Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: py6bP3aKiIazrW8diO0yI7eeoS34jEUWfzsZ/aEl8Qc=
Subject key identifier: 59:F9:1E:13:A2:CD:FD:D1:00:9B:85:6E:55:AC:A6:27:2B:0F:56:91
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 019653B7CC8EBB2EC4B7B54FC2BD3F6060A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 0ED9
Signing time: Sun 20 Apr 2025 15:01:16 +0000
Manifest this update: Sun 20 Apr 2025 15:01:16 +0000
Manifest next update: Mon 21 Apr 2025 15:01:16 +0000
Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: 5pBdRYPQKJKH739FscHFD75QdEgHLc+lkss8/Dfl2GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:cc:8e:bb:2e:c4:b7:b5:4f:c2:bd:3f:60:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Apr 20 15:01:16 2025 GMT
Not After : Apr 21 15:01:16 2025 GMT
Subject: CN=59f91e13a2cdfdd1009b856e55aca6272b0f5691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0f:99:b8:c0:df:d4:6d:ad:c5:c3:12:bc:3f:
33:c0:9e:2f:fb:8f:a1:35:20:b4:75:37:97:75:38:
0f:fa:46:c3:1d:5c:ff:e7:be:31:d6:0d:f2:dd:43:
ae:5d:a3:6c:6d:03:73:ac:f1:58:fa:95:73:52:09:
53:d0:25:ba:a3:23:f9:c9:e6:be:f3:cd:d5:6c:74:
53:0b:7a:29:89:d1:69:7a:62:b9:b2:22:46:6a:06:
b8:c0:3f:05:7b:05:b4:af:61:32:22:db:62:5b:27:
64:f3:4d:23:fc:84:7e:04:a7:19:07:3c:6d:26:c7:
a0:74:cc:ba:52:44:38:87:46:55:b5:c3:ff:ea:85:
a6:6b:68:48:e4:e7:a1:c6:96:6d:b0:5d:9e:0e:54:
26:9b:a9:ab:a6:32:38:0e:0e:7c:82:fd:2b:5e:d4:
3e:79:ba:67:27:00:32:27:d2:2d:6b:9d:18:62:ec:
6b:5e:c4:3b:bc:0a:1b:89:87:a1:2d:0f:26:40:29:
a2:c8:43:13:46:80:e4:23:b0:04:26:d7:f5:d3:69:
4d:93:b1:8e:24:bd:d5:b9:39:31:fb:b3:54:aa:fd:
7e:90:17:5b:a5:00:36:da:3d:62:ce:c0:b8:df:3f:
5f:d4:20:19:cc:89:6f:f8:71:92:3b:b8:93:fa:78:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F9:1E:13:A2:CD:FD:D1:00:9B:85:6E:55:AC:A6:27:2B:0F:56:91
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:4f:ef:fc:ed:55:49:50:a2:21:68:71:19:0d:38:d3:c8:
66:57:39:b4:3f:98:35:c5:05:4d:2c:67:ac:c4:cd:31:7e:86:
ea:9f:eb:4c:b0:43:60:cd:49:b9:2c:c5:0b:af:5d:55:5a:47:
85:13:27:90:31:ea:48:32:f3:8c:eb:01:d9:38:ae:42:ea:55:
9f:19:ad:53:ca:f9:92:99:4a:dd:14:d7:aa:0d:59:cc:75:19:
6e:ae:32:8b:6f:47:ab:2a:7d:d1:eb:be:6b:98:23:bd:c4:fd:
88:8a:5b:e2:b9:8c:bf:d0:be:3a:e3:9f:94:4f:da:12:d2:88:
8b:c6:df:8b:81:a7:30:cc:1c:4a:ec:a1:a3:bb:0e:b4:82:f2:
50:1f:c8:51:3a:c2:fd:d1:9b:63:b6:aa:a7:1e:7e:c3:8a:4d:
25:4a:08:02:2c:67:77:37:df:2f:7b:3a:f0:98:08:e5:2f:c6:
08:6e:09:a7:4a:c4:24:94:17:1f:72:d3:17:0f:da:a3:76:f9:
bd:9e:d2:d3:7d:0f:1a:23:4b:1f:4f:7f:67:62:62:75:d8:16:
06:01:8f:05:68:b3:d6:2a:88:ce:7d:0b:de:5f:b7:65:f6:1a:
cc:aa:49:77:38:48:a2:ca:db:51:1a:3e:52:d4:dc:a9:da:2e:
82:6d:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:13 2025 by rpki-client