Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
File: WqZ_80-Urvw6VNVIfAtItN-6DII.mft (raw, json)
Hash identifier: RwvqvywQWo+D80W3wZRa7E+5jEYBaNadtCGMrAVefQI=
Subject key identifier: 31:11:CC:2C:BE:3A:5D:03:68:F2:8A:42:82:8B:E9:D3:88:45:6A:6B
Authority key identifier: 5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
Certificate issuer: /CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
Certificate serial: 01967B69B6139A19666AEE0EFE0A61EE036C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
Manifest number: 0EBE
Signing time: Mon 28 Apr 2025 08:00:47 +0000
Manifest this update: Mon 28 Apr 2025 08:00:47 +0000
Manifest next update: Tue 29 Apr 2025 08:00:47 +0000
Files and hashes: 1: WqZ_80-Urvw6VNVIfAtItN-6DII.crl (hash: eKFX6w+wLkgQgDMmktf3C9jIiIsEvRmzAQNSOqK3C6E=)
2: depCEchOEDSTxB-t7sFwEnJVYFU.roa (hash: 4VUgeeM9jgJLmxqt9ZkedCI0PpL/veNIwfgv+hW4muY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:b6:13:9a:19:66:6a:ee:0e:fe:0a:61:ee:03:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
Validity
Not Before: Apr 28 08:00:47 2025 GMT
Not After : Apr 29 08:00:47 2025 GMT
Subject: CN=3111cc2cbe3a5d0368f28a42828be9d388456a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:00:11:b6:22:d3:79:4f:ec:d3:21:21:02:
d5:86:e0:ff:5d:88:b5:57:90:01:3f:6e:fe:31:44:
4b:27:63:83:d9:57:43:10:f9:a0:e2:41:48:44:c6:
10:f2:47:54:ca:2d:2a:be:41:86:14:99:c0:e3:25:
bb:7e:5d:eb:87:a0:32:c1:04:e8:0d:cb:1f:76:4c:
b5:8c:52:7f:de:4c:c1:b8:c7:ee:a6:93:90:38:67:
42:06:8e:f4:b1:c1:43:14:8c:50:5c:9b:d4:4b:15:
33:98:3b:4a:06:9e:10:10:69:22:63:0d:81:08:a4:
38:05:17:54:1e:56:e9:12:ef:e6:00:85:04:f5:96:
1b:64:8e:8d:1c:c8:b3:1b:95:2d:e8:3a:ef:9a:b6:
09:66:0a:6b:03:b2:93:eb:1e:74:aa:1c:60:e9:19:
97:00:80:98:f4:5c:82:f8:7e:d8:fa:3f:aa:a0:52:
7d:a1:32:5c:07:9d:a5:3a:00:01:79:3e:f2:a5:0d:
c5:30:4f:7f:9c:06:1e:db:9c:9f:96:54:7f:b3:4c:
a3:ff:2d:53:6c:b8:80:08:aa:92:b3:eb:bc:62:28:
ef:48:fd:48:c0:6c:96:19:70:3a:97:d7:41:cd:37:
4c:d2:33:5d:b9:e6:e3:dc:a6:42:c3:d8:9a:32:5e:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:11:CC:2C:BE:3A:5D:03:68:F2:8A:42:82:8B:E9:D3:88:45:6A:6B
X509v3 Authority Key Identifier:
keyid:5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d8:c4:13:c0:ce:69:f6:ad:8b:1e:bc:ab:4e:7c:66:40:83:
e7:81:7e:c2:86:e7:d5:e9:65:3e:99:25:8d:a2:dc:61:3e:94:
52:f4:f8:a5:3f:ca:d7:e8:b7:1f:f4:9d:d0:84:51:02:ea:d0:
74:24:5b:a8:04:a1:98:b9:92:8e:0f:5c:0a:c5:d7:93:8e:e7:
ef:79:c5:22:1d:2e:ce:b0:65:14:cf:81:e7:62:03:9e:e7:74:
34:49:12:8c:28:17:82:c7:d2:a8:5c:44:ba:24:cd:58:09:00:
bc:f1:3b:d5:2c:db:fa:d0:9f:dd:62:3a:42:a0:83:34:09:db:
07:a3:b3:91:c2:18:fe:f6:b1:92:d6:ed:77:50:6c:78:a0:9b:
62:b9:7f:8c:b7:27:bd:c3:a4:0a:e6:44:a0:d5:ac:17:3a:6e:
9d:be:ac:22:0f:d5:ab:89:b5:13:4d:ba:a3:c9:b7:19:4d:04:
94:30:54:84:43:f4:75:30:79:87:e6:12:92:5c:2a:c7:96:ff:
38:36:25:16:7e:9b:f2:b9:42:58:b3:f3:95:a0:6f:c7:2d:dd:
c1:7c:72:d4:44:2a:8e:8d:5c:4a:f0:6d:b8:6d:35:71:97:03:
ad:74:31:3d:45:df:b4:0a:2c:31:0e:bd:71:bc:21:62:a5:85:
41:03:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:00:17 2025 by rpki-client