Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier: u2pI5eFazJWbSDSFlKpjWNcHzMIhdvVIcTps4Cn9VLY=
Subject key identifier: D9:62:D2:7F:7A:44:0E:5D:1C:2C:CB:C5:5D:F4:E4:34:AE:73:88:2B
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 0196B9A4BB11E969D4897C6BB3A93B5E8132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number: 0CD1
Signing time: Sat 10 May 2025 10:01:42 +0000
Manifest this update: Sat 10 May 2025 10:01:42 +0000
Manifest next update: Sun 11 May 2025 10:01:42 +0000
Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: pLv39go1gWx9ow5Wjdr7SQggeXULuWfLBCfWfWfvS2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:bb:11:e9:69:d4:89:7c:6b:b3:a9:3b:5e:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: May 10 10:01:42 2025 GMT
Not After : May 11 10:01:42 2025 GMT
Subject: CN=d962d27f7a440e5d1c2ccbc55df4e434ae73882b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:a8:4f:b6:0e:08:cd:d3:0d:70:51:2f:7d:
b8:f6:90:ba:07:ae:c9:df:34:61:08:84:74:b1:2f:
fd:a1:73:44:ca:a2:ed:28:5c:c4:70:85:ba:e0:8e:
76:25:28:bf:df:b0:de:d0:96:e2:11:cc:e1:b7:c2:
ea:7f:aa:1d:f4:6d:3e:81:d4:ce:9f:a4:2a:a6:df:
44:c4:a5:c1:c2:aa:3c:6f:5f:95:ed:0a:79:c5:79:
cc:eb:df:3a:50:08:e4:7d:33:3b:6b:3b:fc:c0:bf:
a7:69:f7:e9:69:7d:55:95:d4:ba:1b:a6:55:61:d0:
75:c1:b9:ca:c2:80:f4:5f:0c:c5:c5:68:78:ff:7f:
4e:b9:ef:aa:dc:55:20:ea:f0:84:89:97:75:b9:c3:
5f:50:5f:70:08:32:f6:0e:ad:a2:36:80:94:c4:b1:
86:c0:76:f2:49:b6:1f:67:e7:7e:0b:75:f6:f6:49:
76:8d:23:4e:32:ee:96:0c:ee:41:be:d1:17:01:4f:
a4:93:8a:7e:f0:11:69:de:75:ee:f9:6e:88:46:bf:
78:f5:df:fc:d9:f9:78:61:52:8f:83:a8:6a:13:01:
dc:41:29:92:0f:ff:01:94:5d:14:e1:35:0b:60:25:
22:2b:dd:f9:07:61:03:0a:ff:a8:86:7e:47:02:ca:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:D2:7F:7A:44:0E:5D:1C:2C:CB:C5:5D:F4:E4:34:AE:73:88:2B
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6d:7f:e0:37:bb:05:a7:a1:e1:89:43:6a:ed:af:bf:77:1d:
72:9d:b7:3e:1f:e8:82:b8:8b:f7:6b:ef:bc:a9:b4:de:2a:39:
24:7d:57:78:01:1c:82:33:71:05:08:05:ae:c0:1a:83:62:41:
d9:2e:26:1d:c0:8e:cd:c9:eb:a4:7b:ad:52:e0:66:d4:fb:b2:
e3:91:1f:ae:67:20:ec:be:13:07:a1:9c:8a:3d:77:09:56:4e:
fd:57:30:e4:1f:f4:3f:3b:06:8e:cf:b5:ce:d7:88:9a:9e:cc:
b4:6a:80:b9:50:0b:be:7f:20:db:5c:12:90:8c:fb:c7:3b:0c:
ce:e8:3b:02:6a:f7:18:32:e7:46:f4:19:93:0c:a1:18:6b:43:
11:32:59:98:62:16:8c:e0:58:26:df:1f:47:c9:5f:04:f7:bd:
b5:be:df:ff:06:9d:f1:8b:fc:d4:af:2e:40:22:31:9c:46:d5:
20:08:27:fe:8f:9d:09:34:15:9a:25:4a:d3:c2:3f:4d:f0:3e:
74:50:e5:1f:b0:9c:d4:87:58:af:d2:66:84:5c:10:8f:47:7d:
05:28:40:15:1c:b6:0d:8b:2a:f9:49:90:aa:82:ef:0d:fd:07:
3d:69:ec:fc:ea:c0:8d:af:2a:b9:cd:d3:93:f4:2e:23:43:0a:
1a:bd:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:46:57 2025 by rpki-client