Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: 0jbrEzBPU+rDYz99aOsMY+TZiXeaxd+WnCaFaJcx2ro=
Subject key identifier: 77:5D:BE:16:7B:90:2A:91:55:0B:1C:D8:46:CD:A8:3D:EF:1C:19:FB
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019684DA739948BE92F1F0F122965344AF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1530
Signing time: Wed 30 Apr 2025 04:00:31 +0000
Manifest this update: Wed 30 Apr 2025 04:00:31 +0000
Manifest next update: Thu 01 May 2025 04:00:31 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: MVSfnZnJGPUFQjOEYOrtLXZeLAUoqQX65LMXqDU/3ww=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:73:99:48:be:92:f1:f0:f1:22:96:53:44:af:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Apr 30 04:00:31 2025 GMT
Not After : May 1 04:00:31 2025 GMT
Subject: CN=775dbe167b902a91550b1cd846cda83def1c19fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:2e:f9:aa:08:b3:a3:a7:cb:a8:12:18:a5:
3c:16:57:11:f9:42:ca:8d:e6:d3:04:85:b4:dc:55:
61:4b:f8:3e:bc:87:d3:7f:c1:4c:26:fc:5a:82:09:
f6:9a:78:81:88:41:09:2d:c0:ac:7e:bd:8f:36:83:
bc:97:53:83:75:40:22:1c:da:9b:df:bc:1e:2d:db:
0e:8f:0f:bd:47:02:f9:04:67:3a:d0:d6:43:97:8e:
4f:9f:19:38:ff:c0:d0:e3:15:1a:b2:a9:1e:d0:7e:
30:f8:6b:8f:7d:c8:f9:ad:31:17:6d:03:17:3b:0e:
38:93:e3:dd:16:0d:f1:3f:fc:2c:16:1e:9e:fe:7c:
7a:3c:ae:63:4e:f9:87:42:ad:f9:16:24:84:ab:96:
ef:53:6a:43:3f:a8:9f:20:cd:0d:17:a8:c1:0a:bb:
4e:2b:a5:18:70:a2:29:c4:74:11:36:9f:bb:d1:35:
71:d9:60:64:83:75:a0:61:65:a4:9d:9a:de:f8:69:
00:29:e6:f2:0b:70:3b:7d:ab:ce:41:38:9b:4a:ff:
ba:1d:ef:57:60:55:ab:b5:1c:50:5b:29:ff:17:91:
7a:a7:5f:8a:7d:f7:ff:3f:5c:e5:d3:27:a0:4b:36:
93:f6:d4:c2:85:83:9b:6d:73:9e:b7:9d:fd:7c:20:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:BE:16:7B:90:2A:91:55:0B:1C:D8:46:CD:A8:3D:EF:1C:19:FB
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3c:e7:4c:c9:a7:c1:a0:36:c3:42:10:4c:81:dc:66:a2:a5:
1c:c8:50:f1:7d:eb:2c:52:74:b0:5d:06:44:13:30:64:3f:00:
95:1f:18:30:97:e0:9e:33:52:77:3a:3d:b8:0b:72:ee:c8:01:
6c:8b:51:08:6f:0f:b8:6c:68:90:d1:7b:e6:ee:20:6b:23:af:
9a:46:16:80:93:a7:90:d1:d7:36:6c:ab:a1:95:1f:02:bc:7d:
db:39:f8:47:93:fd:f8:da:2e:5b:e7:7e:a9:05:b3:8e:6c:dd:
30:3c:7d:88:c8:d2:5c:2b:37:cc:3f:24:59:d3:e8:e5:e7:be:
99:30:23:16:a0:e9:47:3e:fd:95:fa:0d:cc:5a:fc:22:21:06:
85:66:70:7e:c9:cb:4f:f4:2b:51:25:90:38:67:f6:51:ac:f6:
1f:6a:49:c4:94:09:1a:b5:b0:e9:9f:b7:c5:d1:6e:a6:d7:e7:
b9:3d:25:e3:5b:2b:a7:ad:5e:3c:5a:5b:2a:f5:20:0a:85:f5:
b7:d1:82:ac:e4:73:bd:a4:c5:83:35:04:f2:ab:eb:e4:34:fe:
52:bf:68:55:85:4d:12:b3:01:36:e3:58:f2:76:68:1e:f2:ac:
77:91:e5:96:42:a0:26:12:0e:2d:0f:93:1b:e6:6f:04:99:a4:
3e:da:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:25:09 2025 by rpki-client