Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: BiaNnr6HMJ8/Dpqxovdq4NYVpvFZp2EnDVzgar+HSv8=
Subject key identifier: DD:65:14:85:B9:12:8F:92:E6:C1:CF:0E:22:23:7F:7C:97:0C:F0:8B
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 0196C4CC4341B37B582708726AA45569DA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 0E84
Signing time: Mon 12 May 2025 14:00:42 +0000
Manifest this update: Mon 12 May 2025 14:00:42 +0000
Manifest next update: Tue 13 May 2025 14:00:42 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: kbPxsplqjnqQvO1eNL2wgYoON0YG72vYKxS+bjyQ2rI=)
2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:43:41:b3:7b:58:27:08:72:6a:a4:55:69:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: May 12 14:00:42 2025 GMT
Not After : May 13 14:00:42 2025 GMT
Subject: CN=dd651485b9128f92e6c1cf0e22237f7c970cf08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:c3:ef:d8:d9:07:45:05:0a:de:60:26:d2:
4d:dc:9e:de:e3:82:33:db:62:98:67:e8:b7:6e:80:
a3:dc:5a:e3:12:95:84:c5:0f:1d:23:4d:20:67:40:
a6:3a:20:44:7c:99:3c:04:6a:21:81:ef:c5:13:62:
42:63:5a:88:f0:2c:3f:4e:1e:24:56:e4:44:2f:3c:
d4:bb:ed:25:e4:e7:e5:0b:72:63:44:cf:c7:01:13:
3f:c3:b8:96:b2:fd:06:10:1d:d6:81:71:f2:3f:54:
b8:74:f1:d8:32:7b:0e:0f:07:ee:be:cf:40:09:77:
76:53:46:57:21:74:6f:01:07:39:d5:b6:7a:2f:54:
7c:ba:6f:fc:16:31:51:6b:8f:2c:df:29:b4:9e:8a:
ed:43:e2:96:d9:f1:37:18:1f:3d:b5:ea:51:15:38:
c3:4f:c2:b3:f7:0c:f5:8f:92:56:68:07:1f:e7:fe:
0f:69:24:a2:a0:9d:e7:c8:21:e6:6a:da:60:a1:89:
a0:cc:3c:86:09:b0:05:7f:5f:cf:38:3a:c0:fa:de:
f1:da:c2:bf:49:e5:02:1c:94:61:25:c1:92:4a:64:
84:80:ec:d1:68:12:f5:e1:09:7f:83:a3:02:2d:cb:
71:84:c4:e6:da:83:94:22:f1:f9:e4:15:9b:9a:99:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:14:85:B9:12:8F:92:E6:C1:CF:0E:22:23:7F:7C:97:0C:F0:8B
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f3:5c:3d:3e:3d:6d:40:2e:fe:bf:e7:87:60:06:84:18:7c:
c4:6b:28:15:1f:ab:05:27:84:12:fe:45:85:8d:e0:35:75:fe:
7c:7a:64:a4:7f:3f:16:ec:7e:b0:02:2a:eb:ae:da:b2:53:27:
02:23:e3:e5:dd:86:dd:7a:dc:1e:de:f2:f4:1b:bb:d2:dc:ba:
65:be:d1:4c:c6:8b:a2:29:dc:d0:17:8a:c2:76:ab:cc:ff:d8:
ea:c2:dc:4a:32:4d:d7:09:e9:8e:45:d3:8a:07:eb:4f:01:16:
bc:83:c9:4a:3b:72:79:9c:b1:c0:29:aa:34:22:2e:f6:fb:57:
b2:b5:c5:77:35:2b:31:e3:61:38:72:d3:8b:2c:31:92:d8:22:
00:fe:52:26:96:56:c5:a4:c4:c9:cf:34:f8:6a:a3:95:11:e0:
40:45:26:58:fa:40:30:00:9b:2d:81:02:60:5f:1d:ad:22:d4:
98:55:1b:14:45:53:c2:f4:57:0a:a0:19:45:5e:97:07:d6:75:
f9:ec:16:51:ad:9b:51:c4:e5:e7:84:89:f6:e2:59:35:76:5b:
b0:20:9e:15:ba:e4:fe:1b:dd:41:8c:5b:ea:fa:18:78:d4:b9:
a4:84:1e:12:44:14:fd:65:f3:2b:13:29:2e:a8:81:14:8b:fe:
1a:58:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:43:40 2025 by rpki-client