Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: FGDMuRzLpLHCCQ3Bp+arWvQT2ok4dhMzXvObjskd2SY=
Subject key identifier: 24:14:6A:6B:10:9D:7B:3B:CB:DD:50:A5:DB:57:3C:27:C5:C8:55:B6
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01962972A6D935A2F767BF507F8D465A6BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 12B8
Signing time: Sat 12 Apr 2025 10:01:41 +0000
Manifest this update: Sat 12 Apr 2025 10:01:41 +0000
Manifest next update: Sun 13 Apr 2025 10:01:41 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: CxAGtynf69ZiluKAZvv/HEcJiKJAJzhlkWAYglzSsag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:a6:d9:35:a2:f7:67:bf:50:7f:8d:46:5a:6b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Apr 12 10:01:41 2025 GMT
Not After : Apr 13 10:01:41 2025 GMT
Subject: CN=24146a6b109d7b3bcbdd50a5db573c27c5c855b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:e8:04:63:a9:46:fd:76:79:1a:6c:f4:1a:
71:30:2a:54:03:71:e9:d1:a0:45:f3:8a:6d:6d:2c:
92:3b:bb:bd:f7:9c:fc:91:87:3a:7a:e4:cc:7b:45:
75:e0:0e:54:19:28:e9:cd:23:e4:dd:fe:7b:f8:ee:
ce:9a:ea:f7:e4:58:d5:36:49:9f:8b:5b:ff:a7:5b:
d4:9d:38:d1:a2:4f:f3:40:b2:d2:2a:aa:3c:71:db:
77:38:d4:92:c1:77:6b:b5:dd:61:50:df:49:40:fa:
ef:a1:72:c4:f5:00:64:05:98:01:ae:b9:34:b7:56:
f4:22:cb:7f:10:9e:31:f5:1f:a3:fe:97:12:17:42:
61:93:c9:f4:f8:49:2d:74:67:c3:2b:34:70:8b:fc:
74:66:b4:9f:fd:c1:c3:2e:4b:71:04:0d:1d:44:74:
9a:8b:06:8d:ec:ed:07:02:23:7b:cc:38:23:f9:3b:
60:d8:13:55:73:78:38:31:39:20:8d:87:63:e9:f6:
e4:ec:d7:b9:b0:cc:1c:60:92:6c:37:38:dd:64:f7:
f4:09:2f:14:91:e3:5d:7d:13:1b:27:3b:00:2a:56:
69:fb:18:74:9b:ab:17:52:80:d2:82:e9:52:d4:8f:
c8:bf:30:98:41:73:1e:7e:7d:af:bc:5d:8e:d8:55:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:6A:6B:10:9D:7B:3B:CB:DD:50:A5:DB:57:3C:27:C5:C8:55:B6
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:ec:84:c2:83:ac:b5:63:f3:6d:a4:3d:00:87:d4:dd:66:
c2:e8:d0:ba:9a:9c:49:fc:1d:c6:65:f2:c9:98:85:bd:a9:e1:
0c:04:75:5b:9a:49:01:77:a6:f0:6b:b8:1c:ca:8b:ff:58:60:
44:c0:ff:36:6e:4b:29:61:ae:f5:e8:05:1e:13:c8:47:76:5f:
2a:cf:64:15:d2:93:57:2d:88:2b:5c:80:83:c9:54:63:88:02:
93:10:18:3f:a9:9b:ee:f1:09:5b:16:f5:a3:91:d3:56:70:95:
69:2c:df:2d:88:13:ea:d3:fe:0e:4a:05:5e:d0:67:0c:20:17:
a0:e8:2c:5f:05:cc:d8:a6:5f:fa:b1:e6:24:c2:ef:5b:d9:8e:
f6:2a:f0:a9:1b:a7:dd:15:98:4e:c2:bd:e6:6c:34:53:02:11:
ce:35:df:8c:7f:e2:f5:c6:95:b9:7b:35:55:d6:c4:2f:11:b3:
92:0b:e3:79:79:34:0f:56:1e:18:dd:bc:1b:3d:e5:fa:a6:26:
e2:cf:36:1a:62:97:ce:50:a5:ff:cb:1b:69:df:bd:f5:ce:c2:
78:c0:98:d2:79:20:d6:29:5c:ae:e9:7a:5b:73:5d:52:37:62:
e4:84:f1:b5:65:da:5c:4d:ab:7e:bb:ef:10:82:f7:16:37:77:
ac:fb:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:57:19 2025 by rpki-client