Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: OXMT8H+1YAr6u+P0rPdR99LDFlHePC16PS2mcwuE/xs=
Subject key identifier: 1A:C1:BF:AA:B0:15:8A:CA:E1:11:5A:DD:60:EA:F5:EC:89:DE:11:9F
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 019681D99C48E49E6241486FC8C1D8FD7074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 14:00:44 +0000
Manifest this update: Tue 29 Apr 2025 14:00:44 +0000
Manifest next update: Wed 30 Apr 2025 14:00:44 +0000
Files and hashes: 1: UkowmR7j8dX0saZm2LcqRKWc1As.roa (hash: GBF5K+d4pg2yE1Y/OoUy9KgNyBcuaLjAQkgdpqJHVgo=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: Q0stlwMLSxShyprmCoOLMMgjAekZp652qU59KfGStsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:9c:48:e4:9e:62:41:48:6f:c8:c1:d8:fd:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Apr 29 14:00:44 2025 GMT
Not After : Apr 30 14:00:44 2025 GMT
Subject: CN=1ac1bfaab0158acae1115add60eaf5ec89de119f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:e8:ef:42:b4:76:8e:56:07:df:fb:9b:68:
2f:27:ae:47:4c:bd:cf:cc:23:7b:6f:42:50:0c:38:
fe:1d:b1:c0:ad:9a:1c:c9:15:fd:49:12:c4:4f:8e:
e8:a1:8d:1d:ab:cf:4b:0c:04:84:c5:ff:f5:e2:a3:
df:2c:c4:7c:24:4d:66:11:1e:7d:c9:90:ca:72:79:
f1:93:4a:23:d8:18:f9:59:da:0a:28:09:46:c6:35:
ee:80:62:b3:87:a5:33:70:59:74:35:c9:69:91:3c:
f4:28:78:2b:4e:76:d1:01:52:1e:42:4a:9c:8c:d2:
0a:b1:37:b3:51:04:81:34:27:92:3f:e6:21:6e:51:
6f:3f:d2:69:23:8d:79:ba:ca:24:4e:ac:3f:29:65:
a8:aa:18:e5:2e:4d:5f:32:dc:3c:6d:f2:15:06:8a:
8d:db:40:28:a9:e6:da:87:43:75:11:8a:7d:1c:50:
73:7f:a4:a7:76:64:0c:db:ce:76:28:80:2f:69:f0:
88:39:51:c9:38:0a:b1:6e:01:5b:c4:bc:2e:89:55:
95:5a:19:0e:46:69:05:4a:75:a5:11:82:ce:6f:68:
6e:03:45:fd:c9:2d:e3:a0:6b:16:1c:0b:ad:2f:c6:
a0:32:2e:72:24:9b:3b:6c:89:39:65:68:31:d1:ee:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:BF:AA:B0:15:8A:CA:E1:11:5A:DD:60:EA:F5:EC:89:DE:11:9F
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:01:f8:a9:ff:87:c3:3c:30:f1:87:29:ba:3e:32:a9:73:1b:
a9:13:67:e2:24:f4:92:ff:9a:87:8d:6d:50:8e:b7:25:4f:99:
06:08:8e:0f:af:e4:31:e8:c9:e1:77:ed:1a:67:e0:83:a1:35:
66:b6:9a:f9:ac:45:ce:9d:ba:de:00:24:1a:34:67:30:ea:28:
4a:27:55:d2:1e:ed:de:ad:cb:06:2e:df:c4:f4:bc:e3:71:a4:
b5:60:8c:1f:67:69:07:7b:43:4f:79:cd:6e:fa:7f:54:5d:bc:
e0:f4:6a:7a:0d:5f:87:be:15:7e:1b:99:56:07:55:ef:ef:9d:
a0:59:b2:19:dc:f7:9a:31:31:3a:a9:58:f4:5a:86:1a:f4:2d:
47:21:9d:b8:f9:f0:db:ac:b7:db:04:09:51:bc:d6:4f:e3:03:
32:0b:8a:a7:5c:1f:51:c2:49:a9:5a:48:0d:0a:8f:ee:4a:61:
a0:ea:41:46:b4:98:ea:27:eb:68:d9:03:7f:5c:d5:d8:df:d8:
a1:30:b7:a5:b7:85:68:d7:30:96:1b:8f:bf:d3:c2:71:f3:33:
8f:b6:77:7b:7a:9c:eb:e8:1c:45:34:bf:ae:6e:dd:d7:b3:32:
52:ca:0d:88:34:a3:56:dd:e9:75:a7:6a:44:bf:53:a7:4f:02:
15:a5:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:08:30 2025 by rpki-client