Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File: wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier: MAKHwNOidmWn1KKc1FXOabdcqZPtbOCGabTj4pnhJYQ=
Subject key identifier: 38:83:90:7E:72:CA:3A:84:D9:63:D9:75:7A:4D:A1:D8:94:D5:21:87
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 0196CEAB2919FCFE7DB5623A7C590ECBBFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number: 0F9B
Signing time: Wed 14 May 2025 12:00:45 +0000
Manifest this update: Wed 14 May 2025 12:00:45 +0000
Manifest next update: Thu 15 May 2025 12:00:45 +0000
Files and hashes: 1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=)
2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: GSVuzq1q351mjxTTIWaIOxYGLc9WcewDD4WgzMKjB0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:ab:29:19:fc:fe:7d:b5:62:3a:7c:59:0e:cb:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: May 14 12:00:45 2025 GMT
Not After : May 15 12:00:45 2025 GMT
Subject: CN=3883907e72ca3a84d963d9757a4da1d894d52187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:0d:bb:db:9c:25:47:e7:5f:8a:43:92:9f:
3c:f9:1e:a9:da:93:28:87:86:ce:e8:31:60:4c:f7:
ca:b2:b9:83:2e:37:ce:29:67:0b:9f:86:07:5f:54:
a1:4c:09:e0:93:a3:49:2f:b7:c1:af:68:eb:d3:ba:
3e:de:b0:6f:44:b1:e3:5e:04:e7:c8:e1:d5:6b:53:
4b:32:d8:72:8f:2e:f5:f8:cd:4f:ae:3c:da:f9:04:
42:4a:b2:dc:42:65:b8:04:75:da:48:f0:f4:f6:08:
62:12:46:00:6c:cf:1e:63:26:4d:b3:a5:c4:0e:68:
87:8e:20:9a:db:83:23:59:ad:20:34:ed:8b:d0:7d:
26:e2:83:c6:81:5a:4f:51:6c:a0:5e:b6:d3:08:a8:
93:06:b9:c1:07:b1:c0:29:31:85:7b:1a:7f:0d:19:
88:39:bd:1d:58:8e:2f:ca:70:69:df:79:e9:0b:3c:
63:55:4a:33:d4:0f:df:d2:90:d3:29:a0:93:52:f9:
1b:18:d7:cc:91:e1:aa:90:97:c4:3c:1b:ab:bf:a5:
92:f5:96:ab:68:98:2b:f0:e8:c2:77:03:ca:d7:bb:
5c:1c:22:8b:d4:b8:f9:d8:32:bf:6a:8e:61:53:78:
e1:74:f4:64:49:25:2a:55:d8:b3:0b:20:fc:cf:5e:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:90:7E:72:CA:3A:84:D9:63:D9:75:7A:4D:A1:D8:94:D5:21:87
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:66:d2:63:36:a2:07:a4:20:a3:32:09:8c:af:36:62:a2:e0:
73:f5:62:5f:5e:ec:23:dd:78:be:44:1c:2a:7b:a9:a1:3b:e0:
c0:85:73:a8:38:24:bc:cd:b7:2c:66:5b:34:0d:44:2d:ab:ac:
05:8b:18:ea:e2:73:c2:a4:f7:67:17:a5:27:fc:b8:46:f8:06:
7d:cb:aa:ed:d4:f7:3d:e4:a0:94:39:84:25:74:de:81:07:7b:
14:9b:c5:d7:73:7f:a7:db:af:fa:93:3a:a5:8a:fa:ab:03:60:
7b:85:19:11:e9:f2:6a:a3:18:ee:7f:59:76:3c:aa:4b:e6:9c:
b3:19:6a:ae:13:ea:47:38:5b:38:7e:b6:2b:5a:47:df:da:f5:
02:74:35:69:3d:56:a1:1d:86:6d:3b:a2:3f:c6:1f:90:a7:79:
91:89:dc:f4:9a:03:dc:4f:13:c7:b9:d5:70:94:c5:75:11:56:
4c:81:71:cf:a8:54:f9:a1:55:f5:24:f4:6b:8b:a8:4b:6b:a9:
10:81:bf:b6:de:df:b4:dd:e3:34:3d:80:47:05:bf:aa:03:5d:
cf:69:34:a9:1e:9c:c7:31:df:fd:b8:15:41:a5:c4:b2:ce:d4:
a2:83:19:7b:49:07:6c:4b:58:dc:d8:6c:c3:7e:73:d6:3d:8e:
a9:7a:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:23:42 2025 by rpki-client