Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: cSgrtr6c/t/YQvPLHy5V3nBPMX4Y6h0wyIT97isBMNU=
Subject key identifier: C9:3C:7D:64:1C:4B:8D:F5:29:7F:A0:C4:47:CC:E6:95:C9:B4:B2:49
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 0196BE25910F638AC7F1DE9828113EC11DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 1305
Signing time: Sun 11 May 2025 07:00:55 +0000
Manifest this update: Sun 11 May 2025 07:00:55 +0000
Manifest next update: Mon 12 May 2025 07:00:55 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: MSdfiTFU1/DeleRho3GV/yQN/QIrYNaRvwUQPkI7gpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:91:0f:63:8a:c7:f1:de:98:28:11:3e:c1:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: May 11 07:00:55 2025 GMT
Not After : May 12 07:00:55 2025 GMT
Subject: CN=c93c7d641c4b8df5297fa0c447cce695c9b4b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:a6:60:52:fc:2c:41:29:42:e7:27:a5:35:
cc:88:b6:93:af:1c:52:19:0b:9b:f2:01:c7:45:71:
2e:21:40:dc:7d:28:75:a0:02:c4:84:9d:14:1d:dc:
00:e7:d0:0b:b6:ff:d9:6c:68:7b:ce:9b:a6:25:a9:
56:8e:ed:9a:0a:cd:db:1e:78:75:cf:73:4d:5a:fe:
1f:d5:7e:a2:55:c4:3c:76:ed:b4:ef:d0:e1:a5:c6:
72:cd:0a:97:4f:bd:df:49:10:aa:25:c6:7b:a6:e3:
59:95:a3:06:23:70:cf:84:48:6e:14:cc:11:b0:c3:
af:33:dd:fd:ed:c7:e6:f9:ee:ec:0f:bd:db:e9:ac:
73:62:f5:35:c9:d2:b3:93:14:9a:26:a8:19:cf:da:
2a:dd:ca:f4:08:7e:5c:53:f3:8b:d9:89:ec:0b:7c:
bd:52:bd:66:94:27:13:d5:77:8f:d1:81:24:e6:cd:
61:c2:1b:9a:0e:f9:ab:16:5e:08:67:bb:7e:be:cf:
f9:07:b8:40:a3:3b:50:46:98:20:8c:d4:19:c7:66:
b3:81:33:4d:da:2b:ea:22:cb:50:c9:16:5b:14:10:
0e:41:67:99:f3:05:58:04:65:01:3d:a6:39:be:8f:
38:50:1b:1f:d9:de:67:29:a6:9b:f1:ba:7c:fc:48:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3C:7D:64:1C:4B:8D:F5:29:7F:A0:C4:47:CC:E6:95:C9:B4:B2:49
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:13:0c:8f:23:ab:93:7e:0c:c9:c6:ea:e6:ba:0c:2a:98:
81:a4:49:d4:8f:35:7b:c6:04:6e:ff:3c:74:ba:84:18:f3:18:
ad:5c:a1:44:d5:58:c0:d2:d2:32:9a:d2:f0:cd:f4:31:2f:04:
0d:39:59:e6:88:9a:30:de:01:57:be:34:1a:c9:8f:63:8c:55:
ac:9b:33:7b:ce:ec:40:c7:53:1e:b4:28:36:ec:a7:cc:53:31:
d3:38:1d:b3:4c:9a:4d:37:28:08:55:3b:a7:76:1d:ab:65:f9:
8d:e7:37:15:b6:16:2c:ff:92:fb:6c:2c:66:58:c0:f4:11:cb:
bf:80:78:1e:2b:d6:66:20:34:85:4f:4c:9f:b1:6f:5c:b3:e2:
8c:f3:3a:8f:ae:96:df:20:6f:7d:0c:2c:85:7b:47:f4:bb:8e:
13:57:6a:69:33:a3:b3:dd:e9:30:74:99:f0:b6:07:98:3f:39:
d0:7f:60:1c:52:02:e8:fd:53:44:a2:52:f7:e5:91:8e:3d:07:
3c:66:dd:04:4a:b0:39:9c:34:2a:5f:da:20:a8:6a:5d:c4:35:
36:6d:92:16:15:e7:7c:6f:b2:ec:67:11:e1:88:6e:a1:fb:46:
f0:6c:57:7b:64:2f:3e:c8:65:8d:b2:f4:5b:68:25:23:51:6c:
4f:6f:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:32:09 2025 by rpki-client