Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json)
Hash identifier: XnMthsttcjIXIJQIAhSFvVZhO0KRud/YCNqltYrxCbw=
Subject key identifier: 68:51:24:09:9B:88:65:59:22:DC:83:F6:10:72:74:63:14:36:D2:EA
Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Certificate serial: 0196C04A94DCD53BC919B7DF48839F41F29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
Manifest number: 0DA4
Signing time: Sun 11 May 2025 17:00:35 +0000
Manifest this update: Sun 11 May 2025 17:00:35 +0000
Manifest next update: Mon 12 May 2025 17:00:35 +0000
Files and hashes: 1: D9VtpqQ5QcOE8_3AAGv6AbSncPk.roa (hash: 45VJpPEdefwyDmmpbMXwZdBXiJtpSM2szrEhn6hGnnw=)
2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: +PJNHh6rSf44havHaLrRnQoOK/8FNgwNEUMDUL9vCz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:94:dc:d5:3b:c9:19:b7:df:48:83:9f:41:f2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae
Validity
Not Before: May 11 17:00:35 2025 GMT
Not After : May 12 17:00:35 2025 GMT
Subject: CN=685124099b88655922dc83f6107274631436d2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:a7:a1:73:92:11:4f:c8:1e:d6:1e:f4:68:
0a:04:29:db:98:04:7d:2e:db:de:99:65:ea:8d:a1:
0e:ea:9c:7b:86:ae:72:22:3d:05:73:53:67:d8:79:
0e:c9:8c:9e:fe:84:e2:d1:3d:c1:df:0c:05:56:d3:
07:c9:9f:ec:76:64:f1:23:ce:d0:ed:92:eb:b7:9e:
fc:66:35:b4:1d:a6:bb:79:a5:2b:d6:06:a0:24:a8:
a9:92:cf:de:ef:bd:c2:e6:05:04:35:02:c0:16:66:
48:df:9e:d2:b2:b9:f5:57:8f:dc:e6:d2:9c:ae:6f:
2e:e2:e0:73:59:cb:14:f0:aa:f5:f9:6b:a9:69:ce:
0d:87:5e:c6:c9:81:45:a8:42:e3:75:79:8e:37:06:
f9:e8:d9:5a:89:d1:49:b2:e5:81:e0:53:e5:d3:3d:
e5:fe:cd:12:c7:49:77:71:e9:b7:a8:1a:52:a4:0e:
9b:a2:bf:27:87:79:98:3b:45:e6:67:cc:3a:31:4e:
9b:6d:df:ed:25:1b:51:3b:06:74:04:56:71:c6:a4:
fe:3a:42:80:45:5f:fc:d6:d5:8b:a3:04:83:01:1b:
94:b4:aa:b9:d1:e2:72:ee:b3:24:97:f9:49:de:63:
2b:59:85:74:c8:30:b1:17:1c:41:ab:8b:e4:af:68:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:24:09:9B:88:65:59:22:DC:83:F6:10:72:74:63:14:36:D2:EA
X509v3 Authority Key Identifier:
keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1a:0f:8d:b3:c8:c8:67:04:67:5d:f0:f7:01:7c:1b:a4:18:
0d:50:2c:de:b4:91:ec:f2:27:dd:c5:6a:98:42:43:70:87:b8:
5d:72:7b:78:ee:9b:20:8e:56:d4:d5:b3:f0:33:0f:05:8d:3f:
93:c2:60:fb:d8:f3:d9:f1:85:fa:d9:6a:6c:3d:6b:b4:c7:71:
97:95:99:30:96:1c:75:2d:73:8a:f1:bb:84:16:10:05:6a:4c:
ee:33:d6:0b:ce:97:c3:9c:bb:16:66:fd:3e:69:27:c0:ac:b3:
39:1e:68:de:1e:14:97:d1:17:e6:27:fa:49:b8:f3:9d:a3:d5:
91:ec:6b:5f:ae:10:c4:b6:4e:93:ab:72:56:0f:7e:a8:c0:86:
55:42:fb:42:8d:db:d9:7a:d9:53:e1:8d:df:9b:6f:e5:53:f6:
cf:1f:49:60:1e:e8:7a:10:87:16:59:8e:c9:6e:12:9d:33:ee:
16:49:84:5c:a5:bc:2f:5f:dd:34:e5:5a:76:fd:04:39:33:e6:
7e:9f:87:da:10:15:f0:c8:62:89:e9:39:5c:f6:84:25:41:17:
af:e9:de:7d:2e:f1:58:bc:40:5e:be:a3:75:6f:a4:1e:4b:25:
50:4e:c5:8c:bb:93:c1:b2:bd:f4:b3:c0:be:0b:e1:76:98:24:
12:82:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:11:57 2025 by rpki-client