Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier: r/bqmoXJIH4mrOTcNRi2GZ8ILsmxE2zScpRXeGfsQrc=
Subject key identifier: FF:60:08:11:25:89:98:84:FC:FC:CA:4F:82:F8:B2:6F:B5:5F:7F:D6
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 0196C75EF8A38FA5A13797ECC99319E20EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number: 0CA0
Signing time: Tue 13 May 2025 02:00:11 +0000
Manifest this update: Tue 13 May 2025 02:00:11 +0000
Manifest next update: Wed 14 May 2025 02:00:11 +0000
Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: V0FhaGxfYqdPul+CY71jDnMDRZ1ew4rpovRwXjDuF+k=)
2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5e:f8:a3:8f:a5:a1:37:97:ec:c9:93:19:e2:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: May 13 02:00:11 2025 GMT
Not After : May 14 02:00:11 2025 GMT
Subject: CN=ff60081125899884fcfcca4f82f8b26fb55f7fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:f2:ee:34:a1:73:52:c6:9f:f8:6b:c5:2d:
2e:04:c3:b7:81:45:25:f2:5c:85:79:75:5e:c5:73:
59:b2:13:6d:32:99:74:9c:2e:8c:45:57:e9:0f:42:
ea:ca:5d:ca:89:ea:be:d9:f5:46:f8:78:f7:52:a0:
11:35:de:9b:24:08:85:75:be:db:42:c8:c2:16:12:
0b:b3:ac:26:73:72:5c:5d:db:58:50:6a:54:ec:f3:
e1:a5:e2:09:9a:ee:ec:dc:0a:94:04:3b:64:49:38:
ea:10:dd:70:11:e7:1c:ae:7d:0c:48:d1:66:bb:b4:
2b:38:42:b8:f2:61:5b:d2:1c:d2:f1:e8:08:ac:ef:
0a:fa:c2:4a:6f:df:f9:aa:4a:20:2d:cb:6c:0d:44:
b1:01:57:76:68:39:d8:92:ce:ca:e0:09:45:b1:65:
7a:16:a2:ab:28:2c:8a:34:a2:ad:67:35:1f:f8:80:
d0:37:fe:6a:14:3b:d6:4a:44:26:13:21:14:fa:30:
f8:af:bb:67:cb:de:8f:9d:9a:86:7f:03:79:85:16:
62:4c:c9:bd:00:31:25:8f:ea:df:3b:60:07:60:84:
b5:dd:6b:9e:d6:2e:a6:62:f2:5d:0e:30:64:05:45:
98:f1:88:ab:2f:8c:e5:3f:58:20:32:46:a0:df:25:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:08:11:25:89:98:84:FC:FC:CA:4F:82:F8:B2:6F:B5:5F:7F:D6
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:92:10:de:08:de:98:4d:9e:a1:16:40:82:35:f2:f8:da:c3:
62:ef:21:a0:8a:ef:ff:6f:2d:87:7b:c8:ee:60:73:5a:a2:9c:
69:59:04:f1:9d:f5:b7:11:da:ad:ca:ec:35:e6:9f:42:bd:ce:
6e:79:8e:89:b8:6c:aa:05:13:de:8e:31:98:5b:72:ca:6c:e7:
45:9f:0b:97:8e:18:a5:3d:2a:9f:56:9b:a3:8c:8d:8b:03:5e:
ee:86:f9:96:58:53:ae:6c:be:cd:37:a6:c4:a2:39:1a:49:c4:
39:e0:d5:26:31:37:7e:f6:25:1f:bc:15:28:27:bf:66:c2:94:
28:f0:ee:d0:92:04:12:5b:93:4a:63:7d:62:31:3f:ac:fe:36:
8a:bd:e5:c4:b3:d7:5e:2f:5d:e6:e6:d8:8e:eb:20:80:ff:12:
51:8a:0a:9f:69:3d:c1:25:ff:5c:eb:7a:d5:a4:70:43:96:f3:
7a:61:66:92:2a:f2:a6:fb:a7:2e:a7:3c:cb:70:21:55:fa:8f:
ca:26:99:e3:14:94:d5:5a:e6:28:eb:80:cc:fb:2b:28:ef:de:
9b:24:53:49:70:29:7a:d4:e5:b6:90:6d:e8:55:d1:84:04:3e:
87:a5:60:46:08:ec:9a:e6:b9:0a:2d:13:01:d6:d6:dd:e5:7a:
92:20:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:36:34 2025 by rpki-client