Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: UaLaCZr0z3Snyqo4EkFsZ9rZFANEQ2ioE1xaoFmrB08=
Subject key identifier: B0:A4:B2:8F:A6:BE:E2:E2:82:0C:3A:D8:3F:51:47:6A:FB:15:58:9F
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 0196B1EA57CFE17E73D3DD2108D8BE759E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 22:00:47 +0000
Manifest this update: Thu 08 May 2025 22:00:47 +0000
Manifest next update: Fri 09 May 2025 22:00:47 +0000
Files and hashes: 1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: 95SyUEetpWgKm8WyMxEhbZoTp9DqcBcW3KjxEAmY0uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:57:cf:e1:7e:73:d3:dd:21:08:d8:be:75:9e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: May 8 22:00:47 2025 GMT
Not After : May 9 22:00:47 2025 GMT
Subject: CN=b0a4b28fa6bee2e2820c3ad83f51476afb15589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:0b:c4:0b:5f:c5:9b:2f:ae:10:06:74:db:
5e:6e:5a:78:02:1c:ae:d5:e4:2c:aa:cd:3e:5f:03:
d4:03:f1:58:77:b3:e5:3d:81:28:76:1a:38:55:06:
5f:1c:47:cf:7b:bb:6b:c0:da:36:73:b8:4d:ce:8a:
78:d3:f0:94:6d:16:23:aa:a7:84:8c:ec:fc:58:50:
28:83:f4:7d:b5:68:9b:f4:69:80:6a:07:18:06:cb:
df:19:46:6b:bf:21:99:5b:1c:db:a8:36:2d:40:26:
6d:a9:19:d3:5c:82:03:2d:d2:3d:62:20:fc:72:2a:
b0:b9:78:74:db:7e:b2:bb:96:5a:a9:dc:de:25:c4:
c2:06:d7:de:0c:e8:a1:42:f0:d1:7b:46:1d:68:9f:
63:82:41:a7:ca:57:9b:df:4d:8e:f6:2c:b0:6e:2d:
66:41:22:42:cc:bd:19:90:de:f6:93:6e:a4:c7:a1:
15:98:65:28:aa:0c:25:ee:5d:8d:b0:ef:ef:1f:61:
06:92:92:90:a3:f2:20:a6:b7:1c:f3:7f:6f:5e:6b:
7a:9e:20:81:ec:4f:31:f7:1a:49:f8:22:bd:3c:9f:
a5:78:46:38:00:f2:65:50:18:48:ba:60:6f:6b:8b:
73:f7:61:6a:30:19:b8:6b:12:9a:14:62:0c:d8:3e:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A4:B2:8F:A6:BE:E2:E2:82:0C:3A:D8:3F:51:47:6A:FB:15:58:9F
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:e9:63:8e:90:24:c7:74:92:4f:3e:9a:48:98:91:f2:1a:
d1:86:b8:19:c5:23:3a:98:39:2d:ac:9a:0f:25:39:2f:2d:77:
cc:c8:91:30:05:97:62:b8:44:b4:8a:5f:47:0f:8b:82:91:0a:
b8:17:58:6c:56:6d:ce:18:b8:7d:0d:21:b5:80:36:b0:6b:8d:
f3:bd:4d:24:c0:f7:4f:4d:9f:77:38:4f:5f:32:0f:c6:99:fb:
7e:90:f3:a0:c4:1c:54:25:d7:fc:da:ac:d3:60:01:58:49:2e:
17:c7:2e:ad:52:00:98:d9:f7:59:ca:aa:d1:c9:b1:a9:2f:c7:
80:72:48:3c:cb:28:38:a1:b2:65:27:72:b7:fb:4c:e8:d5:33:
ac:a8:e8:43:1b:76:e2:bd:62:91:36:e1:2c:6c:41:37:b4:61:
ae:81:b7:56:4f:ae:22:d4:5c:33:e0:5b:22:99:89:fa:a5:eb:
6d:49:4d:8b:1b:22:e9:e8:53:8f:eb:74:0b:00:87:a0:a5:62:
1f:98:ba:78:b5:5a:06:c9:80:2a:0c:8c:00:11:91:63:ad:eb:
9a:bd:02:69:d1:d9:81:db:51:fd:40:af:b9:0c:3e:14:6c:7b:
02:69:89:67:19:9d:6c:1b:a5:5c:fc:92:a6:8d:13:ae:73:de:
5c:7a:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:59:52 2025 by rpki-client