Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: rchYGqFsdrm5vUoqFIXIRhyzMtvdWLr0MLUFt51JWiQ=
Subject key identifier: C1:99:65:0D:5D:C7:37:4C:39:98:5E:99:B7:1B:E7:49:5D:84:8A:6C
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 0196BF6F229AC1517CD0A5E4525D388AD9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 9E
Signing time: Sun 11 May 2025 13:00:53 +0000
Manifest this update: Sun 11 May 2025 13:00:53 +0000
Manifest next update: Mon 12 May 2025 13:00:53 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: dcgi6bxBEUmP6f4KYm/cF8op5qb9Ck03qkdtcdXcuhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:22:9a:c1:51:7c:d0:a5:e4:52:5d:38:8a:d9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: May 11 13:00:53 2025 GMT
Not After : May 12 13:00:53 2025 GMT
Subject: CN=c199650d5dc7374c39985e99b71be7495d848a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:6e:c7:17:7e:d9:4e:df:0c:12:c3:29:98:
f1:50:55:3a:7f:ed:a4:24:e1:ff:ce:ed:4b:a1:13:
55:48:70:75:0e:e7:8a:2f:b6:5d:c2:54:39:d1:46:
2f:05:03:97:55:be:2d:91:7d:70:49:e4:ff:c9:1b:
dc:f9:18:b0:b8:ba:0f:b7:b4:27:3b:c6:cc:6d:2b:
cf:cc:e6:33:00:3b:67:75:d6:3f:46:04:16:1e:d2:
84:73:6c:27:d9:11:31:68:70:d5:e0:70:90:ef:b7:
ec:ad:9a:00:aa:e6:ff:dc:1c:e0:35:63:36:f4:25:
5f:f7:d0:78:61:6f:f5:bc:61:f5:6e:5a:65:4b:77:
7d:be:56:f8:e5:31:76:cb:5a:cc:16:83:22:f0:09:
50:83:4c:86:69:3f:c5:6c:b5:12:db:a3:3c:cb:a2:
4b:1c:67:54:ce:c1:fa:4a:fb:87:5b:43:82:35:65:
d4:37:22:d9:f3:fd:c4:18:94:e5:f0:0d:a5:bc:18:
13:41:4b:a5:81:92:86:ca:61:bb:61:ac:14:6f:d6:
da:99:65:05:1b:7c:91:4c:7e:8e:2d:af:30:5c:ef:
86:f3:90:48:70:d0:47:7e:f3:d9:ec:48:68:91:95:
85:df:6f:16:a3:73:ac:e9:43:6d:df:92:c5:39:16:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:65:0D:5D:C7:37:4C:39:98:5E:99:B7:1B:E7:49:5D:84:8A:6C
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:71:bf:28:bb:e1:70:02:f2:e1:a8:2f:db:46:d0:0b:be:9a:
cc:95:e2:60:8f:01:ed:db:02:6b:ce:99:d1:e3:2a:3b:bd:02:
42:19:63:d4:f2:74:25:08:71:5c:ae:a3:85:d2:69:cb:24:f0:
4b:24:9b:3b:2f:a2:bd:36:e3:fa:a5:47:8e:5a:8c:b8:44:9e:
f4:2a:4c:ad:0a:8b:d9:37:04:17:3a:01:13:96:ca:3e:f8:6b:
be:10:ba:84:ee:a5:83:fa:7a:18:38:04:18:e2:21:18:a0:d3:
d5:c0:bc:8e:30:df:cb:db:18:f6:a6:2c:6e:38:2a:7a:59:6e:
de:34:ba:07:2e:3e:38:b3:c4:10:ec:0c:8b:f4:a5:f3:15:d5:
82:f0:a8:a9:40:b4:78:bf:0b:9c:9e:d9:18:a1:5c:0f:0a:c6:
a6:10:15:fb:39:3b:f2:6c:b4:6e:c9:ab:79:74:de:59:a7:c2:
da:52:55:e0:8e:45:9b:d0:2f:02:8e:49:04:7a:bd:0f:d9:7b:
27:60:35:40:56:a9:40:88:30:fc:5b:b3:e3:91:e1:c5:fc:85:
42:ed:a7:29:d3:b1:ff:84:b0:f3:0f:a8:80:fd:22:96:3b:82:
9d:ba:11:e7:e8:25:5e:b0:08:05:33:04:db:12:d8:8b:1d:84:
a7:2e:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:04:53 2025 by rpki-client