Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json)
Hash identifier: 4f+++uA/G8o+cvPtrrDD61+SbP+RfXKEmMSnmH2OjNw=
Subject key identifier: 59:E0:95:0E:EF:05:56:D5:9E:49:8F:24:86:62:C8:AB:C8:C2:40:B5
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial: 01965981F75E3CCC9E7D3430417B3D9C7210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
Manifest number: 0AE0
Signing time: Mon 21 Apr 2025 18:00:11 +0000
Manifest this update: Mon 21 Apr 2025 18:00:11 +0000
Manifest next update: Tue 22 Apr 2025 18:00:11 +0000
Files and hashes: 1: D1M0sjr1PH8Yys4-1MS43KjOpQM.roa (hash: 2Q7ZkQbIGE2fBfzNEEGOF12hD07hA4SM+mHj72HM/gU=)
2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: Ds7voA2aPfGs81EW88/OeN4p/l9+1NgoPthGlnASHss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:81:f7:5e:3c:cc:9e:7d:34:30:41:7b:3d:9c:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Validity
Not Before: Apr 21 18:00:11 2025 GMT
Not After : Apr 22 18:00:11 2025 GMT
Subject: CN=59e0950eef0556d59e498f248662c8abc8c240b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:e9:ba:46:75:1a:0d:d9:40:7e:d2:73:65:
6b:f1:82:51:ae:52:a6:c3:2d:9f:82:5e:72:44:eb:
af:f6:eb:ff:f3:76:6b:0f:7d:cc:18:34:71:60:a3:
da:33:78:04:eb:46:7e:03:fa:13:af:97:87:6b:27:
b5:88:63:1e:80:4e:a3:95:cf:a2:64:7c:27:83:c2:
6a:64:7d:f6:90:22:58:57:f3:31:8d:e6:70:bf:52:
0c:ea:fb:79:b3:28:3e:89:3f:78:54:ad:af:87:a0:
46:4b:60:97:c5:40:f5:b3:aa:6e:8f:ca:79:fa:5a:
cc:22:b4:10:07:a4:58:cc:5b:81:65:3f:08:1b:50:
9f:6e:10:2e:35:13:2e:a1:bc:80:af:16:91:cb:86:
8d:76:de:24:fe:99:6a:81:d1:08:f4:d7:d4:b2:f2:
72:77:6d:22:38:04:03:bd:47:e8:5f:48:8d:db:fa:
cd:f6:98:05:df:08:7a:6a:09:ea:55:1f:8e:80:fc:
ac:02:5f:d0:0c:a1:88:da:c7:d1:ca:cb:86:13:a9:
0a:16:a5:e3:48:2d:28:03:f1:49:aa:b4:94:39:f8:
23:c2:16:2a:e6:fb:5c:18:20:90:98:6e:d7:d3:e2:
07:88:cd:f9:3d:c4:3f:71:0c:02:2a:e9:9a:0d:61:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:95:0E:EF:05:56:D5:9E:49:8F:24:86:62:C8:AB:C8:C2:40:B5
X509v3 Authority Key Identifier:
keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a7:b7:ec:16:9c:68:a6:d9:47:aa:33:04:55:7a:db:d1:7d:
84:5a:dd:01:05:42:a2:bb:9c:1b:10:f5:d6:21:18:dc:2c:ac:
51:74:9c:99:a5:ec:dc:1d:c7:8a:fa:27:8a:3e:00:4e:fd:09:
df:05:e4:30:1d:5e:ff:06:f8:ee:66:98:34:91:12:52:8f:11:
c8:1e:1d:2b:bc:9f:72:5a:99:e2:c9:4b:7f:11:11:0a:53:a4:
14:9d:ea:0d:c1:e8:0e:7e:9b:1b:c4:be:bc:fb:bf:0b:32:79:
3a:e4:cb:d3:38:01:4c:74:ac:67:f6:30:41:dd:b6:bc:bc:0c:
6c:fe:41:17:7d:a0:19:bd:47:8c:9f:a3:ab:23:a5:1f:59:62:
3c:6c:d8:fc:b9:d1:db:e8:30:ea:7f:f3:ce:6b:1e:75:98:73:
b4:94:5c:28:57:d9:42:54:db:d4:06:6f:4d:dc:1a:81:af:0d:
1b:ad:ad:bc:a2:39:bb:1a:87:21:e6:7a:f9:e9:8d:ee:83:9b:
b5:dc:41:8c:1e:61:d4:88:a5:23:c9:98:14:42:cb:a3:90:04:
56:70:77:1c:8c:c1:e6:ea:ee:71:31:00:e1:87:de:37:90:b1:
27:fd:4e:46:6c:1a:31:4d:2c:46:82:7a:65:e6:d3:a5:a2:95:
ba:a9:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:06 2025 by rpki-client