Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json)
Hash identifier: zgrY1VJiqML3veJEXs2WKmWLQAKNZgyLSemev561aYg=
Subject key identifier: C4:8A:C8:72:9D:2E:37:4A:58:45:9F:87:BE:63:85:92:32:78:B4:64
Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Certificate serial: 0196C15CE82C0F7ED413A286DCE8708BDEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
Manifest number: 0470
Signing time: Sun 11 May 2025 22:00:13 +0000
Manifest this update: Sun 11 May 2025 22:00:13 +0000
Manifest next update: Mon 12 May 2025 22:00:13 +0000
Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: 3Q9GJTXyXhvBENqmoe1IGJ7/n0jhV3lTSM8kDj6m2Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5c:e8:2c:0f:7e:d4:13:a2:86:dc:e8:70:8b:de:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Validity
Not Before: May 11 22:00:13 2025 GMT
Not After : May 12 22:00:13 2025 GMT
Subject: CN=c48ac8729d2e374a58459f87be6385923278b464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:cc:d8:04:39:2b:03:65:5f:5c:02:38:fb:
04:60:02:77:b4:6e:9d:1b:5e:2e:2f:97:0b:df:a8:
d7:73:46:e2:d8:8b:71:ed:ec:52:29:66:1b:2a:bd:
a7:90:a2:a8:22:8f:ed:36:57:96:5e:57:73:26:05:
d6:0a:4a:0a:dc:c0:d3:c2:b5:37:74:44:88:0a:18:
b4:c5:f9:83:9d:d6:99:ce:e4:0d:fb:0b:08:01:21:
85:b9:48:2b:d6:e9:a1:c3:d5:9d:9a:73:15:c9:27:
3f:47:74:01:20:a5:c4:92:0e:51:fb:2a:84:48:ea:
1a:86:56:51:4a:bb:c2:0b:24:fa:e3:46:73:1b:9b:
8b:0c:6c:6d:16:cb:3b:cb:54:b6:5b:fc:01:fd:ca:
9e:41:0f:38:f1:1c:4f:34:b5:b8:c2:60:43:9d:fa:
54:e2:7c:1f:f9:8e:a3:3a:8d:c7:3b:e1:bb:9b:08:
cd:0a:c9:6b:e8:c0:26:28:36:dd:45:14:32:33:59:
20:36:d0:47:78:e6:97:e9:1f:50:e5:e5:fa:24:a6:
95:1e:12:7f:cf:cb:85:17:6a:c2:a9:61:b9:b7:91:
8b:00:86:00:9c:49:a4:a3:34:aa:5c:16:06:1b:ea:
1a:e1:28:4f:2a:d4:bd:41:07:68:5f:b7:7b:0b:8b:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8A:C8:72:9D:2E:37:4A:58:45:9F:87:BE:63:85:92:32:78:B4:64
X509v3 Authority Key Identifier:
keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:61:df:e5:46:c3:55:6f:55:59:b8:20:06:eb:84:02:ac:
37:7a:9b:6d:ed:ec:3d:ff:0f:0f:cf:35:4d:dd:b6:75:a4:cc:
47:46:41:25:cd:e4:e3:e1:c2:36:f4:b0:f6:40:7d:f6:fe:31:
2e:66:32:e0:05:41:bb:10:2e:ea:42:81:59:38:b0:97:40:c1:
13:70:a7:5e:f9:7e:5a:e4:f5:60:33:7c:93:10:46:c3:3e:a8:
3d:5f:cb:39:c7:af:e4:6f:9d:1d:00:1b:65:80:30:51:51:3a:
74:77:85:36:0b:52:90:a1:a7:cb:ea:0f:fd:5b:0a:af:59:6d:
d6:98:dc:8c:31:75:93:f0:20:ab:9e:6c:57:e2:e2:f4:e5:77:
f9:d4:6d:63:9c:16:c6:d2:44:72:f3:21:19:f8:0d:09:0a:7c:
72:ef:4c:f3:be:ec:31:c8:f2:d7:50:82:29:74:09:a3:96:a0:
a9:78:78:8c:c2:bc:5a:18:e5:99:9b:05:ba:25:1e:3d:37:ab:
a2:5c:eb:7b:ee:68:97:f0:d6:d0:9a:e4:c8:01:8d:09:1b:a4:
2d:45:d5:9e:4b:0a:20:80:69:92:a8:26:2c:e2:cb:d8:3d:4d:
46:ff:10:7d:21:99:de:dd:42:ff:58:f2:f7:65:21:01:46:93:
aa:5d:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:57:58 2025 by rpki-client