Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: kYLWqbP875ZMb1w+a07UGdkVVEhLMkb5nxnbfAVsdEM=
Subject key identifier: 4F:85:8F:DB:F2:5E:AD:1B:5E:6F:8F:57:B6:07:88:77:82:2A:B0:75
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019636BFEBEF67CEF8EF1157BBF89A83BFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0A47
Signing time: Tue 15 Apr 2025 00:01:09 +0000
Manifest this update: Tue 15 Apr 2025 00:01:09 +0000
Manifest next update: Wed 16 Apr 2025 00:01:09 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: 3nAk6eE9xg7HhFtZa29QL9JQ4NsHIZZe9XycJfRKC8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:eb:ef:67:ce:f8:ef:11:57:bb:f8:9a:83:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Apr 15 00:01:09 2025 GMT
Not After : Apr 16 00:01:09 2025 GMT
Subject: CN=4f858fdbf25ead1b5e6f8f57b6078877822ab075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:eb:7a:91:95:51:7a:52:99:e0:d5:b8:35:
c4:6b:45:00:46:d4:ac:08:8e:07:5c:a6:9c:94:ce:
ec:34:de:23:86:6b:bb:b5:bd:a3:6a:9a:ed:c7:78:
cc:b6:4f:a3:6c:a1:27:9c:a3:3c:2b:9a:9d:39:4a:
07:fe:7c:ab:40:53:10:80:e8:af:94:87:9a:49:16:
94:f5:9c:2e:54:64:76:41:79:f4:59:1c:bf:30:fe:
7a:42:c3:62:13:1c:4f:19:89:7e:74:d8:a2:50:51:
61:8f:3b:9f:ee:e5:8c:13:e3:68:f5:bc:69:16:45:
c5:56:85:2c:61:a6:ba:6e:ca:d3:f0:82:06:59:79:
11:80:d9:07:e2:17:9e:69:b7:fa:98:b7:fa:f0:21:
a1:4a:99:bc:7e:48:d5:20:b9:10:11:d0:86:a9:be:
4c:22:cf:0a:49:7a:fc:ae:2c:c4:4c:4f:c0:28:32:
2c:7f:2b:a2:8b:bf:00:03:c3:d7:f2:a8:18:f3:04:
32:0f:03:95:9e:6f:27:ea:06:ad:0d:26:bc:a5:61:
ba:62:c3:31:77:c1:9f:0e:0a:a7:85:b8:ef:78:43:
cf:6c:7f:0c:eb:16:49:67:c7:14:ce:6f:43:2a:62:
6c:df:a1:9b:9e:4c:c9:03:8a:51:0e:f4:02:ee:7e:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:8F:DB:F2:5E:AD:1B:5E:6F:8F:57:B6:07:88:77:82:2A:B0:75
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d6:ed:bf:28:be:d3:c3:9e:cb:d8:02:76:8b:a0:e1:7b:f7:
34:41:b5:d4:bf:0c:27:d2:c2:79:7b:36:f6:a6:39:5a:1c:12:
2b:05:d5:38:8d:ca:80:a5:22:66:fc:e8:76:dd:e3:9a:3f:0f:
46:f5:01:20:d1:5c:f3:d2:64:22:fa:e5:b6:14:26:d5:ab:e6:
db:2a:8b:d5:dc:c6:b4:2f:8d:bb:8e:27:27:41:11:e6:41:bd:
fb:33:ec:4c:02:49:82:14:17:e0:48:fb:c2:4a:23:0d:6f:c2:
6c:0c:26:8d:d4:08:ce:7b:7e:44:97:28:d8:b3:d0:43:10:ad:
fe:1e:f1:22:b6:fb:2b:e5:f5:66:44:a1:6e:ca:6c:c6:4b:f3:
71:b7:a9:4e:47:5c:55:7f:2a:20:2f:e0:f7:3b:e0:4b:42:34:
94:2c:7d:64:7b:a7:74:83:71:8e:3c:c6:61:28:9f:9c:64:8f:
db:0e:13:e0:f1:c2:04:15:55:92:99:4d:8b:0b:c9:40:93:c3:
2d:77:6f:13:4c:71:ae:f4:34:44:18:d9:ba:e8:a9:83:5b:21:
ff:4f:77:bf:90:5c:76:50:36:79:e3:60:6b:fd:ba:b8:07:73:
de:d3:16:6e:3d:5a:1d:6a:90:48:70:03:55:ab:20:55:14:de:
d7:a9:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:20:06 2025 by rpki-client