Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
File: Wki138AUKmjDC9qsVQYD6eRdEIo.mft (raw, json)
Hash identifier: QLiBHeRyg3Yc00Oco/TVcxUICnZ7CQ5jUQJ9gNCkWps=
Subject key identifier: 8A:B5:D0:16:20:16:75:B1:E3:57:99:1F:84:EA:8C:42:40:B5:00:D7
Authority key identifier: 5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
Certificate issuer: /CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Certificate serial: 0196C427182A624B047073488665CFCE7856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
Manifest number: 0CA8
Signing time: Mon 12 May 2025 11:00:18 +0000
Manifest this update: Mon 12 May 2025 11:00:18 +0000
Manifest next update: Tue 13 May 2025 11:00:18 +0000
Files and hashes: 1: Wki138AUKmjDC9qsVQYD6eRdEIo.crl (hash: SiwZQvJVQgDz4QIIHKFh/apIGZTszYFclo1og7hpslg=)
2: qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa (hash: IfGwXhsO4LUshRhgsyNsDeEfXeX5DUDuXfY5jcbXNqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:18:2a:62:4b:04:70:73:48:86:65:cf:ce:78:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Validity
Not Before: May 12 11:00:18 2025 GMT
Not After : May 13 11:00:18 2025 GMT
Subject: CN=8ab5d016201675b1e357991f84ea8c4240b500d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:86:16:df:f7:85:33:37:71:2b:a9:3f:77:
e7:01:eb:29:ec:03:b3:41:fc:c9:20:91:6d:1d:79:
b3:22:bf:14:43:0a:16:e4:95:ac:fe:df:19:2a:06:
3f:71:a2:c7:49:7f:c5:5c:18:27:25:de:b4:e7:f7:
8b:53:fc:69:b9:0e:ed:74:dc:0a:67:ca:02:25:5f:
f3:62:4b:db:f3:e3:90:79:d0:7b:60:f0:67:c5:e7:
4d:76:2f:88:ba:d5:f7:d9:3f:67:57:1a:01:a2:01:
2b:61:ec:3f:3c:e3:6e:4b:21:d7:7e:b4:98:81:10:
bc:70:6d:40:ac:e1:8b:a9:d4:cd:ff:bf:6a:11:14:
7a:ff:b1:83:19:dd:46:1a:e7:0e:61:5d:3f:d8:7a:
07:28:22:67:54:e9:c8:40:d4:b1:11:bf:07:26:69:
f1:0b:4e:99:a5:f4:62:af:5f:05:a1:e3:ae:6e:99:
2f:df:59:df:19:ee:11:0a:ad:b2:ac:ba:74:9a:5b:
4f:38:4d:41:34:65:ec:9b:aa:61:93:7f:4e:81:c0:
a7:56:2e:04:98:c5:a1:2d:b7:99:73:ff:bc:d3:df:
d1:72:4b:29:84:7b:8b:2f:56:98:7f:3f:fb:4b:55:
fe:91:7d:bc:61:c0:0c:f0:a8:7d:1b:62:02:fa:2a:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:D0:16:20:16:75:B1:E3:57:99:1F:84:EA:8C:42:40:B5:00:D7
X509v3 Authority Key Identifier:
keyid:5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0b:f0:fc:75:92:4f:34:04:85:ee:f7:0f:7a:a7:04:07:ff:
26:ed:24:95:46:dc:02:84:3c:65:66:2f:0b:cf:6c:34:ef:45:
c2:77:18:a2:c8:d3:59:21:61:db:29:98:46:eb:6b:ad:d4:68:
a0:a7:de:0f:77:94:10:b8:4a:a5:cc:45:ee:8a:60:65:3d:1a:
5f:94:8a:82:6a:18:b5:45:7c:fa:79:8b:a4:72:5f:68:a1:32:
27:64:15:b8:89:7f:c5:4c:06:65:18:35:00:37:c3:86:2b:30:
57:a6:50:61:b9:d9:e0:9c:ae:87:66:64:e2:07:e5:95:29:90:
e2:f8:8f:66:f4:0b:c7:3e:87:1f:30:c1:a8:3c:37:2a:b5:cb:
a8:72:21:72:eb:ea:31:32:c3:e1:75:9d:72:d2:10:dc:09:fa:
06:57:db:c3:4e:57:74:ca:e2:88:4e:16:4e:aa:7e:24:b1:74:
d2:fd:3b:ff:65:6c:f4:c7:b9:d9:48:da:c7:49:6e:fd:eb:73:
19:12:72:5c:26:72:6a:ef:dd:30:cb:bd:76:0b:70:3e:f4:35:
3c:d5:e5:9e:9b:c8:a7:dd:ad:93:82:c7:9f:d3:b5:a9:49:3b:
e6:3c:b2:66:fc:b1:fc:49:69:0d:27:7e:0d:2b:4b:a1:06:fe:
5e:63:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:49:48 2025 by rpki-client