Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: MSoDJH64CcNKWgQunhzjq9EcVAdJRac8xCwZwh8c6QI=
Subject key identifier: B0:A6:26:5A:71:2A:C5:0F:F3:BD:80:0F:1B:84:84:7F:73:C0:25:17
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 0196B9A46B2144439CADEC6590AC48311F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 139A
Signing time: Sat 10 May 2025 10:01:22 +0000
Manifest this update: Sat 10 May 2025 10:01:22 +0000
Manifest next update: Sun 11 May 2025 10:01:22 +0000
Files and hashes: 1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=)
2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: FGmFoMtv8F1QeMAhAO5StUhA+x6rpZcNEQ6Fq0AF8D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:6b:21:44:43:9c:ad:ec:65:90:ac:48:31:1f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: May 10 10:01:22 2025 GMT
Not After : May 11 10:01:22 2025 GMT
Subject: CN=b0a6265a712ac50ff3bd800f1b84847f73c02517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:62:19:04:51:4e:d5:fd:ff:14:f9:7e:5d:
79:92:be:a9:d1:57:84:57:a4:40:7d:5e:64:b9:d1:
f4:63:bb:36:b5:b6:c9:10:01:0f:79:a8:5d:68:7a:
a1:90:7d:94:a9:58:98:24:d4:b7:5b:dd:2d:0f:2c:
b3:f4:fe:e0:7d:a6:55:f1:71:4d:10:1b:f0:78:4c:
c4:a6:cb:17:04:ea:bb:11:8b:57:d7:da:27:95:9f:
0d:0e:09:c2:e3:dd:ce:b8:68:e0:5d:0b:dc:9a:2a:
ce:fe:c2:05:4c:36:ec:dd:9a:f1:52:7f:b6:8c:f1:
9e:9f:59:a9:ae:6e:5b:b9:33:9c:5a:67:77:42:58:
77:00:c1:7b:ec:d8:55:6b:21:05:b9:ae:3b:5e:1d:
d4:e5:7c:9b:22:f1:44:e8:48:a5:0a:c8:e4:4f:73:
a8:ce:51:27:60:c3:3a:b9:86:a5:49:b6:d9:2a:39:
cd:78:53:3b:a3:27:f9:52:ca:39:e7:fc:a4:d9:b2:
26:de:9f:f2:65:b0:9c:46:b9:6f:4f:bf:b6:a0:34:
f6:0e:d7:08:e2:2d:9c:1e:12:9c:25:48:bf:f0:1a:
20:b9:3f:d9:09:90:28:3f:cd:df:f5:79:ee:a8:9c:
a5:dc:3a:3c:bd:c9:79:37:7f:2a:1d:9d:3b:a1:92:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A6:26:5A:71:2A:C5:0F:F3:BD:80:0F:1B:84:84:7F:73:C0:25:17
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:38:1b:d4:59:ff:88:55:d4:ee:cb:27:c2:cd:4d:ec:73:2c:
ff:ab:3f:18:0e:0a:24:70:f5:3c:2f:ea:1c:a1:24:fb:7b:0d:
ee:95:3f:d1:c2:f1:55:0b:aa:a3:d6:3a:06:a9:0e:e4:9d:7a:
58:fc:ad:6d:0b:98:52:14:01:73:ae:66:7e:39:14:cb:e3:ef:
a3:c1:4c:6b:b3:d7:3c:ed:4a:0b:24:3e:2f:d4:ba:f3:81:1f:
50:3a:83:2d:ed:54:e1:7e:0c:5c:d5:17:1b:77:65:0e:0f:ba:
f8:87:89:5b:4f:ea:a7:a2:6f:4a:21:30:22:90:81:44:5d:b4:
48:19:9f:4d:89:e0:69:11:b9:70:cc:64:c9:2e:30:58:b8:7f:
90:f5:5c:0f:0f:14:97:a2:91:c6:b4:01:79:77:8f:62:39:b8:
18:29:ff:22:9f:73:5d:79:9c:af:ad:26:67:f6:19:27:4e:0b:
ba:b2:10:29:c9:cc:2e:54:39:31:8d:35:24:3a:e1:7c:f7:bd:
ca:60:14:e6:8b:36:63:f4:d4:8b:d7:07:a0:b8:f2:69:7a:e7:
e2:25:37:6e:e3:e0:24:e3:72:09:07:a1:15:68:54:8f:80:71:
2d:83:65:6a:dc:8c:ab:ef:e6:2b:14:37:3c:8c:84:8d:be:da:
b2:0f:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:01:11 2025 by rpki-client