Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: fG9RBVSwTtum19TKny3Wou5BNGFm9QO48nbKHXeIVSo=
Subject key identifier: AA:D9:CD:D5:08:D0:A8:48:50:0B:0E:F1:64:01:5E:00:7F:A3:8D:7C
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019611A1A4E580A7ED3A1FC8C459BD87AF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 0486
Signing time: Mon 07 Apr 2025 19:02:08 +0000
Manifest this update: Mon 07 Apr 2025 19:02:08 +0000
Manifest next update: Tue 08 Apr 2025 19:02:08 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: yxvc5VljAf/lesLvS3S3DeZs4RxdZY0dlBfcl6KIk7s=)
2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:a4:e5:80:a7:ed:3a:1f:c8:c4:59:bd:87:af:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Apr 7 19:02:08 2025 GMT
Not After : Apr 8 19:02:08 2025 GMT
Subject: CN=aad9cdd508d0a848500b0ef164015e007fa38d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:0a:f4:e4:7b:f9:b3:cf:c0:a1:6a:50:2b:
e7:91:66:58:ac:52:59:59:b1:c3:07:1d:3f:61:65:
c9:04:52:bf:c0:ad:1d:53:27:e4:45:83:f7:b5:ad:
3b:a2:a3:49:1c:6f:48:5b:5b:0d:13:73:9a:aa:f7:
ac:9b:9a:c0:61:bc:e7:fd:9c:11:c6:51:14:88:00:
9b:69:cb:26:3e:e9:49:23:96:9b:1f:e5:e4:22:d6:
50:a2:0c:da:81:3e:15:91:7b:2c:5b:fc:2e:7b:6c:
a5:44:31:5e:42:fe:3f:ca:47:79:bc:e0:54:0a:90:
be:40:b0:29:9d:29:ee:ed:ee:f6:25:9e:e5:69:1f:
88:71:7f:a9:4e:cb:40:8b:08:cf:a2:c4:ee:76:b5:
6d:74:e9:65:da:da:4e:0c:76:2a:24:d7:eb:bf:36:
45:d9:52:a9:d6:9c:34:62:6e:9c:74:e4:d9:15:79:
98:35:4b:3e:f2:4e:40:0b:14:7c:72:80:af:8a:59:
50:ff:19:12:21:93:57:f2:ed:62:99:77:08:a3:b7:
4b:03:72:3d:e8:1b:2d:de:18:a3:fc:d5:77:cb:7b:
e2:7b:c3:a1:22:3b:6d:27:43:90:46:e6:81:80:ad:
2e:44:f9:da:6e:eb:72:95:b2:f3:bc:0c:72:cc:98:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:CD:D5:08:D0:A8:48:50:0B:0E:F1:64:01:5E:00:7F:A3:8D:7C
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:c5:5b:20:0d:88:94:ea:1e:4d:57:f3:7f:00:1a:e0:c9:
5e:7b:b0:d5:38:dc:52:d4:6e:e6:24:71:bd:74:8f:bd:68:95:
ff:e4:9a:e7:66:ec:6f:cd:2b:a4:7f:f6:85:eb:f2:d6:9d:47:
ed:3e:a9:c0:16:a0:9a:d2:9e:13:98:60:a6:11:10:ca:1c:bb:
37:eb:8c:31:de:4a:36:be:97:c8:00:1a:ac:58:80:76:7e:18:
5f:fa:9d:80:b8:f7:63:80:f6:f0:ff:05:82:b5:0f:5a:88:f2:
8c:05:de:a0:8b:6d:1a:bd:ad:24:7c:ac:a1:37:1c:6d:50:6f:
39:c9:f3:76:46:3e:3c:54:69:2f:b4:3d:05:b7:77:24:c4:b1:
d0:8f:4b:d5:12:f1:60:43:01:22:b2:60:e8:c8:f1:40:d6:52:
a2:63:74:da:74:7d:a0:87:9f:a1:11:df:fa:a3:17:b8:78:c6:
63:ad:b4:7c:06:0d:43:e2:3c:e1:19:9e:74:51:b7:a0:6a:71:
d0:b7:08:2d:3f:84:6a:5e:d6:4c:c5:67:67:d7:fb:19:22:a7:
70:a8:dc:94:05:92:c8:61:24:99:96:ea:21:4c:82:68:42:3f:
c5:6a:4c:e6:7c:7d:c1:28:6a:07:72:60:f7:98:94:e1:1f:6a:
79:9a:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:29 2025 by rpki-client