Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: zU4o4k2tXIAc67hT08RCYsX0eqdWT0CskYmvmKDyXXA=
Subject key identifier: AB:CE:1A:87:19:DC:09:6A:A0:42:16:82:5B:9B:2D:A9:FE:A7:0A:39
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 01966096CF1A1578FA4C71D8DCC21C147191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0BA8
Signing time: Wed 23 Apr 2025 03:00:18 +0000
Manifest this update: Wed 23 Apr 2025 03:00:18 +0000
Manifest next update: Thu 24 Apr 2025 03:00:18 +0000
Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: 3qwBvBu3U6A344ShTY40ERNTXQINgDwSEvUdvMm+Uh8=)
2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:96:cf:1a:15:78:fa:4c:71:d8:dc:c2:1c:14:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Apr 23 03:00:18 2025 GMT
Not After : Apr 24 03:00:18 2025 GMT
Subject: CN=abce1a8719dc096aa04216825b9b2da9fea70a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:4f:a1:ce:25:18:ab:52:2b:bd:8e:60:57:
fd:2b:48:88:30:d0:fa:71:fd:e4:3c:9f:8a:29:eb:
87:37:59:e8:5a:e5:8f:4e:34:2d:94:cc:16:15:08:
dc:db:ff:dc:21:3a:ca:06:a4:b7:4f:ee:df:7b:e3:
86:0b:19:20:83:3a:5e:f8:2c:21:93:4e:89:16:12:
69:7e:a2:07:34:ec:af:84:bc:48:6e:05:83:ed:d0:
96:36:c8:a5:c3:c3:c0:99:f0:92:2e:af:fd:68:61:
4b:71:f0:02:15:b4:20:f4:74:52:61:95:87:1a:85:
ad:bd:42:70:3e:ca:9c:ba:a3:35:5d:5e:ad:c8:7e:
65:58:6e:98:1e:9b:c5:b9:eb:68:74:f0:6c:02:34:
23:b5:9e:01:88:13:a2:02:c3:aa:dc:a2:89:4f:dc:
d9:cf:0a:4c:9f:5f:33:45:8b:ca:2e:51:6e:2e:0c:
0b:76:2f:53:87:0f:71:57:5c:aa:31:90:53:1b:0e:
c3:0d:b0:a7:77:3e:7e:d4:76:6d:a1:0c:c5:fe:f2:
e7:ec:37:1a:4f:a7:17:cd:68:a6:3d:19:c9:92:76:
02:b2:c7:9c:e1:18:bc:fe:ad:96:61:d2:d4:d6:37:
a7:88:13:3c:b0:2b:66:00:e3:34:78:cf:67:10:66:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:1A:87:19:DC:09:6A:A0:42:16:82:5B:9B:2D:A9:FE:A7:0A:39
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:96:d9:22:18:d8:3a:09:c1:26:22:8c:cd:bc:01:c0:b2:95:
c6:c3:33:fa:75:a5:e4:9a:79:87:b2:90:b0:1d:b7:a1:43:18:
31:80:c5:41:08:68:25:ed:af:f3:aa:48:6e:7c:75:36:86:4a:
5d:1c:0b:11:60:89:b0:11:14:0f:b9:dd:cf:7b:68:75:e7:6e:
d3:c2:c2:b4:7e:93:9d:08:4e:d3:58:6f:de:2c:66:0f:e6:94:
ad:36:57:3a:36:58:e0:19:87:5e:8c:5a:33:46:75:b4:6a:60:
c9:11:0a:1a:41:3e:4b:3e:92:ec:87:ff:68:d0:1f:3c:8f:12:
d2:0d:49:01:a8:4b:ef:82:fc:eb:d7:9c:69:c6:8c:fa:b0:a1:
e9:c4:eb:c1:31:2c:61:04:a7:de:4c:f2:9d:8b:67:7a:f6:7a:
1c:2e:b4:72:9b:00:d2:52:91:fe:4d:54:15:af:2e:6a:e3:99:
f0:0c:a6:96:d2:31:02:0a:d3:bf:00:b5:c6:01:18:08:30:f1:
49:cf:94:4b:b4:fc:85:29:36:e5:50:ab:70:07:d0:46:7c:2d:
49:82:fa:cf:fa:95:a4:6d:04:da:be:71:f2:e0:96:a2:99:ad:
53:e3:18:c1:32:fa:95:4f:09:35:c4:2d:3a:a3:6c:35:fe:90:
c1:4c:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:57:32 2025 by rpki-client