Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: Yy8qmx+4cP5VB1trfO6Bw88X7hIeIX4TSf/rO4PNuVc=
Subject key identifier: D1:B1:66:B7:F3:A7:AA:AE:97:BA:B0:18:17:DF:0B:72:71:11:13:5D
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 0196BD805754B961869D01167E400FA7AD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 0227
Signing time: Sun 11 May 2025 04:00:26 +0000
Manifest this update: Sun 11 May 2025 04:00:26 +0000
Manifest next update: Mon 12 May 2025 04:00:26 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: vjUWngAlNmnJeNCfd5uYm/NfjZvhEoXPfrtMRsAvcww=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:57:54:b9:61:86:9d:01:16:7e:40:0f:a7:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: May 11 04:00:26 2025 GMT
Not After : May 12 04:00:26 2025 GMT
Subject: CN=d1b166b7f3a7aaae97bab01817df0b727111135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:0b:e3:8f:fa:1c:6e:85:05:a2:ae:d9:aa:
94:51:3c:41:3e:6b:46:e8:6b:e1:21:75:ed:77:d3:
ec:5a:f8:3c:e3:7d:fb:46:34:c6:d0:d5:aa:0e:00:
80:5c:b2:74:b9:37:57:d3:4e:47:04:c4:db:26:fb:
ae:cf:22:37:0b:35:cf:68:97:aa:34:70:27:05:43:
bd:a9:87:bc:7a:9c:ab:a8:0b:50:5a:5f:55:90:06:
81:64:4a:c1:c8:af:3c:dd:6b:55:34:7e:b1:c9:cd:
43:ed:43:57:13:3a:2a:73:54:95:ab:df:ec:24:5f:
93:e5:3f:28:06:d7:ef:32:b6:8e:bb:3c:53:fb:c7:
e9:bb:e0:5d:2f:cb:71:15:4b:d4:9b:74:2c:8e:85:
14:78:fc:0c:30:2f:81:8d:51:26:e4:03:54:7a:a0:
9f:ac:e0:8b:ff:5b:cc:83:85:a1:77:6d:1b:90:09:
43:2f:c3:7b:74:36:35:5b:4a:73:e1:f6:09:16:ae:
2a:3c:4c:7b:c9:aa:a8:69:6e:f0:b9:74:82:06:f4:
ef:26:dc:20:2b:10:88:6d:b3:df:f1:64:0e:ad:1b:
32:4d:40:8c:c5:64:55:8d:d7:4a:0e:4a:fd:1f:71:
9a:91:31:9f:1c:b7:10:fe:d3:b5:3c:77:2e:3c:47:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B1:66:B7:F3:A7:AA:AE:97:BA:B0:18:17:DF:0B:72:71:11:13:5D
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:26:76:f5:98:2e:46:74:38:4f:8d:24:d3:d8:52:76:ee:
f7:92:ff:cf:1f:43:86:e2:b5:41:17:21:ac:1b:c9:df:64:cd:
86:6b:6a:55:94:b6:c2:91:fd:7e:9e:a6:cf:8c:52:0d:16:3a:
2e:4a:37:e0:a0:62:e8:b6:9e:fa:69:e3:d3:11:22:6e:97:60:
94:00:91:c4:43:08:16:c7:0d:3f:4a:23:11:64:89:1e:5a:65:
c0:f8:c8:a6:8d:28:6e:ad:3a:fa:9c:69:0e:37:34:75:c8:51:
61:5d:3a:39:f8:c8:e0:96:58:24:79:71:29:fa:59:dc:16:87:
a8:13:82:45:85:cc:67:07:50:06:e0:3e:3e:d2:54:87:b2:68:
90:4a:78:e8:57:08:9d:b5:e9:2b:a6:5c:38:35:42:17:3e:41:
86:c5:53:6f:d2:ba:c2:bf:7f:44:37:29:aa:1b:d3:e5:06:d1:
68:3e:09:c6:cd:7d:c4:c1:2f:45:f7:c4:35:04:44:97:a1:c4:
ee:a5:7f:e6:5f:94:7a:52:92:7e:a4:b9:1e:02:41:52:0f:3d:
36:ef:47:7b:06:09:f2:84:5d:a5:77:42:1d:f9:7a:b3:40:af:
ec:4a:a2:61:18:92:ca:7f:74:f9:de:1e:3b:9e:f1:08:b8:42:
dc:ec:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:39:37 2025 by rpki-client