Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json)
Hash identifier: dF+4i1wrHZh7huBEhxz09UZk1wY0DN18hcb8m0kgmaY=
Subject key identifier: CB:F5:68:A2:5A:9A:50:3C:4B:4B:4A:FC:F2:41:6B:DA:C4:7C:DB:75
Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Certificate serial: 0196748B67EB1074B73F0A27A69A1EEA4E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
Manifest number: 060A
Signing time: Sun 27 Apr 2025 00:00:15 +0000
Manifest this update: Sun 27 Apr 2025 00:00:15 +0000
Manifest next update: Mon 28 Apr 2025 00:00:15 +0000
Files and hashes: 1: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: /c/3NRyNfy+ikxBB547E8Vfa63CgbHcUF4mVdJqib4w=)
2: zpicEsTdAQH31s_U5VTklFFkx3A.roa (hash: F4NgHOhmdVZSO+9LtvSeSBchmLUaANtpy3YFPClVpoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:67:eb:10:74:b7:3f:0a:27:a6:9a:1e:ea:4e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f
Validity
Not Before: Apr 27 00:00:15 2025 GMT
Not After : Apr 28 00:00:15 2025 GMT
Subject: CN=cbf568a25a9a503c4b4b4afcf2416bdac47cdb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:a8:a8:7c:06:c9:92:0f:19:a2:6a:0a:d0:
0d:c2:05:d7:eb:1d:70:3a:b2:c5:39:88:a7:a7:be:
e8:35:93:e4:50:8b:48:ae:3a:8c:b1:5e:41:d6:ec:
01:bb:09:20:8a:42:9c:ba:87:53:a9:ec:e8:9f:aa:
7c:ba:ba:d1:66:86:94:9d:a9:10:3e:20:3c:a8:42:
72:25:cb:75:f4:7a:d6:e7:ce:cb:b1:74:78:ba:69:
7f:b1:3c:24:99:23:66:71:97:a9:3e:f0:4e:f5:ac:
44:1b:79:55:b9:fb:76:47:17:93:9f:c8:ba:4c:c4:
11:db:61:f3:61:80:5b:fa:98:e0:75:72:d1:8b:8b:
65:84:3c:cf:8c:48:f0:b9:4d:f7:3d:e2:63:35:ee:
22:3f:53:33:0e:73:a0:6e:6a:08:d9:27:c1:8e:f8:
03:38:bd:4f:b3:12:31:88:c2:80:23:82:a4:49:95:
88:ab:2a:ee:2f:f2:95:94:35:2b:9d:82:99:8b:0e:
18:e4:6e:97:95:d6:51:eb:bc:a1:d7:99:a8:f6:02:
62:55:b7:2b:f7:9e:95:e5:a4:ea:dc:4a:b7:d8:0c:
b0:18:14:6b:f7:28:a4:21:47:9f:71:ae:b0:06:b3:
d3:78:b4:5c:04:fb:5d:a4:29:4c:5b:a8:52:83:ac:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F5:68:A2:5A:9A:50:3C:4B:4B:4A:FC:F2:41:6B:DA:C4:7C:DB:75
X509v3 Authority Key Identifier:
keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:5e:74:0a:20:93:fa:1c:5a:fe:44:90:61:e9:ce:0c:6a:
de:08:bd:f3:70:5b:1a:51:9c:6f:ab:4f:2a:7e:da:8c:0d:8c:
99:7e:cc:6b:4a:de:99:19:29:33:13:3b:bf:64:97:a4:be:f9:
6d:b3:c4:15:9b:dc:47:7d:ff:36:59:fd:1b:b0:a4:95:79:df:
5e:d5:ad:f2:a6:0f:3a:f7:0c:33:b3:e1:d9:38:6e:a1:49:b3:
96:38:e8:cc:d8:e2:8f:00:75:f5:fa:a6:ea:6c:84:05:a9:ff:
62:c4:ed:3e:48:4c:91:a7:41:ff:90:96:47:59:7f:d3:46:d6:
f8:a1:85:3e:3d:29:f9:53:25:18:c2:6a:b0:88:ec:ac:22:03:
c4:65:0b:b6:5b:44:bc:81:57:65:fc:e2:3b:a4:97:01:1d:67:
51:61:4c:39:32:51:44:a8:8a:55:93:14:00:4c:36:a5:6f:62:
e8:e9:63:97:d1:9b:36:ea:cf:d8:f2:8c:24:e7:fa:14:ad:2d:
93:20:90:c5:ab:8c:07:b3:bc:21:8b:f9:fe:71:b6:ea:76:0a:
da:cf:c0:78:5e:aa:59:54:e5:5f:82:08:18:2f:88:5d:ad:43:
c0:5a:c5:c4:a0:9b:e4:ab:55:10:53:eb:1c:6e:96:e5:97:9b:
b0:04:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:37 2025 by rpki-client