Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: ksgMwtsZCWS7i+03n667y8lIhC3ZQ8RXvPB4hlKfy4Y=
Subject key identifier: 9A:8E:DD:88:DD:80:5B:0C:C4:C3:C7:B9:FE:97:24:CF:93:93:9A:CC
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 0196AA9EA3FCF62D990265E3B4CD716CE067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 08E9
Signing time: Wed 07 May 2025 12:00:45 +0000
Manifest this update: Wed 07 May 2025 12:00:45 +0000
Manifest next update: Thu 08 May 2025 12:00:45 +0000
Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: AVq0A8jv16ZOe7RdVQLBE8XybNLC5Pv0GYBoqUcmgzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:a3:fc:f6:2d:99:02:65:e3:b4:cd:71:6c:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: May 7 12:00:45 2025 GMT
Not After : May 8 12:00:45 2025 GMT
Subject: CN=9a8edd88dd805b0cc4c3c7b9fe9724cf93939acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:f6:4d:67:38:4a:5c:d5:03:2f:9c:00:bf:8a:
bb:3f:aa:6b:37:6e:41:80:96:9c:84:26:64:fe:10:
c4:f0:9e:0d:94:24:96:d8:81:d7:cc:e8:17:54:e2:
1c:20:3f:83:5f:dd:3c:f8:cb:8b:e7:15:a7:19:5d:
e2:d0:43:17:af:69:df:53:cb:98:b2:ff:06:9f:9f:
97:b1:1f:c8:10:95:94:09:20:bc:18:7a:1a:d5:d6:
40:38:bb:72:f1:99:46:5a:fb:3d:2c:31:e6:08:12:
44:90:23:b4:a3:0e:fb:64:bb:b5:9e:c1:66:d1:9d:
c8:52:1c:a0:7a:e2:1c:e2:00:cf:68:fc:af:de:cd:
b8:19:75:c6:d6:e3:e8:09:e2:26:3c:c9:21:5b:3c:
0d:73:fe:9e:dd:8f:1a:2c:f3:73:9e:26:7a:99:aa:
85:b9:72:eb:ca:77:fe:fb:00:2c:4f:3a:2c:19:c8:
c8:dd:67:b1:47:82:7b:c4:5b:68:37:01:9d:73:e9:
3f:26:dc:0b:02:1b:d2:e4:57:34:7b:cc:e0:91:9a:
ad:8f:1e:f0:2f:d3:c4:49:22:c0:ae:ab:46:a2:69:
e0:d3:4f:a2:51:5c:0b:9e:68:e4:8f:d8:c3:21:57:
cf:9d:ac:9b:c7:f3:4e:ae:aa:85:5c:ef:cd:e3:44:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8E:DD:88:DD:80:5B:0C:C4:C3:C7:B9:FE:97:24:CF:93:93:9A:CC
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:27:0c:fc:48:a2:e6:0b:c3:36:88:02:29:84:25:af:55:
6e:7b:8b:6a:4a:8e:5a:00:64:ae:4e:97:39:68:0b:de:d2:99:
9c:41:e2:1b:b2:0f:cc:2b:37:15:cc:24:5d:13:e3:ab:aa:46:
ea:b0:72:e7:34:ad:a3:34:a7:d7:e9:1a:d5:72:1c:07:3d:72:
9a:0e:33:67:7f:77:8d:22:21:bd:bd:59:e7:ba:e9:27:9e:57:
1a:86:28:75:64:25:5c:b5:46:6c:bc:62:be:0c:15:a6:13:88:
99:5b:f6:06:40:f2:72:10:00:43:60:93:49:a0:44:c9:8a:df:
c7:cd:20:3a:c3:a0:91:18:4a:e2:69:c6:9d:f0:fd:d0:ac:a4:
1c:08:91:b8:84:d4:46:83:33:1b:83:dd:14:37:5e:43:e7:8a:
86:a5:ad:bf:5f:53:f7:36:01:e5:14:18:c5:c4:2e:df:e1:1d:
f9:26:86:6c:18:74:0d:f5:46:14:b7:ec:96:3a:28:c0:b1:44:
39:9c:8c:32:7a:1a:fc:a8:ec:9f:b2:03:47:6a:90:ca:7f:e6:
2a:10:12:f8:fe:91:23:78:33:8a:3a:12:62:c1:1a:31:84:a0:
68:08:56:71:f8:7e:04:2b:ec:0c:70:d4:61:31:11:f5:7e:2c:
65:b8:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:34:52 2025 by rpki-client