Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: PlmbX0gI6unKdyfZUiyY43P2JBQjrfAXavwvFrhX0no=
Subject key identifier: F1:C8:60:30:EE:0C:5E:0A:8E:60:19:56:1E:AA:B3:4F:7E:F5:5C:47
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 0196AE7BD8D83E1DFB1B9B11D3014EA06E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0A85
Signing time: Thu 08 May 2025 06:01:14 +0000
Manifest this update: Thu 08 May 2025 06:01:14 +0000
Manifest next update: Fri 09 May 2025 06:01:14 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: i6naMZ233BV+Qt64B/dpcpWbqBm0ggjmWzHwKX1VQUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:d8:d8:3e:1d:fb:1b:9b:11:d3:01:4e:a0:6e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: May 8 06:01:14 2025 GMT
Not After : May 9 06:01:14 2025 GMT
Subject: CN=f1c86030ee0c5e0a8e6019561eaab34f7ef55c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:88:ac:57:77:36:c0:c0:7c:69:7a:b3:4d:
a7:42:ed:f6:85:fa:23:c4:41:b2:82:b5:37:ad:6a:
10:57:fd:4c:bc:71:77:e7:26:76:9d:63:40:a3:3d:
79:79:a5:f1:a1:46:0a:c1:9b:7f:07:bc:aa:ad:73:
82:df:a6:26:af:ff:00:2e:79:2b:7f:22:91:5b:6d:
3c:bd:c0:d0:0f:70:f3:db:78:34:5c:51:ef:d3:f6:
11:35:28:f4:b9:f8:ca:e9:0e:3c:89:67:83:12:95:
04:40:3b:b7:2e:a5:af:79:18:62:43:23:54:6c:a4:
c1:e4:10:8b:a1:46:7f:95:7b:b9:b2:01:0b:a6:93:
d5:ae:f9:aa:7c:84:96:66:13:39:69:d6:2d:e6:e1:
6f:b0:c7:4f:fa:ef:7e:89:30:ed:f3:d6:53:bb:7d:
bb:80:c8:68:e3:0b:6a:23:c8:83:93:3d:96:c6:24:
1d:48:e0:9c:d5:da:fc:24:9b:9e:4d:f2:4d:03:3d:
76:5c:4f:ff:af:4d:a3:6c:bd:c1:e4:ea:25:3e:52:
b7:cf:8a:ad:7e:2f:1c:67:5f:ce:0b:a8:0b:11:ae:
cd:bc:09:44:c5:53:a5:57:fe:85:27:33:9f:81:f9:
7c:0c:d8:56:18:ec:25:ac:3a:80:c6:7a:0c:06:03:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:60:30:EE:0C:5E:0A:8E:60:19:56:1E:AA:B3:4F:7E:F5:5C:47
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8e:c6:8a:76:6b:cd:df:90:4c:a2:53:a9:d1:0d:e1:0d:a8:
74:6c:a6:86:6d:cd:78:a2:ec:55:f3:39:84:6c:7f:f9:e2:9f:
38:ac:52:3c:d2:e6:e8:84:de:7a:22:12:df:4a:b6:ae:23:29:
b5:3e:9d:d0:7b:ad:0c:dd:e7:6f:73:75:27:7d:35:b0:3e:67:
36:73:83:d5:f7:72:2c:9c:2f:b5:c5:d5:1c:3d:30:b7:68:6d:
5f:2f:1c:1d:6b:2e:b6:e3:94:85:74:c3:fb:27:cc:32:1d:97:
9c:8e:c5:30:4d:9d:4f:68:64:40:d7:57:e9:7d:e2:1a:36:b8:
8b:e6:37:40:a7:f6:44:9b:d2:7c:8b:2b:fd:ef:46:42:93:00:
86:e2:0f:17:fa:fe:17:a4:a1:f0:6d:79:15:c3:e7:04:7d:be:
37:ea:9f:0c:01:0e:42:d3:0f:b2:42:45:6b:23:e6:b4:ec:bc:
a3:1d:f6:d4:2b:1c:55:5a:c8:dc:77:83:25:bb:09:48:26:e4:
53:91:fd:51:0a:6a:3c:e0:84:88:27:59:bf:a7:77:e1:c8:32:
4b:d6:d1:9b:d7:18:0b:93:3e:b6:8c:33:ca:cf:c4:cd:fb:12:
e0:81:9d:90:b3:7d:a1:3a:b9:53:ed:a4:de:37:4b:72:2e:92:
ab:6e:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:16:14 2025 by rpki-client