Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: pMBtg+AV62rkk7gBrqpWjR/3pKufTt+VfgLwgj3u3nY=
Subject key identifier: 2E:19:30:C9:4B:C1:97:4A:A6:C7:6F:B3:40:FA:7C:B7:A2:42:AD:17
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 0196A31C1FFDCAF9F1E7658EEE716BA6B3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 02F8
Signing time: Tue 06 May 2025 01:00:51 +0000
Manifest this update: Tue 06 May 2025 01:00:51 +0000
Manifest next update: Wed 07 May 2025 01:00:51 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: bdgs/0Ajvv7eLRGKvfMZt+PAJGE5t9eXvLFxEHOcQt4=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:1f:fd:ca:f9:f1:e7:65:8e:ee:71:6b:a6:b3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: May 6 01:00:51 2025 GMT
Not After : May 7 01:00:51 2025 GMT
Subject: CN=2e1930c94bc1974aa6c76fb340fa7cb7a242ad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:4d:13:a1:9e:a3:a8:36:60:12:03:7b:67:
16:3c:99:04:3a:bc:9a:3f:4c:3e:ab:c9:0e:47:4e:
cf:14:a1:98:06:06:aa:cd:a5:80:11:9d:6a:15:28:
d7:32:e9:7d:58:9b:8c:43:a5:2d:87:15:03:bb:1d:
ca:30:22:1c:90:f7:73:81:19:ea:d6:fd:99:02:a5:
b1:d6:8d:2a:92:92:0c:0e:1b:3c:69:77:50:25:e4:
0f:14:5b:bc:df:6b:90:9f:d6:70:49:5b:45:3d:10:
63:a8:f3:ee:bc:78:1d:99:4d:2a:02:48:a6:2a:5f:
30:ab:82:9e:e3:a9:01:84:de:fe:57:d4:3d:a3:a1:
8f:fe:b1:35:3c:46:20:5d:49:6e:88:fd:5d:3a:86:
97:23:ca:74:58:c6:59:7e:64:e4:2c:54:90:9c:6a:
b0:ca:67:41:5d:1f:8b:d4:2b:02:fe:2d:d1:3d:1b:
f0:ad:bb:3a:31:1b:93:20:9a:00:ca:5f:90:52:b7:
f3:a1:1a:0d:05:58:b7:96:4a:6e:a0:70:55:a2:05:
56:58:e1:16:ad:be:60:cc:83:18:de:54:83:94:40:
5c:42:69:9c:19:6f:72:aa:85:fb:48:a5:8e:f5:22:
b2:03:f4:fb:a6:79:9c:11:ef:ea:6b:44:1a:c9:eb:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:19:30:C9:4B:C1:97:4A:A6:C7:6F:B3:40:FA:7C:B7:A2:42:AD:17
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:26:e9:c4:1a:c5:36:0b:ae:d9:37:4a:a3:a9:d7:2e:0f:
f5:77:36:0e:b1:bd:74:88:7b:fa:23:8f:34:2d:2d:ae:cb:ec:
d8:46:0b:2a:89:69:ec:e3:87:45:9e:d5:17:d0:2c:52:2e:01:
56:7a:82:db:1e:0d:06:54:d4:4d:35:f9:f8:4b:05:c5:13:9d:
fd:9c:1a:dc:c3:15:3d:88:cf:99:a6:61:ab:22:8f:a2:4f:e8:
52:aa:89:ae:20:9b:22:60:9f:e0:21:b1:6b:2b:31:09:bb:49:
f1:9f:40:5d:5e:b1:ea:13:b1:69:f1:32:08:f3:ea:af:b9:69:
d2:ae:51:3e:50:18:13:72:55:c4:36:e4:e0:ab:06:0f:1c:eb:
7d:88:6c:10:42:a7:0f:fc:2b:eb:70:3c:0f:2b:35:df:ca:de:
79:57:78:5b:da:2e:60:9e:ea:79:45:1c:25:7d:9f:d5:3e:d1:
66:fa:b6:86:cc:ef:16:6e:9d:33:a8:ba:55:92:9f:84:51:51:
90:b9:47:3b:18:52:09:f4:e5:36:b3:09:2b:8e:14:2b:dd:a2:
6b:83:57:78:a1:72:cf:85:45:14:1f:b4:f3:51:e9:87:95:76:
a0:78:0d:51:f2:27:c0:7f:1f:d1:46:67:88:13:b8:d1:de:c4:
59:a7:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:48:37 2025 by rpki-client