Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier: zpULnaI1TsniigQKgeUqq1aSXUL+GYDER8R/f/mgpiQ=
Subject key identifier: D8:13:2E:DE:2C:B0:56:A0:8A:21:10:A8:54:8F:25:62:DC:68:31:54
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 0196A9F9D54F4B630716CCF807280513FFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number: 0FAE
Signing time: Wed 07 May 2025 09:00:44 +0000
Manifest this update: Wed 07 May 2025 09:00:44 +0000
Manifest next update: Thu 08 May 2025 09:00:44 +0000
Files and hashes: 1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=)
2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: 2UvFXJHwBzed13FOK+R25u7hEbGWQ9N7uTfizFPi/rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:d5:4f:4b:63:07:16:cc:f8:07:28:05:13:ff:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: May 7 09:00:44 2025 GMT
Not After : May 8 09:00:44 2025 GMT
Subject: CN=d8132ede2cb056a08a2110a8548f2562dc683154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:32:d1:15:fe:f7:67:cc:49:24:93:fc:1c:
39:0f:52:ff:37:85:c7:9c:4e:c4:b7:45:af:5b:75:
47:a7:5e:5c:0b:d3:04:d2:a1:59:b3:87:c4:c8:d1:
5e:92:dc:99:d9:8e:c9:f9:77:41:30:06:a4:b4:cf:
c5:db:37:aa:36:64:26:af:70:29:03:e0:3b:c8:9a:
c1:39:2f:5b:a8:ac:ce:48:5c:aa:6d:d2:a5:c4:8a:
17:2f:97:55:d7:e1:f4:20:29:f0:d9:02:f1:da:da:
31:b9:6d:1f:ad:2b:07:b9:5c:74:c8:18:2a:6e:27:
64:27:6a:44:e6:86:8a:cf:37:fe:e1:e1:7e:98:bb:
79:1f:65:ac:76:72:b5:4c:5b:60:59:18:cf:33:f0:
df:af:fa:ab:aa:be:25:53:55:9d:36:6f:d3:e8:31:
f5:e1:eb:0e:ff:60:1c:ad:48:60:d4:f5:9c:aa:0c:
e2:be:e7:c5:57:20:32:88:e4:e0:74:c9:dc:ec:03:
76:4d:37:eb:58:a9:11:47:1d:99:8f:c5:01:0a:37:
ee:9e:4a:64:d7:85:0b:d7:0a:27:0e:33:4f:23:80:
08:cd:5d:6e:6a:61:04:cd:74:21:ab:d4:9a:d0:e9:
69:4d:12:e9:f1:39:fc:8e:6d:32:a0:7b:83:57:19:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:13:2E:DE:2C:B0:56:A0:8A:21:10:A8:54:8F:25:62:DC:68:31:54
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9f:d3:a0:f3:1e:ec:ae:0d:c8:c5:16:6a:d1:8c:4a:5c:1e:
54:f1:34:07:a1:bb:9d:06:ab:74:1c:e3:5b:6e:2a:e8:e9:e4:
16:c6:4b:7e:6c:c3:1c:e2:a4:c0:6b:20:52:d4:8a:13:4b:16:
62:57:0a:4c:e0:02:0d:c6:d2:c4:1e:a9:f4:8b:a9:b2:36:1d:
2b:aa:1a:46:45:a3:1c:53:3a:cb:96:df:b1:6c:10:4e:1e:11:
bc:d9:f6:89:c0:90:34:ac:7e:7d:80:9e:57:6a:cf:6e:a9:b5:
55:e9:50:fb:dc:f5:12:63:bf:ac:f0:17:39:12:98:4c:42:f8:
d6:3f:5d:3a:91:8c:a9:25:4c:3d:c4:f4:6e:e9:03:ca:55:b7:
ee:3f:0a:ca:8f:9f:14:1f:ee:84:f6:75:1f:3d:d7:71:d9:05:
68:16:37:7a:2c:5f:ef:69:d1:4a:dd:8a:45:09:78:04:67:61:
03:fc:01:4d:44:4c:d8:e5:4a:6f:4c:af:be:96:3c:ff:94:8b:
45:41:77:4a:d4:80:a9:88:eb:4d:4d:33:e0:1d:3a:e6:59:a5:
77:a6:72:79:4a:31:02:89:50:8f:c2:2a:d2:42:71:1a:9f:06:
a4:c4:52:0d:d3:24:2c:62:3c:92:7f:e5:a1:07:6b:6a:ce:0b:
fc:a5:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:56:07 2025 by rpki-client