Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: fBRGAKk1cAZVmBQ2LWFuYdN+Aq88flTxT8DZ+DpkSp4=
Subject key identifier: BA:74:31:5A:58:7F:62:F8:83:95:CC:C6:84:FD:98:45:6F:31:04:8B
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 01964E231C1FD3DDE8F0A00F5B2643D5B5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 0385
Signing time: Sat 19 Apr 2025 13:00:45 +0000
Manifest this update: Sat 19 Apr 2025 13:00:45 +0000
Manifest next update: Sun 20 Apr 2025 13:00:45 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: LDks90ib/6R/yGeFq3Z5+nLztL6oTLW78qWSr18aJEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:1c:1f:d3:dd:e8:f0:a0:0f:5b:26:43:d5:b5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Apr 19 13:00:45 2025 GMT
Not After : Apr 20 13:00:45 2025 GMT
Subject: CN=ba74315a587f62f88395ccc684fd98456f31048b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:30:07:c5:6c:4e:61:9f:c6:d7:0f:63:45:
ce:42:78:64:81:17:24:c5:f8:6c:79:2c:9c:6c:74:
dd:60:6c:6c:4b:ee:b3:75:a5:a7:f5:a9:ad:85:df:
dd:b8:21:c2:90:bb:78:49:61:48:5d:df:13:a7:06:
3c:dc:b7:4d:a0:b0:20:b7:8a:8e:8f:96:4d:dd:32:
2a:be:bc:ae:d5:40:d2:6f:8e:08:dc:d5:30:3d:d2:
83:7f:31:1d:32:93:dc:ad:02:df:cd:eb:df:01:c8:
9f:82:ce:44:b2:8a:5b:3e:4d:bd:23:2d:a4:6b:ff:
17:63:bd:be:7b:61:d7:34:db:0a:ce:67:36:bc:02:
a1:6c:7b:83:d9:78:ba:1e:f4:c1:38:c7:2e:65:98:
dc:c3:96:72:5b:95:97:a2:fe:51:32:eb:80:3c:ac:
91:9a:cd:fd:9c:a7:8d:bc:3b:da:09:ba:35:fa:f0:
17:bb:53:4c:c8:0a:8f:c0:a7:37:a6:e9:36:47:08:
57:d2:d7:c1:9b:c2:ac:d6:5b:04:87:41:0c:a2:70:
f2:e0:0a:4a:8f:d6:9d:af:2b:57:79:d4:2b:79:03:
74:0d:7c:0e:af:de:35:07:48:16:44:87:cc:36:2b:
f6:c9:73:1b:9d:e8:2c:ef:cb:26:c7:fb:6c:ce:de:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:74:31:5A:58:7F:62:F8:83:95:CC:C6:84:FD:98:45:6F:31:04:8B
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d9:c8:63:43:a6:b3:87:04:9a:66:00:34:e5:df:c6:42:d6:
50:75:44:7e:da:85:74:ab:9a:e9:b0:37:3c:ab:72:be:96:42:
db:1b:75:26:10:29:45:ea:ab:51:d7:49:ee:f7:a5:15:2d:c7:
2c:30:6e:40:1f:11:cb:ff:95:cc:d1:1a:6a:00:81:45:a0:f3:
14:39:d7:61:76:5c:e1:02:f4:b4:a8:15:0c:a5:20:54:60:1b:
6b:4c:44:ba:cd:ea:ef:3a:9b:e6:a4:37:3d:39:68:07:4c:0d:
c3:fe:78:29:a5:41:62:fa:74:fe:fb:03:a6:dc:21:9f:a1:1f:
d3:c9:3f:27:2c:f2:d3:85:96:50:f1:52:79:7c:f3:79:3e:51:
54:70:54:cf:84:a3:99:55:37:4d:c0:fc:f0:32:4d:1f:b6:d4:
3e:7e:2d:88:29:bf:13:fa:88:03:2a:4b:c3:5e:9b:90:29:98:
52:e6:eb:b0:fc:a0:17:42:93:6f:2d:3c:72:d9:40:75:ee:9d:
9a:ba:af:a2:12:63:86:40:5b:cb:24:61:ab:c7:f3:f6:ce:43:
81:93:be:62:1a:48:19:02:e0:23:58:f8:91:eb:e5:2f:27:90:
2e:04:60:7d:a8:a3:f7:90:44:50:d1:51:67:7a:b7:d8:f5:da:
d3:9f:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:30 2025 by rpki-client