Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
File: WqZ_80-Urvw6VNVIfAtItN-6DII.mft (raw, json)
Hash identifier: 9QFwYMK2COvB3d2Ozkj63G3PO4aEEFsbbPWVlGZ8cSo=
Subject key identifier: 47:08:A7:64:00:29:8B:D7:D8:A3:DF:96:B2:88:D8:F1:EC:12:41:F1
Authority key identifier: 5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
Certificate issuer: /CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
Certificate serial: 0196A2092E85693FF8E4105CD7F2DCFAEC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
Manifest number: 0ED2
Signing time: Mon 05 May 2025 20:00:32 +0000
Manifest this update: Mon 05 May 2025 20:00:32 +0000
Manifest next update: Tue 06 May 2025 20:00:32 +0000
Files and hashes: 1: WqZ_80-Urvw6VNVIfAtItN-6DII.crl (hash: kVjwknz5E+jtutpCnItAMK60uJVBcLbL1bal+3aC4q4=)
2: depCEchOEDSTxB-t7sFwEnJVYFU.roa (hash: 4VUgeeM9jgJLmxqt9ZkedCI0PpL/veNIwfgv+hW4muY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:2e:85:69:3f:f8:e4:10:5c:d7:f2:dc:fa:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
Validity
Not Before: May 5 20:00:32 2025 GMT
Not After : May 6 20:00:32 2025 GMT
Subject: CN=4708a76400298bd7d8a3df96b288d8f1ec1241f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:c8:dc:12:aa:b9:a7:ac:5b:84:1c:a4:c1:
70:f3:06:14:53:80:0f:4b:03:29:0f:dd:90:3d:fc:
6c:66:db:24:2c:09:6f:d0:1d:87:79:f5:09:63:c8:
9f:1c:4d:4a:33:9d:c3:e5:bb:df:a8:e6:82:bc:dc:
4e:77:eb:d3:ac:ad:a9:3b:4a:13:1a:6f:4f:01:7e:
d7:20:d1:0b:94:84:56:12:36:74:57:10:69:d4:7d:
12:99:67:ed:74:cf:68:14:fc:33:48:34:dc:a2:d8:
82:4f:b0:60:2f:d7:c4:f1:3f:f8:26:c5:85:57:88:
5f:db:05:2f:23:c8:15:5f:b7:42:d1:6d:81:0b:65:
c9:64:74:1e:b0:80:0e:20:6e:c4:27:04:8c:74:a9:
54:24:ae:b1:fd:a9:09:47:c2:d1:3d:be:95:01:ce:
91:19:70:79:d3:10:8a:e3:14:0b:7c:41:06:f6:ed:
a9:b4:3d:67:bb:db:f4:d2:59:72:5d:4f:d5:4d:19:
2d:7b:d8:f9:fe:d3:9b:79:27:93:d4:0e:50:91:24:
29:6d:c6:36:8c:1b:2a:05:29:13:15:cf:c0:d6:77:
e8:2d:1b:5c:e8:b0:4d:56:3a:95:9d:04:51:79:d1:
53:e2:b5:22:3e:99:62:0f:e2:74:97:13:f9:cc:18:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:A7:64:00:29:8B:D7:D8:A3:DF:96:B2:88:D8:F1:EC:12:41:F1
X509v3 Authority Key Identifier:
keyid:5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1e:70:78:48:d5:6a:b5:ff:ba:7e:35:6e:ee:09:e8:61:2a:
01:11:a3:f7:0b:74:86:98:34:05:e3:da:74:8c:a5:cf:cf:15:
ce:04:77:39:f0:96:21:29:3a:da:2e:b0:68:9b:06:76:0b:a8:
5e:63:dd:d9:cc:90:0c:25:0a:6e:73:de:32:ac:60:2f:de:28:
4b:66:c9:39:7f:5e:ae:ff:70:b7:19:8a:dd:86:23:68:4f:c6:
93:b6:ce:ac:cd:91:7c:22:7c:cc:7a:b0:2f:51:91:5e:f9:31:
58:12:cc:cf:79:fc:9c:fb:cb:64:c2:ff:de:98:45:8e:5e:15:
c3:3b:25:07:18:45:b9:34:29:81:75:e1:f0:44:b8:b3:35:3d:
fe:78:39:0d:d0:5b:26:36:ee:90:f2:fe:29:b7:2f:8e:4b:51:
04:aa:e6:e2:58:63:03:62:5a:13:eb:89:19:96:76:8f:30:4d:
b6:6a:f3:f7:d3:2b:33:21:5d:e9:c4:79:1c:63:52:28:44:0a:
fc:28:31:ce:16:47:08:1f:6d:67:14:81:29:c6:1e:ca:48:e4:
ee:1d:f7:32:b4:72:fc:44:17:d7:33:3c:37:82:99:0b:57:d3:
a6:0a:8d:b3:3d:94:33:ed:5b:91:1d:be:16:46:8f:fc:78:7f:
ed:62:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:57:38 2025 by rpki-client