Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: bvhDgO5BMJ5t8Sv7i94Iltd8rxGp6I1t5+U/RAN0+JM=
Subject key identifier: C3:CA:25:60:20:ED:1B:62:C8:63:AD:99:83:D8:1D:52:3C:8A:9D:0D
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 01965A950DC5BB0056A2818026B6636B855C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 0E4D
Signing time: Mon 21 Apr 2025 23:00:39 +0000
Manifest this update: Mon 21 Apr 2025 23:00:39 +0000
Manifest next update: Tue 22 Apr 2025 23:00:39 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: Y3G4SE/mLy64ZXl7/2IOmxBNvCSbViE87T/kuy5K/Sc=)
2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:0d:c5:bb:00:56:a2:81:80:26:b6:63:6b:85:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Apr 21 23:00:39 2025 GMT
Not After : Apr 22 23:00:39 2025 GMT
Subject: CN=c3ca256020ed1b62c863ad9983d81d523c8a9d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:23:eb:f6:93:e6:c7:1d:b5:2e:e8:14:bd:
41:19:80:6a:13:bf:cf:b2:f3:19:89:39:62:8f:33:
f0:b2:ca:9c:24:5c:7e:5f:de:aa:0b:e5:4d:25:77:
dd:58:1f:d4:27:97:6c:43:64:d0:25:87:9a:a0:a7:
06:e2:57:78:09:8a:49:8e:19:d0:f6:26:9f:8b:19:
2c:03:a6:0e:6e:53:fd:04:d6:a9:50:bd:50:fb:50:
83:fb:ec:19:ef:9b:bd:e6:b3:38:44:fd:26:f8:76:
c6:7c:18:8a:e6:d9:8f:68:53:be:b8:87:df:e4:6d:
cf:23:6b:a9:34:6b:d3:57:8c:2b:58:48:f0:9e:62:
36:95:80:52:c9:d5:b2:20:09:26:10:cc:ea:a3:02:
35:5e:c2:23:c8:d9:6f:23:93:9c:c4:e4:c0:5e:73:
99:bb:fa:2b:2b:a8:37:e4:99:3a:82:64:31:84:78:
30:b7:8b:9a:e9:29:cb:c7:2f:6a:97:7d:46:ee:5a:
a8:b3:25:ab:34:18:50:1b:c0:5a:6b:ca:c4:61:2e:
82:79:82:ae:4a:d8:3c:b3:14:4f:7b:6e:6c:d6:cc:
85:c2:54:d3:62:c6:a2:c5:f2:47:9d:8a:9a:93:8a:
36:4d:c3:e2:41:7e:d6:14:7c:4b:6f:0f:78:3b:96:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:25:60:20:ED:1B:62:C8:63:AD:99:83:D8:1D:52:3C:8A:9D:0D
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:c3:1b:92:e6:7a:7e:46:30:11:6a:6b:e0:30:9c:b5:38:
8b:15:f6:1e:c6:b0:03:f4:84:ee:82:9c:ca:7b:cb:21:6a:7b:
65:0c:89:5f:a5:35:3d:01:3a:e0:71:c0:7f:4d:b4:fc:ff:95:
c6:79:e0:96:e6:1a:b2:ed:81:57:a0:1e:36:05:5c:21:2f:44:
fb:ce:2e:60:65:b3:d0:20:a7:5f:53:cf:e4:63:32:48:a7:0a:
c2:de:b4:14:64:6f:5f:b5:a6:23:40:af:2c:00:39:53:f4:eb:
58:b0:22:42:2c:4a:df:90:82:0c:e6:6e:56:87:19:15:77:38:
30:64:dd:3c:5c:f8:5f:0f:ff:3a:96:7f:4e:3e:a7:28:87:cb:
3f:c1:56:68:80:6b:53:42:8d:3d:a4:bf:cf:db:5f:a9:ec:69:
32:dd:6f:7a:47:8b:d0:32:ed:80:13:bf:65:e5:cb:ce:79:cd:
e1:4e:72:08:55:d0:37:da:95:20:6a:89:79:9b:79:6f:0c:09:
96:18:19:46:c2:21:49:4b:e7:26:30:13:ba:6a:8c:ff:64:b1:
53:52:ea:89:8e:8a:f3:ef:a3:1b:96:fe:60:50:47:7a:b4:57:
2a:9c:6d:d2:96:ce:ab:76:a4:86:4d:6b:04:f6:b5:13:65:99:
2a:ac:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:00:17 2025 by rpki-client