Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File: 1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier: NGoL1uN9hQBNP024ePohG59W4iACULITtVH7km+Jauc=
Subject key identifier: 21:93:F8:2E:82:76:E4:57:98:53:E7:90:C9:1A:6A:3A:C3:C1:F4:78
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer: /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial: 0196BAED5B9C2E6EB9D5DB9BB3BE65FA3122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number: 05AD
Signing time: Sat 10 May 2025 16:00:39 +0000
Manifest this update: Sat 10 May 2025 16:00:39 +0000
Manifest next update: Sun 11 May 2025 16:00:39 +0000
Files and hashes: 1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: y7thEbMuYpM6eZVa5C5vNrbk8yrfaICrJLoz/rhOfYo=)
2: 3nfIx05AjEYVNh0f8uhQsoNdvl0.roa (hash: kNmQ6q+KoIWrsskhw+6QTieUtnc2+n6TEwJFoX3Do3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:5b:9c:2e:6e:b9:d5:db:9b:b3:be:65:fa:31:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Validity
Not Before: May 10 16:00:39 2025 GMT
Not After : May 11 16:00:39 2025 GMT
Subject: CN=2193f82e8276e4579853e790c91a6a3ac3c1f478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:27:d6:d3:d1:19:92:17:de:31:2b:d1:16:
20:e6:37:cc:fa:a2:cf:82:fb:dc:7c:29:24:8b:e2:
5b:47:e9:df:2b:ad:33:6a:13:69:0e:cb:1c:28:b5:
9e:32:f6:ec:c6:c7:8a:11:8f:4d:f6:ec:d6:6c:c4:
00:00:2c:a8:4d:b0:63:95:f7:02:10:aa:94:44:30:
6c:99:c8:98:e2:4f:05:ae:67:a8:a1:35:c0:b1:47:
bd:b3:8a:e9:13:25:fd:e3:19:81:e6:87:32:b9:a4:
14:75:3f:cd:c3:91:42:bc:a7:1f:d5:ef:8f:fa:06:
67:7c:da:34:54:ae:3e:5e:67:04:70:67:fe:53:d9:
26:fa:8f:f2:6c:35:b6:77:01:25:53:08:4a:c2:d3:
71:c3:38:05:22:46:4e:7d:fb:ce:8b:58:56:98:e7:
89:46:14:9d:ff:f8:96:40:01:5f:6e:06:28:b6:c3:
42:81:f5:d1:84:f4:69:0d:a3:34:cf:e9:33:ea:6b:
c4:78:38:a1:5c:47:6c:e8:50:ac:e9:50:f5:aa:10:
e4:49:3c:44:b4:64:a7:f9:cc:a0:f9:50:10:15:00:
9a:e2:4f:3a:d4:e0:dd:00:78:c7:e7:99:ad:9a:97:
28:49:6e:3e:d8:45:a2:ef:14:9d:12:8e:89:8d:5f:
b1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:F8:2E:82:76:E4:57:98:53:E7:90:C9:1A:6A:3A:C3:C1:F4:78
X509v3 Authority Key Identifier:
keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1d:34:59:2c:a6:bf:7d:09:c9:c5:d3:0c:0f:eb:36:28:5a:
c2:95:cd:ee:59:fe:07:43:45:a6:52:53:fe:0b:eb:a1:dd:c9:
95:56:83:88:b5:0a:c1:de:12:6d:8e:4a:64:2f:d0:6c:7e:f9:
02:71:e5:7e:12:2b:1b:17:f5:06:10:62:31:a0:77:b5:da:44:
eb:93:46:ad:c9:c2:db:71:c0:dc:5e:ad:9b:e0:4a:22:db:da:
9c:6d:4e:f0:e6:e5:a9:b9:d5:28:9d:fd:7b:71:dd:65:e3:0f:
2d:bf:5a:a3:81:35:6c:93:91:eb:af:51:5f:27:de:f4:2d:b4:
7f:bf:96:5b:34:ef:3d:9f:cc:f1:b9:55:a7:9b:70:62:82:1f:
55:0a:71:7f:4f:cf:ae:5a:e0:d5:1b:21:3e:b8:20:ce:ac:08:
37:eb:1d:23:80:58:6d:eb:39:46:23:e5:6a:e0:d1:43:5e:f0:
39:ed:42:97:13:64:83:8b:39:51:a8:80:b3:5c:cd:b9:51:de:
4e:57:31:5d:9e:71:e3:c1:33:d3:48:c6:8d:6d:18:db:6b:9f:
18:80:d2:fd:60:28:0b:43:38:5c:44:5c:11:c1:18:06:07:43:
7a:7f:7e:1d:27:67:a9:08:22:db:3f:16:96:33:25:fe:20:25:
f2:a5:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:24:03 2025 by rpki-client