Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: YbNp/0E13t0fspfpV530e4DDJlSb+lUhWbcgIxH8z9M=
Subject key identifier: 2A:95:1E:7B:B0:85:F3:20:20:8C:63:31:DA:C1:C9:AD:0A:5A:B5:00
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 0196C8A94483DDA423B2D4F5A58A5A67EDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0B9A
Signing time: Tue 13 May 2025 08:00:58 +0000
Manifest this update: Tue 13 May 2025 08:00:58 +0000
Manifest next update: Wed 14 May 2025 08:00:58 +0000
Files and hashes: 1: nV-HLk-vNtMZyXYUE8luuJv4468.roa (hash: 02+QZOjgpDh+SF+gzgnBzWxE50MSq+IOFGGOIUAQpsk=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: 9K4yhnUsi7SLgs8dC0ICU5UFPXFPbJFpxaRgxX93XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:44:83:dd:a4:23:b2:d4:f5:a5:8a:5a:67:ed:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: May 13 08:00:58 2025 GMT
Not After : May 14 08:00:58 2025 GMT
Subject: CN=2a951e7bb085f320208c6331dac1c9ad0a5ab500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:60:ce:d4:c3:94:18:52:44:45:ee:70:99:
08:84:6c:2c:3f:8a:c9:5b:62:d9:9e:e2:df:79:67:
df:b9:6e:67:cd:7a:af:ce:8d:ea:ab:4c:14:27:b9:
80:23:6e:76:0c:9f:50:0f:0d:ab:23:0f:3f:40:6a:
95:79:43:32:2f:03:26:a4:c3:c2:c3:4e:84:6f:0d:
18:c5:79:7f:8c:b6:e2:52:db:85:f4:f5:be:b6:d9:
c0:78:65:45:89:fe:0a:8c:0c:04:4e:07:83:6a:16:
1f:e8:60:ff:94:a4:0f:1d:1f:eb:af:cc:e7:05:28:
6f:3c:cc:6c:c4:0e:9e:25:3e:3d:13:d0:01:7e:63:
8f:a3:dc:74:a7:a5:82:b0:e9:ba:b9:e8:85:e2:e9:
c1:e1:64:c3:d3:7a:cd:82:53:01:8b:40:5e:26:91:
7e:cd:c0:cd:89:22:60:ce:8e:d3:52:4d:b8:68:8a:
b7:0f:19:8f:e4:39:6b:9a:97:1a:32:71:81:de:ac:
df:6e:ba:d7:20:f8:12:1a:75:46:ab:eb:ef:af:95:
e3:db:63:9a:70:28:00:8f:cd:fe:42:c3:34:1a:e1:
04:7b:68:55:23:c3:39:5a:eb:d4:7b:4c:0c:54:16:
74:f0:0b:50:b4:7f:41:5a:6e:ee:b3:ec:5a:37:87:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:95:1E:7B:B0:85:F3:20:20:8C:63:31:DA:C1:C9:AD:0A:5A:B5:00
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e2:28:37:0d:0e:79:cc:88:98:51:95:e5:13:bc:06:9f:dc:
bb:77:77:d2:ac:c5:63:d5:b7:20:d7:fe:d4:5d:94:d6:31:fa:
85:8f:52:27:03:aa:60:39:73:85:8a:04:0f:dd:e8:97:51:23:
38:76:0b:bd:46:1f:21:93:ea:74:a5:f0:0d:60:11:a0:61:db:
26:d4:ce:ce:f1:c8:c8:1d:1a:8a:08:a8:fe:79:48:cd:79:79:
93:6c:7a:f2:95:85:86:b3:6d:7a:2d:55:ae:a5:e9:f4:6d:f6:
53:c3:4e:e1:77:2f:05:52:c8:79:a7:c0:76:80:5b:a6:32:8b:
4e:62:85:3a:e9:57:ea:ba:7e:ca:5f:a7:6a:b8:da:9d:6c:6c:
09:e4:ae:7f:df:52:6b:6b:db:00:8f:64:d8:8d:a3:91:39:18:
0a:82:26:a9:1d:bc:df:6f:3c:25:53:90:ac:56:ad:98:5b:cd:
10:dc:58:e7:62:3a:8e:56:d3:48:45:f0:0a:3b:72:06:90:f4:
02:3c:70:5b:51:48:4d:42:4d:56:bf:d3:51:ae:bf:65:8d:55:
3a:df:aa:63:24:89:43:30:aa:22:df:8c:db:f9:98:b6:08:71:
b5:cf:4a:85:d8:71:f7:15:f0:0d:09:5f:9b:3a:60:3c:54:1e:
34:f0:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:03:45 2025 by rpki-client