Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: 7+gtSID5hOmGG6Nxu5dcm2bECMLnn4L3gzUdKRx3oBs=
Subject key identifier: F6:98:A9:94:0E:37:FF:3E:71:0A:70:39:D6:61:5E:D3:B5:2E:76:56
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 0196C08127B4C731AB4B69D841A30F7440CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 0679
Signing time: Sun 11 May 2025 18:00:11 +0000
Manifest this update: Sun 11 May 2025 18:00:11 +0000
Manifest next update: Mon 12 May 2025 18:00:11 +0000
Files and hashes: 1: YrKYk7I6vE-csMWooaZM6NHB8BQ.roa (hash: DGcItu+t1LfBz2hIuLIG2raDTGGDZoaJ5stlNvHsdUs=)
2: qYy8XmUApmSr7E4zGQ4BdVZDGb4.roa (hash: Fn2Mqkncw63T9+361k6HpXw83uUzWzsG0tY0nJ1gyjM=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: SIPw5NYMXblke6+oBg4IxsNJUIyrLXPADY3FH91tK+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:27:b4:c7:31:ab:4b:69:d8:41:a3:0f:74:40:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: May 11 18:00:11 2025 GMT
Not After : May 12 18:00:11 2025 GMT
Subject: CN=f698a9940e37ff3e710a7039d6615ed3b52e7656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:8d:7d:61:fc:25:1d:62:fc:37:bc:f2:aa:
c4:80:c3:03:01:5c:6f:17:f6:a1:a1:f3:b9:6d:e0:
ef:40:00:07:0b:b3:a2:b2:e4:c8:7d:5a:a1:fc:40:
b4:bf:36:06:14:80:27:12:54:d8:cc:fe:18:42:08:
18:5f:d7:d0:7d:87:61:33:54:1a:48:62:36:a1:e4:
cc:ca:f7:28:4c:7e:ed:4c:cf:70:dc:93:3f:f4:b9:
2d:2b:56:e4:10:0e:89:c1:1e:f5:8b:9b:1b:5c:44:
3f:73:3e:d1:e6:8c:17:df:da:0e:d1:01:f6:37:4e:
d3:ec:c2:c0:41:e2:7b:da:95:29:a6:5a:79:f0:6b:
94:ab:13:cc:7b:4e:39:88:ca:3b:25:70:08:08:d0:
be:a2:11:19:ce:17:77:cf:4a:f1:72:66:b5:72:55:
81:33:9a:23:40:53:f5:9a:d2:bd:9a:ae:12:f3:79:
e6:98:fe:0b:3d:2b:38:a4:1e:2e:bc:45:d9:d6:3f:
f4:5e:5e:d5:4b:09:05:7b:37:b2:b8:86:d3:f7:45:
c8:5a:19:06:99:c5:3b:9f:dc:4b:4e:f9:a3:6d:0a:
64:33:09:67:28:09:f0:15:72:d0:08:25:7b:25:0c:
cf:88:ed:f8:9c:34:fe:4e:b4:b1:9c:44:e7:ac:63:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:98:A9:94:0E:37:FF:3E:71:0A:70:39:D6:61:5E:D3:B5:2E:76:56
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:43:c0:94:c6:e8:52:46:6d:f1:29:98:36:b6:ed:62:6b:
e7:47:94:93:83:65:c2:52:f0:16:7f:b1:6c:55:4d:8b:b0:8a:
e2:c7:31:0d:b5:d8:08:b7:5a:af:0e:51:a6:e6:64:ad:d0:19:
ed:6b:fc:cd:b6:16:40:77:00:c6:ca:ef:83:3c:ec:8e:2a:fe:
59:5b:be:ae:bb:13:38:90:1e:84:ce:e2:1e:6a:a5:e4:d2:8a:
cc:6a:47:db:47:67:13:2c:de:12:f9:c3:3b:18:51:12:53:54:
26:2d:18:cc:91:37:85:89:b4:b5:fb:24:42:d7:43:3a:fe:c4:
72:5a:c0:c0:48:2e:0c:11:f1:da:f5:17:bc:73:6f:80:ef:82:
0c:91:11:c7:5f:5d:d5:b6:e4:f1:9a:b3:53:ce:37:4d:e9:45:
9f:f0:84:0e:de:c6:6d:43:62:0c:4c:d7:01:e5:f9:0b:81:29:
b1:64:16:1b:d3:47:3f:e1:68:3a:90:d4:ca:28:2a:27:db:27:
63:67:04:62:25:f4:58:0e:a7:1f:85:1f:4c:65:26:2a:87:f8:
ab:a5:bf:75:6f:19:89:ae:ce:de:6e:4e:e2:71:2a:1c:b6:e8:
6b:92:04:51:f7:59:a9:5a:3a:ca:06:41:ea:33:2a:e2:12:8a:
7c:9f:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:19:41 2025 by rpki-client