Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: ejliyYsEBjqm4KO9CWI8hjTgZ/19pS+ooEanjIQuAzs=
Subject key identifier: EC:BA:5C:FA:F4:E8:AC:08:B9:5D:00:C2:B5:23:95:3D:2E:3A:8C:EC
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 019674548140804A91AFB35613B77F87C6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0585
Signing time: Sat 26 Apr 2025 23:00:17 +0000
Manifest this update: Sat 26 Apr 2025 23:00:17 +0000
Manifest next update: Sun 27 Apr 2025 23:00:17 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: VoSRLilMXQpvtzsGeJSXE89r3p/GYA4Y7B38cEOHjXE=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:81:40:80:4a:91:af:b3:56:13:b7:7f:87:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Apr 26 23:00:17 2025 GMT
Not After : Apr 27 23:00:17 2025 GMT
Subject: CN=ecba5cfaf4e8ac08b95d00c2b523953d2e3a8cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:f9:41:89:96:b7:72:b4:03:67:96:bc:84:
43:fe:2e:2d:06:82:b8:2c:21:76:74:7f:36:00:22:
65:32:5f:ab:98:6e:5c:03:41:a7:cd:c5:0a:d6:8f:
dc:ca:d9:1b:a3:6e:fd:01:94:d4:6c:ea:12:6c:6c:
5d:4d:e6:75:35:49:e8:be:f4:7a:f4:0b:de:9b:e1:
8e:22:30:73:f1:70:11:b8:1d:b9:99:b7:3f:1d:7c:
b1:dc:47:17:7a:88:10:d3:78:50:51:a6:52:59:0f:
79:b6:6e:29:16:e0:7d:0e:12:81:4b:98:3e:5a:6b:
c3:57:1b:24:7f:06:3f:15:43:03:e0:ad:70:88:05:
a0:b0:85:f8:cd:ac:82:f9:09:e4:8a:af:f6:b2:d2:
7d:d0:0b:b7:5b:78:90:10:fb:f2:4f:00:bd:de:85:
86:68:f1:ae:9c:1d:2e:f3:fc:db:7b:46:71:fa:3b:
86:d6:0d:bc:b1:10:b4:c6:66:de:b2:6c:b3:fb:69:
89:6e:e7:58:11:d3:eb:27:b8:bc:a7:44:5b:9c:a8:
99:ab:3f:db:63:68:1b:90:8a:37:8b:ce:f6:1b:86:
7a:fd:5b:48:ea:4b:e6:fa:93:22:2a:df:00:96:41:
76:93:fd:6f:a8:db:ed:58:a8:cf:d6:4b:c3:75:67:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:5C:FA:F4:E8:AC:08:B9:5D:00:C2:B5:23:95:3D:2E:3A:8C:EC
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:36:ec:06:23:11:0f:7a:b3:7c:71:3e:42:40:1c:91:81:
18:f5:1d:cd:ee:ab:df:fc:1c:8c:a5:5d:a3:50:55:36:08:c7:
4e:e6:06:3f:9a:ac:f1:69:2e:ee:33:7b:72:82:c2:9e:98:4e:
41:55:72:ca:b2:79:54:4d:46:ec:6b:d8:89:35:13:be:aa:71:
72:ae:d2:54:45:92:0f:59:e5:ba:ee:9a:82:1f:2b:12:62:c2:
2f:f1:8f:d2:49:37:4b:4e:01:e2:82:4d:2c:ca:35:26:65:86:
b3:e2:1e:80:61:d5:0a:67:97:08:11:a2:6c:36:35:ac:74:96:
a5:74:9a:a0:a5:f7:a7:b0:15:ea:b4:9b:ac:82:0f:21:37:b3:
12:e0:d2:de:a2:d2:35:e8:c2:09:3c:8c:d8:9c:8c:01:3d:ae:
88:0d:f7:8f:f7:2c:a0:5b:a6:a5:99:ad:f3:be:57:3d:9a:6e:
49:10:df:5b:ea:f5:84:70:10:dc:ed:1a:68:59:85:7d:fc:f0:
8e:b6:d7:e9:7c:49:bb:39:86:ef:00:ca:36:6e:c8:86:81:0d:
a1:0b:f8:7b:63:32:f8:b0:d8:1c:9b:22:ff:de:0b:2d:3e:2d:
6f:57:21:18:a2:34:f8:82:ca:80:4b:e5:c9:2f:b8:a0:b9:a5:
d3:9f:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:51:14 2025 by rpki-client