Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: gRDjnofs7WFLBpECcYJn3TPz5EVz0t9jRRuF2J6iWBY=
Subject key identifier: 93:D9:97:20:35:C3:F3:4E:09:C7:70:06:F9:7E:77:1A:9E:52:15:00
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 01965838DDCF59852FCA4F8ABD5ED99076BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 028E
Signing time: Mon 21 Apr 2025 12:00:43 +0000
Manifest this update: Mon 21 Apr 2025 12:00:43 +0000
Manifest next update: Tue 22 Apr 2025 12:00:43 +0000
Files and hashes: 1: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (hash: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: 5T6Y9myMNLWLKGEWjrzAD021sYJfmBpGXcqUq5UcZv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:dd:cf:59:85:2f:ca:4f:8a:bd:5e:d9:90:76:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Apr 21 12:00:43 2025 GMT
Not After : Apr 22 12:00:43 2025 GMT
Subject: CN=93d9972035c3f34e09c77006f97e771a9e521500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:b2:d5:b7:6b:df:db:ab:7e:58:01:5c:b4:
8c:76:6c:9b:11:a6:59:e0:a6:fb:60:b0:40:86:17:
18:80:eb:4d:a3:1c:ab:5c:34:c9:66:cb:b2:70:96:
43:87:11:63:26:c0:ed:63:e5:5a:be:ab:91:27:1e:
d7:ca:ab:9e:d0:bb:1e:fd:d1:13:c4:ca:2d:df:91:
07:97:0a:fa:15:94:b8:7e:a6:9c:ec:17:92:7c:06:
13:15:d5:5c:8f:b9:ad:06:59:5e:b4:c7:c1:28:db:
31:4a:09:b7:54:33:c3:20:3c:e8:e2:87:35:15:f6:
d3:2e:e6:91:9f:05:10:d1:f6:06:12:fb:c5:6d:ac:
9a:ce:2e:fd:7e:b7:94:34:ef:43:53:ea:7f:6a:16:
52:00:40:61:b2:eb:9b:84:ba:ae:97:bf:01:ba:ee:
20:41:16:e7:aa:82:a8:87:1d:60:fb:55:02:f6:a5:
f7:b6:d3:4b:6d:10:e2:07:dd:0d:df:51:77:77:94:
da:4d:dd:52:f6:5d:8c:00:5f:51:65:4c:f5:11:b1:
07:10:ac:e9:8a:c2:b5:38:68:1f:3b:8b:f5:47:99:
a7:f8:11:d1:dd:4d:8a:82:22:6b:0a:29:5d:9a:64:
ff:cb:ab:c0:0b:e1:8e:82:f6:e0:85:24:b6:e9:44:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:97:20:35:C3:F3:4E:09:C7:70:06:F9:7E:77:1A:9E:52:15:00
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c2:8e:e8:79:31:7d:f1:27:ee:91:80:36:a0:82:9a:44:24:
ce:71:fb:56:1b:53:db:5e:23:c8:89:4c:31:54:b4:1b:91:8a:
a8:80:9f:10:52:7a:f9:17:8b:0d:96:51:04:1a:5b:8c:d4:1f:
61:ee:6b:76:83:cf:fe:33:dd:e2:dd:07:e4:fc:4d:7b:de:1a:
98:55:c5:7b:10:d8:b6:db:4d:de:7d:e9:40:11:e3:0c:87:38:
a9:14:fd:01:66:12:90:50:33:0a:e4:d5:e2:43:b2:34:de:a5:
c9:b7:13:05:ea:a5:0a:da:29:a0:dd:67:1d:ad:57:3f:9d:d4:
d7:ae:56:21:15:57:06:cf:62:d7:7e:36:ed:12:76:1f:da:f9:
01:d1:39:6f:4a:27:08:d9:11:22:0f:e6:8e:42:72:fa:1c:a0:
7b:5d:26:e3:0a:86:26:fb:dc:63:c7:1a:1e:16:1d:49:4e:cc:
82:9d:30:86:cf:65:14:8a:e3:22:6c:a2:c1:ed:06:32:f1:57:
1d:3e:19:52:8a:ff:fe:a4:ea:46:d3:b6:04:ae:05:0a:d2:ec:
90:84:ea:b7:8c:4a:b0:25:cc:ac:eb:55:58:4c:4e:f5:1c:b0:
0a:79:d4:95:bd:33:6e:7a:26:06:d0:0a:50:af:da:d8:77:e3:
dd:9d:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:39 2025 by rpki-client