Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: CeOOV5XFZeUdpjII9NWE++m8vHmZXskxTKh6fr/QvVU=
Subject key identifier: AD:AA:F3:C7:69:08:55:EC:87:BF:29:E3:F3:23:D4:50:6D:2F:DE:4D
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019656B82359BABCAD9673787B32407019FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0B5F
Signing time: Mon 21 Apr 2025 05:00:30 +0000
Manifest this update: Mon 21 Apr 2025 05:00:30 +0000
Manifest next update: Tue 22 Apr 2025 05:00:30 +0000
Files and hashes: 1: nV-HLk-vNtMZyXYUE8luuJv4468.roa (hash: 02+QZOjgpDh+SF+gzgnBzWxE50MSq+IOFGGOIUAQpsk=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: 964Nlx0D+T04D6Hi3CuRVwRtU9zDVMBL+ZlfWmZjXQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:23:59:ba:bc:ad:96:73:78:7b:32:40:70:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Apr 21 05:00:30 2025 GMT
Not After : Apr 22 05:00:30 2025 GMT
Subject: CN=adaaf3c7690855ec87bf29e3f323d4506d2fde4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:aa:ab:e7:42:73:80:29:41:d6:af:3c:c2:
ed:b8:e0:90:9d:93:8d:40:49:74:1f:ae:91:b6:44:
1d:38:2c:1a:31:28:5d:ae:01:90:fa:bf:8b:40:b5:
e9:39:cf:bb:d7:ca:84:fd:5c:68:50:50:10:69:29:
7d:51:19:7b:ad:52:f1:ea:7a:96:f9:7b:68:32:ff:
bb:de:a5:96:43:4b:61:c7:80:eb:0c:08:1e:fc:a4:
69:9e:c6:fa:57:5a:7b:49:8a:68:2d:bd:6f:24:7b:
d8:93:57:85:0b:86:6c:34:35:9e:fa:d8:f4:cc:7c:
09:e6:3d:85:7a:ee:a2:29:85:50:6a:f6:2f:f0:5a:
b9:a9:8f:47:6c:31:e3:e1:bf:4b:df:e6:8b:0d:34:
b9:b3:21:77:df:35:6a:47:78:c2:49:4e:3d:56:a7:
95:f7:0e:ae:51:15:09:f5:0b:2e:db:d9:79:7c:4f:
1a:e3:40:a1:65:29:10:0d:79:5d:1b:4d:b5:9b:9e:
c1:0d:b5:8f:85:a6:4c:ba:e0:2f:cd:55:0e:a8:93:
cd:2e:87:45:71:02:8b:7d:2c:29:9f:a3:fe:46:4b:
01:c3:6e:e9:7a:71:d5:29:be:26:2e:8f:ba:e4:82:
a3:3f:5e:2f:90:90:70:69:38:bc:f2:32:75:9f:7c:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AA:F3:C7:69:08:55:EC:87:BF:29:E3:F3:23:D4:50:6D:2F:DE:4D
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:77:c0:82:84:e1:97:ba:8c:f5:c2:c1:4f:6c:a1:61:5f:
38:9e:0d:ae:2e:2c:59:89:f5:70:3a:64:77:e5:8b:8d:09:8f:
41:5b:bd:35:10:64:5e:6b:4e:b6:2a:7e:67:23:ed:e3:2e:db:
d6:2b:d6:e7:a5:17:cb:4e:d1:b1:0c:38:bb:c3:f0:7c:f9:ad:
4e:c0:4c:77:be:f2:1f:21:d6:da:ff:2f:6e:96:d6:6e:9f:ed:
7c:ef:e2:ba:c8:86:a1:48:96:8e:2e:39:35:19:dc:b9:3d:82:
ee:e3:27:f8:b4:5a:99:3b:08:d3:8f:ee:04:98:a8:af:1e:1a:
96:bc:b0:c3:f4:46:d0:c3:8a:cd:41:0f:1a:cf:0c:ec:ca:b1:
8a:d2:b8:bc:04:e6:b9:da:e1:58:af:29:0b:d2:94:43:f0:9c:
16:cd:cc:ee:7e:b5:81:ab:88:81:d8:33:f0:24:75:e9:a8:98:
f5:db:57:1f:de:89:cb:86:23:71:fc:e1:7f:c7:1d:b8:d4:40:
01:0e:b8:5d:33:8d:d4:33:44:5b:12:47:c7:dc:3f:76:25:a7:
61:47:e2:02:c5:01:38:46:cc:7a:c7:ad:4e:d7:09:7e:ca:18:
89:4e:af:fc:52:6b:84:ea:a4:92:43:d5:11:1c:07:15:4e:e6:
dc:b5:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:33 2025 by rpki-client