Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: ea1FAwTZUruNIe4XIFl3W+yEdRdMoolTJVWc0tEYFx4=
Subject key identifier: 2F:96:9C:7D:A4:F6:0B:F8:C9:C6:94:DE:F8:33:86:70:D1:3E:75:B1
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01969E9B13864B3C156E1913D526F5BAB93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1536
Signing time: Mon 05 May 2025 04:01:25 +0000
Manifest this update: Mon 05 May 2025 04:01:25 +0000
Manifest next update: Tue 06 May 2025 04:01:25 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: EvKafT1qm5IR5t6V499d3vvh7MKSjMHqrnZn1I0fHiY=)
5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:13:86:4b:3c:15:6e:19:13:d5:26:f5:ba:b9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: May 5 04:01:25 2025 GMT
Not After : May 6 04:01:25 2025 GMT
Subject: CN=2f969c7da4f60bf8c9c694def8338670d13e75b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:e8:f5:27:01:1d:f9:b2:86:82:32:6d:21:
f2:33:68:2f:71:f9:79:9b:42:5c:ac:5b:10:f4:3e:
e9:08:78:95:05:3e:07:4b:dc:1e:1d:06:57:fe:30:
71:1d:20:7f:cf:a5:08:81:38:92:c5:87:66:b2:55:
ce:74:a1:de:cc:bf:66:7f:72:a5:db:e1:55:52:c9:
66:db:21:93:78:89:b0:4b:dc:4e:58:55:4b:dc:a5:
8f:1d:70:15:c6:8a:d8:b6:94:40:93:1c:ff:f3:d5:
76:80:20:cc:fa:c7:3d:8d:a8:48:0b:a2:66:51:4c:
4a:e1:6a:c1:76:c6:84:f3:5a:fb:1d:e3:8a:e8:0e:
00:19:a9:18:2b:14:33:79:d8:53:31:57:9f:ec:5b:
86:e2:5e:82:12:7b:6b:71:2c:9e:a6:af:59:0a:39:
43:5a:eb:70:b8:e0:6f:92:21:d3:b6:5f:23:f3:d8:
e6:c8:b4:7e:61:3c:44:fb:d5:e3:63:26:f6:51:be:
fe:13:e5:65:94:ea:69:7c:07:47:54:0c:2a:a8:3f:
18:86:0c:a6:33:5a:50:a9:f4:b0:40:b0:58:ca:13:
7d:8a:6e:4f:94:b0:38:ca:3d:a1:57:5e:94:81:53:
57:da:8f:cf:9c:2e:b0:35:07:b3:e4:c1:74:a1:ae:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:9C:7D:A4:F6:0B:F8:C9:C6:94:DE:F8:33:86:70:D1:3E:75:B1
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:55:cc:f6:5c:0f:25:f2:f8:7b:e8:71:81:c6:59:da:90:60:
9f:30:c3:8e:11:eb:a4:d3:38:a5:65:8e:b6:d9:33:42:36:43:
46:aa:b2:f0:07:97:f1:ca:be:0f:1c:e9:13:25:b2:1a:86:8c:
c9:b0:de:01:48:74:97:1d:52:be:f5:b9:89:51:7f:ea:ce:80:
ee:ac:ed:ee:75:8f:81:13:cc:e0:ae:eb:20:03:45:a2:96:e2:
f6:16:56:cb:6d:eb:82:58:3b:f1:e2:00:ce:f7:4f:ae:0b:80:
24:2e:f7:a2:e3:08:a3:4d:c8:74:ac:11:aa:26:e7:67:02:57:
d1:1d:63:18:9b:e8:83:94:1a:78:f8:d5:f8:70:f6:48:91:44:
f9:6b:ca:7f:43:e2:1f:a2:58:fe:39:9c:48:0b:dc:bb:b2:56:
3c:ac:5a:fe:bb:2a:d2:c7:b6:72:29:41:a8:15:0a:74:d6:89:
24:56:4e:6c:26:77:20:a6:56:bb:f7:5e:32:2b:81:0a:d2:ac:
62:a8:87:cf:21:27:ef:0e:cb:b2:96:52:04:8d:24:5f:ce:19:
c4:9c:f4:cf:89:8d:b5:7a:d0:25:c4:50:33:bf:91:ea:fd:3d:
32:76:9c:fa:fa:0e:59:13:6e:be:cb:81:70:63:af:94:f5:32:
ec:cd:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:34 2025 by rpki-client