Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: 1d9ZtMIUsq8arO56EBF/O3nvUOGTnXm8Vexh41xqqH8=
Subject key identifier: 5A:CD:0A:A7:81:27:1C:D7:1F:E3:BB:3F:8D:BE:09:70:6D:42:27:BC
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 0196507EFA8067FB3F457512E458D8F960B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 076E
Signing time: Sun 20 Apr 2025 00:00:21 +0000
Manifest this update: Sun 20 Apr 2025 00:00:21 +0000
Manifest next update: Mon 21 Apr 2025 00:00:21 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: PLpl1R2/XTwQ+E20GjrQqZZ280b8hmdYjM/crd+5OZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:fa:80:67:fb:3f:45:75:12:e4:58:d8:f9:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Apr 20 00:00:21 2025 GMT
Not After : Apr 21 00:00:21 2025 GMT
Subject: CN=5acd0aa781271cd71fe3bb3f8dbe09706d4227bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:80:37:78:06:eb:2a:3b:89:b0:f4:51:fe:
e5:67:75:cf:6b:86:04:4b:be:af:01:12:b9:7f:8b:
37:86:49:45:21:91:6f:86:35:84:5f:16:b1:a7:03:
44:e4:04:f0:d0:c5:e9:c4:18:62:aa:5a:01:ce:f8:
87:c5:6f:92:1d:f6:8b:fc:a9:6e:1b:d2:62:71:52:
7e:26:bc:78:54:88:b5:2d:03:5c:95:26:20:b0:53:
69:12:85:60:43:3e:b3:dd:db:ef:49:2a:e3:97:e1:
28:70:8a:86:34:b6:a8:c2:24:7c:13:e1:31:09:17:
e9:6d:84:4a:8e:c5:e3:8d:80:fa:22:4d:ee:22:8c:
bd:64:36:93:b7:b5:d5:6d:8e:d7:05:5f:19:45:2f:
66:f0:f2:da:25:07:37:8e:9b:89:c5:c3:e0:86:9c:
d7:79:88:54:4d:6d:51:de:3e:a1:c3:80:34:cd:b8:
cb:69:6e:5f:c2:36:20:9b:73:e5:57:f9:10:c9:be:
3b:22:f2:1d:2c:b8:52:48:1f:07:2c:23:09:4e:d9:
d3:da:d0:79:da:c6:c1:7f:8f:70:10:68:5a:c8:d3:
79:24:1f:18:ec:61:7c:2c:d5:77:91:a9:6b:6d:96:
e5:a4:1d:14:f5:36:a9:68:80:a0:41:3c:c8:20:72:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:0A:A7:81:27:1C:D7:1F:E3:BB:3F:8D:BE:09:70:6D:42:27:BC
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:09:f1:e0:12:46:aa:51:cf:78:fc:3d:af:06:42:89:7d:40:
e0:32:2b:ff:f1:cd:99:ef:e2:ed:82:72:88:a6:cc:d3:31:eb:
97:a3:14:83:c9:59:af:ab:2b:d0:1c:f3:d3:dd:77:57:52:9d:
fb:23:ac:9f:c7:d9:bb:93:55:32:22:0d:0b:e0:9c:32:f5:4b:
21:99:e2:aa:94:4d:25:2e:82:fb:fa:a1:83:d1:41:c7:93:4a:
28:59:c3:9f:3b:be:3b:57:9b:ca:4f:7c:23:95:21:c1:d2:91:
5b:9b:88:6d:82:66:27:6e:87:50:28:f2:46:c2:f3:a4:8d:1f:
dc:7f:88:90:4a:44:84:2c:89:00:06:7d:fd:7c:9d:ce:45:77:
98:18:17:e7:10:63:cc:c0:66:b5:12:59:19:75:a5:7b:b9:ba:
48:59:66:8a:c0:41:55:8c:ff:56:4e:eb:bd:df:7d:ad:6f:fb:
3e:79:10:a7:91:1b:68:ad:f3:99:c4:02:27:36:74:b7:a7:ae:
01:3a:09:c7:1a:66:f1:1f:b1:0e:f1:ab:df:90:6a:ef:fa:4a:
bf:ce:2c:3b:f2:4a:95:09:ec:b9:13:fb:b0:ab:da:a8:fb:e0:
97:82:a5:ba:26:d1:6d:90:f4:46:89:51:b1:65:58:ce:58:87:
1b:25:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:26 2025 by rpki-client