Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: UIrRnt9TibYxh4PRYYQ+2W/JScWxZc9bokpguUTCefg=
Subject key identifier: 90:DF:CB:C9:98:EA:CD:19:07:AA:EA:90:01:D0:39:2B:DC:EA:63:55
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 0196B14595B06341BA0B8A43B8EEFA0ADC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 132B
Signing time: Thu 08 May 2025 19:00:49 +0000
Manifest this update: Thu 08 May 2025 19:00:49 +0000
Manifest next update: Fri 09 May 2025 19:00:49 +0000
Files and hashes: 1: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: ET/2bUO3I4ykir0RDo+Eu3B2poRNjg04ldJX3r3YVMU=)
2: XgR8akpJkIXmtNYutT4OTp5quOo.roa (hash: J70lBDkMgy2Yl8b9o6aU3SeolN3Fw23mWFk4KOMdzQk=)
3: XvxinObJ_Ej5nBLFUwMOjtk2T4E.roa (hash: IfeFWTU1UR3YBE9GSFaZmBt5m0QI6LQRR1xjta/zJxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:95:b0:63:41:ba:0b:8a:43:b8:ee:fa:0a:dc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: May 8 19:00:49 2025 GMT
Not After : May 9 19:00:49 2025 GMT
Subject: CN=90dfcbc998eacd1907aaea9001d0392bdcea6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:da:b8:84:cc:e5:45:ff:b6:be:3f:47:e1:fa:
39:71:35:cd:e0:64:27:21:07:9b:fa:33:1a:b5:cf:
33:95:93:d4:54:0e:58:a3:69:db:e8:5b:88:f2:df:
cf:c1:30:12:d8:d2:c9:44:0d:b7:27:d0:32:2a:6f:
39:fa:10:cc:78:84:f6:97:eb:85:bd:88:c7:6f:b3:
96:de:45:ff:fd:18:b6:38:44:df:10:13:2d:e1:bd:
ed:81:74:ce:7f:e3:c9:5e:04:ee:96:75:ef:22:fd:
c7:61:03:25:dc:84:09:a4:48:42:b3:f1:05:58:34:
16:9c:ee:84:15:13:c2:a0:e7:fc:bb:ba:32:8e:21:
fa:27:46:c4:a9:cc:f2:2d:bb:04:ee:87:45:4a:9d:
31:96:13:8b:d9:1c:28:cb:88:36:a8:71:72:66:c4:
56:78:36:40:17:bc:37:15:3e:ed:18:5b:25:8e:29:
2f:7f:1b:8a:92:ca:4a:31:83:2a:06:53:15:11:bb:
13:d3:7b:ef:1a:8c:fa:6c:8e:98:6f:43:53:eb:f4:
4c:3c:af:13:c0:5d:4b:6c:e1:6f:0c:01:85:c4:03:
b5:d1:2f:78:80:2e:2d:b6:32:5a:74:be:c9:a3:9b:
02:ec:f5:5d:e8:b2:37:31:44:51:3f:5d:e3:0a:be:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:CB:C9:98:EA:CD:19:07:AA:EA:90:01:D0:39:2B:DC:EA:63:55
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:f2:dd:69:6f:26:d3:ec:99:a1:dd:27:d9:ef:a6:3c:b1:
50:e6:ae:23:cb:4c:bb:80:40:15:ba:75:77:d4:05:00:7e:f1:
ef:b0:64:0c:04:59:6e:28:cf:35:11:0b:88:c6:6b:cf:9e:31:
f8:7d:9d:b8:93:2b:ba:db:ca:42:3d:20:61:76:de:64:4d:6f:
0f:e8:95:81:77:5f:80:58:97:79:95:02:31:b1:19:7f:c4:8e:
4e:27:96:e8:c3:91:e2:db:70:28:08:e8:0f:b0:2c:99:a5:e2:
40:f5:4a:bc:bb:1d:c7:f8:b8:48:45:50:48:32:bb:ad:a1:5c:
dc:fc:1b:3d:c8:63:b8:5a:62:7d:c8:15:a4:7f:d3:93:bd:74:
0e:13:59:1e:f3:a4:59:ed:15:2e:26:0c:c8:6a:e0:67:a8:67:
e6:69:d9:3d:c2:ed:6c:3c:d1:ed:aa:a9:2d:7d:55:ef:95:e3:
1b:ee:47:b3:16:e3:7a:26:01:18:1d:18:f3:5d:ed:b0:28:d6:
3f:42:b6:c8:20:cf:3f:fb:a8:b0:39:92:7b:40:74:ef:9d:bb:
f2:bc:e2:78:8a:b7:cb:b3:88:03:58:9a:48:13:13:c5:82:31:
b7:95:ef:b0:0b:be:c1:34:cf:53:ea:75:03:1c:1c:92:51:82:
96:5c:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:07:58 2025 by rpki-client