Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: uwm7ws1sIJUZ8QJuYGZRMceVynJLt9F4kBKrxg/ShaU=
Subject key identifier: 86:2E:18:83:9D:8E:CE:15:1A:66:5F:63:9B:0D:EB:8B:38:04:87:A5
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 019676B0B3835343F2517E4C25FAA1496EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 0375
Signing time: Sun 27 Apr 2025 10:00:13 +0000
Manifest this update: Sun 27 Apr 2025 10:00:13 +0000
Manifest next update: Mon 28 Apr 2025 10:00:13 +0000
Files and hashes: 1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: ++uTTFd4TNu1zpeYbJI7uiYr4IBkPsEEp0r2vC/Pvkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b3:83:53:43:f2:51:7e:4c:25:fa:a1:49:6e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Apr 27 10:00:13 2025 GMT
Not After : Apr 28 10:00:13 2025 GMT
Subject: CN=862e18839d8ece151a665f639b0deb8b380487a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:f3:0c:1b:7c:b5:63:7b:36:b5:a4:b7:9b:
c4:7e:2a:aa:d5:66:e5:27:46:4b:e1:a9:9d:e4:c5:
79:34:13:aa:30:6e:b6:de:69:08:3c:11:69:ad:37:
f4:14:ce:54:43:43:dd:30:4f:69:a8:36:c2:44:1e:
9e:f0:80:81:07:8e:9d:35:db:b2:5b:94:e7:0e:bb:
01:01:f6:80:81:1f:a6:4f:fa:64:74:4e:a0:97:fc:
82:7c:5c:12:54:3f:e1:eb:56:73:32:f2:a1:19:36:
bb:99:87:24:53:8f:fe:49:e7:19:b4:e6:31:f5:14:
7e:7a:81:9e:4a:5b:9d:b3:21:e9:a3:9a:a0:b9:6e:
55:9b:99:63:e8:4c:4b:f0:0b:96:24:27:cd:7f:3a:
75:bd:6f:2a:68:e4:72:c3:a7:9f:ca:da:cf:7b:ec:
30:24:b3:c3:55:7a:e9:6e:6e:35:98:77:a1:bf:da:
a2:5d:20:d1:d8:d7:1d:76:84:4c:66:15:f5:74:27:
5d:8e:5a:91:eb:9f:e4:30:35:47:9a:53:a9:5a:e6:
e1:8c:d0:da:ba:81:3b:b7:93:b4:fc:60:96:ef:1d:
42:f5:6a:5e:aa:29:44:e9:44:22:60:ae:66:ec:c5:
10:a0:47:91:07:e4:37:2b:0a:88:61:76:66:be:db:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:18:83:9D:8E:CE:15:1A:66:5F:63:9B:0D:EB:8B:38:04:87:A5
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:d2:f6:87:10:2f:07:3c:a4:4b:cd:80:22:60:b8:5a:04:
c8:fa:5b:47:5d:65:e9:be:47:65:03:ad:fe:e0:57:f8:88:17:
68:53:22:5b:49:c5:88:85:40:6a:ac:68:10:14:13:01:a4:51:
fb:b3:a9:dd:39:95:06:f3:b0:e6:09:6e:95:f2:34:31:ee:57:
5b:1c:41:76:e9:ef:6f:ec:48:ee:c8:2d:7f:2f:2c:1b:5e:1c:
52:5d:f4:a8:83:9a:52:c1:45:cb:8e:ff:cf:29:15:1e:08:df:
e1:28:23:f7:ed:91:b1:a0:48:a7:79:fe:77:3c:4d:40:24:55:
bd:d0:7e:2b:61:f2:67:cc:6c:70:39:29:ea:60:b1:9b:73:fc:
5e:e9:75:c7:78:57:e1:db:e6:19:76:9a:cb:78:bb:ad:7d:8a:
84:62:5d:a6:ee:c1:6d:74:cb:67:e0:65:2b:bc:70:17:a8:80:
13:d2:ee:e5:3c:2f:5d:69:c3:50:1f:ba:d5:ff:85:83:58:b0:
c7:3a:aa:fc:30:29:34:67:8c:1c:25:26:3d:9b:a5:54:15:38:
51:65:31:49:cd:3c:76:f9:20:f9:b7:97:27:04:61:c0:ca:fa:
da:3b:db:61:4d:db:f5:f8:35:c7:5a:b5:17:a1:68:10:08:a5:
83:de:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:08:48 2025 by rpki-client