Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: ZgK+U35JK8nXstkQXx9838q7HGYZCXqLwJ1pISG38Qc=
Subject key identifier: 3A:B0:7E:06:9B:EA:DC:27:55:C3:7A:AA:AD:C5:1D:8D:D2:22:76:DC
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 0196C0EF1C1A6FF730DD8A779509A1F7C82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 10B2
Signing time: Sun 11 May 2025 20:00:17 +0000
Manifest this update: Sun 11 May 2025 20:00:17 +0000
Manifest next update: Mon 12 May 2025 20:00:17 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: wWp6ot5xZnhy9y73n8ur6cspk7BLNGkAfdbW8HHNWa4=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:1c:1a:6f:f7:30:dd:8a:77:95:09:a1:f7:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: May 11 20:00:17 2025 GMT
Not After : May 12 20:00:17 2025 GMT
Subject: CN=3ab07e069beadc2755c37aaaadc51d8dd22276dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:f1:b8:83:85:fc:46:ec:5a:3c:77:86:fd:
6a:75:40:82:47:94:d5:92:6a:1c:c6:c9:51:08:b7:
e4:51:a4:9c:ff:f2:90:24:4a:98:de:43:26:32:4a:
92:59:6d:68:d5:75:2e:fa:c9:1a:83:14:f1:3b:f8:
48:19:ee:48:89:40:9b:73:93:95:01:88:3b:d8:b4:
fa:20:f5:5a:60:68:ee:2a:52:67:29:f8:ae:08:2c:
fd:fe:8c:04:24:35:11:f8:d0:03:a8:f5:e9:f3:94:
ab:2d:d6:23:72:f6:6c:c3:61:eb:33:88:6f:ed:18:
f9:33:7e:b0:6b:7c:4b:9a:0e:a9:42:ae:02:bb:a2:
b3:74:43:8c:da:82:52:5a:70:f8:5e:5a:2c:19:c2:
ba:02:39:19:5a:5c:ca:5f:7a:85:b3:a6:41:0f:b5:
42:35:ab:71:60:ac:66:e0:2e:1d:e8:0e:94:83:ff:
7e:3f:53:54:0b:39:15:31:ed:51:de:51:5c:2e:6f:
35:d8:da:d1:b0:48:b2:7c:fc:34:cf:fa:ef:fa:b3:
f5:d8:3c:65:91:de:78:03:cf:5f:43:52:c7:2d:7e:
be:c4:4c:f6:e2:67:85:a3:2a:63:df:29:6d:e1:48:
de:f9:9f:09:47:65:b9:b1:99:3b:78:62:13:cb:ba:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B0:7E:06:9B:EA:DC:27:55:C3:7A:AA:AD:C5:1D:8D:D2:22:76:DC
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4a:83:67:d4:bc:52:ab:3c:08:1a:2e:97:d1:99:ab:57:b9:
8d:4e:9f:cc:b4:60:64:e2:ef:19:7e:59:c9:29:e5:96:a7:30:
a5:c5:4a:8c:df:b2:56:f1:5b:0c:24:f7:5a:04:16:71:2b:8a:
ed:e1:25:ad:17:31:83:87:98:43:a4:65:9c:0f:15:9d:12:e2:
72:59:59:67:48:ea:60:ce:40:ad:2f:2d:c6:66:38:07:41:68:
68:33:e9:5e:70:e2:85:ff:1a:f0:75:51:33:bf:cc:6b:1b:8a:
eb:d3:16:f0:00:87:2b:1d:bc:9a:6f:9e:be:12:a5:3c:f6:d3:
84:b1:01:28:b7:58:0a:a4:81:73:d5:8d:40:64:1f:88:05:40:
b8:38:53:db:a6:1d:3f:cb:d1:46:46:ad:8d:22:fd:25:3e:45:
02:10:35:7e:a3:60:2d:fe:cb:28:cc:b3:db:71:9e:4a:12:8f:
32:22:b3:4c:fa:2e:3e:24:6c:17:8a:bf:45:58:03:88:86:83:
33:de:87:f5:88:eb:1f:d7:9d:3d:99:c6:21:11:40:94:2b:ac:
14:30:61:ec:e6:77:de:b4:14:44:8a:5b:7a:68:98:18:ef:6f:
4a:d1:27:42:b2:ac:72:eb:2e:76:e9:66:2e:b8:37:c1:65:46:
97:3f:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:32:12 2025 by rpki-client