Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: haw1CqT8/D1ACubFJPrCBzMcQ4Mb6Sy6wxOtBppqpVU=
Subject key identifier: 04:C2:DB:49:CE:6B:2E:6B:ED:CC:54:47:EC:2B:93:FC:64:71:A6:01
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 01968E15147BD7E0EB57A90D9C52BEE4E2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 07E7
Signing time: Thu 01 May 2025 23:01:08 +0000
Manifest this update: Thu 01 May 2025 23:01:08 +0000
Manifest next update: Fri 02 May 2025 23:01:08 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: KRZPOCQ2zNHsu+35iSdf7g3uyx1fn7oS37tAlKnyGhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:15:14:7b:d7:e0:eb:57:a9:0d:9c:52:be:e4:e2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: May 1 23:01:08 2025 GMT
Not After : May 2 23:01:08 2025 GMT
Subject: CN=04c2db49ce6b2e6bedcc5447ec2b93fc6471a601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:63:97:a5:8c:ff:2d:6b:5b:35:96:e5:2c:
10:85:90:50:a9:f0:1d:94:b6:bb:e1:e5:71:06:8c:
7f:0c:52:0c:dc:5c:84:ca:25:d1:44:76:00:7e:1d:
d0:d0:48:92:0b:f9:01:f1:19:b4:70:52:df:35:66:
c9:e5:9c:28:0c:a6:04:2e:fd:18:9c:c3:63:3c:b5:
14:e2:9d:29:3a:20:2f:9e:cc:74:78:02:63:08:07:
3a:a6:9e:a4:a9:15:4b:a7:a5:4d:04:bc:84:ba:24:
48:8a:56:57:b2:3a:39:1d:16:be:a5:ff:38:0c:cd:
7d:b7:13:2a:0c:e8:8b:cc:de:f8:09:83:66:f6:b7:
53:0a:8a:76:14:89:1e:be:da:c1:0f:6d:cd:da:84:
9d:60:d7:37:dd:fc:98:e9:ec:fe:06:fc:6f:4d:3a:
09:2b:e3:d2:ba:7b:31:06:5a:71:3c:93:13:c3:75:
f1:b0:59:91:fd:b5:7c:8a:66:79:18:6f:9d:f6:a9:
02:d8:ff:37:c7:61:81:cd:f6:47:24:d9:77:0a:21:
f1:39:ed:0e:72:be:cb:b2:ce:67:4c:77:63:22:35:
d9:fd:18:04:4c:30:e9:3d:6b:d2:0f:52:4d:67:44:
60:56:7a:de:53:bc:5c:4e:88:5d:bd:6a:dc:53:3d:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C2:DB:49:CE:6B:2E:6B:ED:CC:54:47:EC:2B:93:FC:64:71:A6:01
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:71:b2:0a:af:36:67:93:cf:c8:d3:9a:9b:71:40:ad:7c:a1:
8d:21:1d:ed:cb:7f:7c:b8:e7:ab:8f:ee:bf:9b:93:ae:df:0d:
cc:09:f9:86:aa:55:16:aa:3b:14:68:e1:f0:5e:a8:cc:d1:54:
a0:3d:15:40:98:6b:48:12:9a:fc:c2:94:45:8d:90:6f:b9:75:
49:fa:11:e7:6e:bb:af:d1:da:a7:92:24:de:a2:f1:f9:a0:52:
a8:ce:4c:40:7c:98:07:4f:d9:d8:8d:b6:da:9b:50:0a:28:1b:
e4:b4:bf:a9:5a:ec:59:d3:90:e6:ec:65:6c:b1:c4:c4:72:6e:
8b:0b:b1:76:91:0e:4c:6b:3c:2c:3f:7c:b6:f9:47:c2:c7:af:
14:39:8a:07:eb:7b:6d:80:2e:78:c7:e4:8b:fd:e9:87:00:c9:
32:b4:b4:64:31:c4:74:c8:8f:2b:7d:82:65:53:ac:f3:29:7c:
5d:5a:d1:ff:54:30:5c:8a:e7:79:9a:0f:07:78:c7:52:2c:0a:
18:0d:e2:e5:bd:23:51:8e:b3:33:a4:5b:fc:9e:d9:67:7f:7a:
ab:0a:e0:b5:47:c7:9b:72:ab:80:a9:b1:0a:ab:cb:4e:4e:24:
6b:42:b3:91:18:16:36:8a:b5:2c:22:53:60:71:4d:c6:95:6c:
3c:26:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:38:55 2025 by rpki-client