Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json)
Hash identifier: cpWZmT9Yf5Ke4sARUfgzIqmecSPisWASwf0rcah9q7M=
Subject key identifier: 07:39:EC:99:36:D8:48:CD:B6:7E:69:41:88:4F:37:F7:11:15:D0:0C
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 01965ACBFA3C56D180BEF65C4A29F9147241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
Manifest number: F3
Signing time: Tue 22 Apr 2025 00:00:39 +0000
Manifest this update: Tue 22 Apr 2025 00:00:39 +0000
Manifest next update: Wed 23 Apr 2025 00:00:39 +0000
Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: cYDvai/kwrrwabP/SpENrsEXM1tZzwhv+zBhWoKXevk=)
2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:fa:3c:56:d1:80:be:f6:5c:4a:29:f9:14:72:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Apr 22 00:00:39 2025 GMT
Not After : Apr 23 00:00:39 2025 GMT
Subject: CN=0739ec9936d848cdb67e6941884f37f71115d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:b7:b3:87:5f:d7:97:f5:cc:ff:95:d9:b2:
7a:d2:6f:37:68:fd:e6:03:b3:ed:7b:d6:21:f1:b3:
76:20:03:f4:47:7c:77:0e:df:d8:cc:da:c8:15:f4:
aa:67:de:fa:04:c0:54:4e:b7:59:9b:2f:0a:db:0b:
1e:ba:71:8c:f8:ae:ff:b9:4e:76:1a:b4:fd:e0:72:
13:70:0d:57:02:fd:a6:90:4d:82:00:94:f9:1b:a8:
cc:2b:ce:ae:46:d9:38:68:12:f9:d9:01:26:d1:b3:
83:f5:7a:06:36:f0:db:7d:b3:9c:bc:99:20:ab:a5:
c7:58:03:3c:39:9a:a7:c1:b4:93:43:a3:29:73:49:
4f:97:2a:a9:76:e2:4e:ce:d8:92:2c:be:6c:96:77:
e3:73:8b:63:34:e5:42:66:19:75:9f:0b:a1:93:0c:
80:e6:82:62:36:2e:89:6f:01:30:64:4a:06:78:3e:
8d:f1:1f:b9:c4:fc:2a:f8:3b:c3:56:2b:44:67:18:
be:de:2c:fd:79:33:e4:ef:71:92:d4:4e:e4:27:ac:
bb:67:89:3f:83:ff:f0:38:5c:74:3e:b6:da:55:8d:
4d:3b:bc:34:90:8a:13:d0:b5:75:1c:bc:04:d9:79:
2b:35:a2:91:d3:19:73:ca:97:c0:ec:36:96:09:fa:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:EC:99:36:D8:48:CD:B6:7E:69:41:88:4F:37:F7:11:15:D0:0C
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:23:98:74:34:f6:4f:69:56:9b:dc:39:69:5c:92:38:1d:50:
70:53:23:74:a8:c1:98:d6:c9:12:b2:a8:d6:65:6d:04:b9:43:
89:b9:8f:64:49:e3:bc:5c:d6:98:3d:c3:38:bb:9f:1c:51:45:
ae:f4:6d:e7:ce:ea:61:a7:c5:da:f6:01:c8:cb:0e:06:72:d9:
b8:5c:a3:bc:b7:b3:21:db:60:a1:a7:23:5e:5f:4c:b7:c8:93:
7e:56:1b:3d:4e:74:b3:97:f3:1e:48:bd:8c:f7:ab:68:09:20:
fc:3d:3b:9b:c0:4a:54:d9:ae:fd:19:12:b6:f8:df:fd:7b:4a:
60:15:16:17:9c:c2:b8:3b:8b:77:6c:fb:2f:4d:be:ba:bb:5c:
f6:16:20:c5:2d:f9:4a:8e:e6:81:ac:d0:7d:fb:21:7d:f2:df:
a3:cf:ef:14:0e:d0:9e:12:44:6f:f2:77:ef:60:ce:8a:23:5d:
bb:22:70:95:d3:3b:03:93:7d:61:90:c2:61:bf:1f:77:4d:38:
fc:5f:1b:41:89:4f:30:1d:0e:7c:0b:55:78:a4:24:ee:7f:55:
89:f5:4b:be:0e:79:e5:d1:ae:d2:94:e8:a1:12:c0:d7:4f:07:
89:b5:5c:c8:62:e0:35:84:e2:2f:93:a9:c2:d8:8b:0c:f2:27:
c9:aa:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:32:55 2025 by rpki-client