Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
File: WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json)
Hash identifier: SBGAG1eFOTdhlEbPT8v0kc66MXjcKuXJOROvX9VIn04=
Subject key identifier: 19:B5:C7:B5:A3:75:03:51:35:CC:34:D5:33:73:3F:E3:7A:6F:A7:60
Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840
Certificate serial: 0196BC37233CD54EC69D9CB7B00BE9674B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
Manifest number: 64
Signing time: Sat 10 May 2025 22:00:52 +0000
Manifest this update: Sat 10 May 2025 22:00:52 +0000
Manifest next update: Sun 11 May 2025 22:00:52 +0000
Files and hashes: 1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: XqQ/Vzzzl8AL0RWSwLUln1PLJ/tvTlj35YdfjIU0ssE=)
2: wKFImUWqJAZ63I73CUY6kU8vkUQ.roa (hash: 6TgnMHnPVKyV4LoYC0bcNEIls6efji/PtDzWQK1yR8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:23:3c:d5:4e:c6:9d:9c:b7:b0:0b:e9:67:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840
Validity
Not Before: May 10 22:00:52 2025 GMT
Not After : May 11 22:00:52 2025 GMT
Subject: CN=19b5c7b5a375035135cc34d533733fe37a6fa760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:6e:74:4f:9b:d3:d7:31:6e:b5:f2:ba:1d:
b8:9c:f5:67:92:ae:b3:51:13:bc:e7:27:3a:a3:e4:
13:cd:1b:7c:dd:0c:45:0e:24:e8:b5:c6:4c:a1:6c:
4f:17:2b:7c:bd:60:7d:f9:85:0d:88:a8:f4:2e:db:
41:e7:f6:69:23:3e:3a:6b:7d:25:60:be:b0:54:c2:
12:c4:a4:39:dc:dd:87:a0:7a:4f:c4:c2:04:cf:71:
7f:24:54:dd:ec:8c:8a:b3:1b:c6:3a:86:51:d2:2a:
01:4e:5b:a4:e4:d5:ea:60:d6:df:5f:06:59:69:2b:
f9:8f:0d:6c:57:d6:e3:72:49:14:5f:05:21:e2:e9:
f7:52:f5:6a:99:7c:7e:6f:19:07:18:78:f4:77:e7:
83:fd:7c:4f:56:d4:4e:b0:e9:04:8d:84:f5:39:2a:
19:f4:53:07:2e:7f:ad:55:cc:f3:1f:ee:89:eb:cf:
d0:d0:49:f4:71:ca:d9:88:21:6a:ce:8c:16:53:50:
eb:4c:2c:d0:bc:d3:0d:e7:55:b7:d0:95:e5:fd:19:
ad:40:75:1c:89:58:8c:22:b4:4d:79:e5:a1:0c:ba:
c8:b5:e4:3d:25:8e:66:53:e6:1f:b3:30:35:88:45:
52:a9:d2:46:6a:53:07:0a:df:57:eb:15:99:60:e1:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:C7:B5:A3:75:03:51:35:CC:34:D5:33:73:3F:E3:7A:6F:A7:60
X509v3 Authority Key Identifier:
keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9d:ec:95:77:8c:e0:b8:51:23:e7:34:1f:51:12:c3:e2:e0:
15:bb:0c:60:01:ca:97:3e:bb:55:a6:15:61:d4:ff:98:a1:00:
84:77:17:02:8f:8f:fc:55:79:14:db:64:1e:db:d3:58:1f:57:
cd:3d:ae:e4:b5:f0:a4:3e:75:07:02:d7:4b:3f:04:fe:bb:2a:
ca:f6:3b:84:29:04:72:61:fa:2e:e8:0f:f4:06:3a:32:8f:86:
f5:b7:c7:3a:38:d1:8e:78:28:9f:59:2b:d0:fd:50:d3:3e:23:
5b:21:18:d7:ce:18:24:96:02:bd:ea:e4:6e:78:cd:7a:90:ff:
ef:de:fa:e3:af:5e:99:8b:e4:cc:f5:a2:ea:78:81:ce:4a:5d:
1c:f5:26:c2:bb:ae:aa:f0:9e:39:9d:95:e5:fd:b9:fe:f8:43:
1b:7c:4b:02:d4:ca:48:cd:74:44:19:f7:04:81:ca:e9:90:d9:
20:45:ae:5d:90:4a:7c:07:59:be:84:6f:b0:93:62:87:b2:8a:
48:98:d0:ef:cb:c4:54:a3:e7:29:6a:7e:93:8e:ae:5e:13:62:
c8:9a:42:79:77:ed:e2:9a:46:78:5f:84:c9:c6:b8:7f:28:5b:
4f:76:fd:ed:7e:90:97:76:ff:0d:de:e6:25:e8:c5:16:3b:7e:
ad:cc:ec:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:17:24 2025 by rpki-client