Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File: wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier: YNj0DZBwqhSqmoeNFZq5cFonZaBMV8yVklqx9+ULE0w=
Subject key identifier: 2C:90:45:C8:FC:71:7B:DC:16:50:30:F3:BC:2B:8C:B6:04:3A:89:13
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer: /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial: 01967C7BD847AFA9E9A7455CA3B2A0F6AEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number: D9
Signing time: Mon 28 Apr 2025 13:00:13 +0000
Manifest this update: Mon 28 Apr 2025 13:00:13 +0000
Manifest next update: Tue 29 Apr 2025 13:00:13 +0000
Files and hashes: 1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=)
2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: CN/KY7FXElnIs/x1IJ8ibfn8WKdehDRXIUfJ6CIBGq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7b:d8:47:af:a9:e9:a7:45:5c:a3:b2:a0:f6:ae:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Validity
Not Before: Apr 28 13:00:13 2025 GMT
Not After : Apr 29 13:00:13 2025 GMT
Subject: CN=2c9045c8fc717bdc165030f3bc2b8cb6043a8913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:79:eb:37:46:a4:30:cf:92:83:cb:8c:19:
83:68:c5:f1:e4:4f:ce:fd:a8:9a:11:30:76:8d:07:
63:6e:e0:4d:cb:92:8a:64:0f:73:16:9e:e0:51:c2:
2f:7e:f6:8d:ad:c4:9a:ea:76:7b:2e:a0:68:30:d6:
30:37:ab:b5:93:85:5d:de:b9:de:bd:94:5e:09:f3:
e1:b0:68:36:e0:d7:a9:07:00:bf:12:c1:67:ca:27:
83:6d:ec:04:10:75:1d:ea:7c:81:bb:26:4b:ed:92:
5a:c8:bb:db:66:6c:3e:79:0e:a1:64:07:5c:bb:96:
24:57:3d:0a:90:a4:7b:da:33:cd:a7:24:b3:46:ba:
9a:dd:f3:55:7a:68:1c:9d:2a:0f:ce:41:93:1e:37:
0b:e1:13:24:3e:d0:8d:de:ab:cf:71:bd:8e:b8:b0:
65:c5:9a:63:04:a5:e3:bf:9a:4d:2b:ac:a5:35:e6:
16:4f:a1:f2:2c:67:b9:be:f4:3a:e1:66:27:bb:9a:
3a:62:60:2e:1f:fa:f4:90:51:20:91:87:a7:cb:40:
45:91:a2:f2:6c:63:dd:be:6d:a1:3a:41:e9:87:72:
fe:77:f0:77:8c:4c:0b:c3:c0:03:f4:1f:00:43:a0:
ed:ce:f4:e2:a2:41:27:9a:da:eb:a8:2d:65:b3:fc:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:90:45:C8:FC:71:7B:DC:16:50:30:F3:BC:2B:8C:B6:04:3A:89:13
X509v3 Authority Key Identifier:
keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:91:86:64:4c:82:d6:62:c3:2c:71:a4:f6:92:89:4b:9d:24:
c0:9e:e4:6c:ba:7a:ee:ff:af:40:e4:39:eb:f6:74:5f:e1:c6:
7b:17:d3:72:89:6d:fc:11:bf:72:64:3d:80:d5:85:ac:8d:74:
cc:2c:73:98:09:83:6e:8d:fd:3d:28:0c:22:10:3f:fb:cb:12:
3f:d7:0d:ed:05:65:04:88:55:5e:40:8f:f1:cb:08:c5:e7:87:
d4:fa:a8:f2:74:68:a6:b7:85:be:e1:57:54:9a:0a:db:0c:87:
fc:ae:87:0f:ad:4b:f5:83:7f:5c:5c:97:b2:cc:0e:f0:43:b9:
52:82:64:fe:0d:47:7a:ec:42:da:ed:53:de:53:fa:d3:2c:c9:
ab:6b:5b:81:e3:1b:3b:96:eb:f8:6d:2e:b3:de:70:89:09:d2:
88:64:5c:36:df:19:7e:f8:8f:8c:ee:b6:63:9b:ff:7e:9e:e8:
3d:62:11:2f:1e:29:f1:a0:5f:de:d0:73:9b:4d:6d:f9:49:0e:
7d:e1:75:9f:8f:18:2a:8b:8f:8c:7c:bd:9e:7f:90:25:f3:cc:
d0:b2:3e:93:c9:4d:96:82:36:2c:28:9a:5d:ff:70:bc:fd:aa:
ab:73:0c:87:55:f4:40:dc:32:d6:0d:fa:f4:83:f8:be:19:f0:
dd:01:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:02:33 2025 by rpki-client