 9geWLLSvc6Fv2J2cniQs9wlhwgu6ZwIh0Q0IAULk4BE=
Subject key identifier: 59:90:E9:84:CF:E4:25:3B:D5:5E:A9:3D:A0:05:C7:04:26:31:9A:C0
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 019682EBDD0FE4E0BF97080C49A472D3C349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: 46
Signing time: Tue 29 Apr 2025 19:00:17 +0000
Manifest this update: Tue 29 Apr 2025 19:00:17 +0000
Manifest next update: Wed 30 Apr 2025 19:00:17 +0000
Files and hashes: 1: YfJtBuAEzwrAwSN_J7xGNSKCjCE.roa (hash: XmpRYRo5Vs4yfW8P8k8ClzDTbvhLktOQ+0fCN4Fj/SI=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: WGAxhAMAsX2h1E86tV/whP+jVeyrM27zYOOlUl5DzjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:dd:0f:e4:e0:bf:97:08:0c:49:a4:72:d3:c3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: Apr 29 19:00:17 2025 GMT
Not After : Apr 30 19:00:17 2025 GMT
Subject: CN=5990e984cfe4253bd55ea93da005c70426319ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:4f:98:79:67:97:f8:18:34:ee:25:85:da:
1b:d0:ed:c0:60:de:da:db:eb:cf:4e:64:8d:b6:6f:
24:aa:34:38:7c:c3:b7:7f:03:bf:12:30:78:df:a7:
13:6b:e6:c4:e8:af:b7:24:a6:7d:8a:74:8c:6c:d0:
3a:ce:50:85:2e:00:f6:82:c5:80:e0:65:31:ea:67:
a3:4e:50:c9:e0:04:22:40:cc:de:9a:52:e3:0d:d6:
cf:b8:47:33:88:78:28:d5:bb:a4:bf:bf:31:8d:81:
b7:f6:76:47:af:a3:2a:e1:54:3a:70:60:3c:8c:b2:
bb:9d:1c:b6:9d:a2:46:c5:0d:e6:8f:ef:b9:57:9b:
6b:8f:4f:eb:04:9c:b0:04:71:5a:01:14:d8:26:48:
e7:d2:c6:3e:3b:c0:f3:bb:90:8d:fe:be:7e:76:48:
d0:0b:bc:97:dd:5f:e3:e7:52:c6:d5:84:80:1e:26:
c1:d2:b9:6e:b4:b3:6d:6d:f8:53:3e:3d:c8:f9:ab:
41:c6:77:51:50:fd:1e:d9:29:39:7b:27:f7:2e:66:
ad:04:c4:4b:66:72:25:5b:33:00:14:ed:30:23:05:
b4:48:b0:59:8b:52:00:93:ba:91:d6:e2:38:6e:2e:
ee:d4:8b:cb:2f:b9:e3:8e:cf:4e:45:10:79:00:2e:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:E9:84:CF:E4:25:3B:D5:5E:A9:3D:A0:05:C7:04:26:31:9A:C0
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a1:41:e4:bf:78:e4:91:c7:3d:8e:a8:f8:76:94:87:20:30:
08:53:06:17:22:b8:b7:1a:e1:c7:1b:f0:19:03:b7:4b:0f:cd:
fb:e6:e5:2b:a3:c7:32:ed:7c:66:03:c1:26:52:5a:00:6d:3d:
69:e0:5a:79:e1:de:88:44:61:61:09:11:bf:e3:cf:a8:94:30:
51:dc:0d:31:c1:42:49:ea:a8:0b:30:f0:61:77:2e:74:c2:70:
6e:e2:a1:43:4e:25:74:2f:1e:a7:ad:4a:4e:5d:a2:cf:08:ac:
27:df:52:af:fb:dc:9f:30:16:68:ca:cb:20:af:f3:3c:0d:46:
2c:56:85:ce:03:72:36:ed:6c:76:e3:6c:57:91:cd:09:2a:ad:
46:d3:d6:7d:8c:38:97:42:3a:26:c1:8e:3a:14:d5:b0:4f:0a:
26:c8:fb:25:4d:f6:b4:66:0c:41:02:d8:2c:75:e5:c0:53:ad:
48:67:52:fb:37:9f:41:9f:df:7c:38:cf:da:65:b2:64:4e:94:
0f:ef:d1:7e:38:9f:29:4c:de:49:03:f6:9e:60:5d:07:e5:8e:
c4:75:5b:a2:4f:8f:e4:0a:76:aa:8f:94:0e:d6:6c:9c:0c:a7:
e3:e3:9a:d0:ab:01:19:b6:e7:25:1b:9c:f7:17:7a:fb:48:98:
26:d4:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:31:04 2025 by rpki-client