Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: xqva6U9/Qggk54v3hRW2bjuKsrW7+sYKOIi9OGmsjBQ=
Subject key identifier: E7:E7:0A:D6:0E:6E:35:73:47:B5:B0:D7:B0:A9:7B:FA:1A:18:98:D5
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 0196895C3B2B7CC979BC4576E2043BF0148D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 82
Signing time: Thu 01 May 2025 01:00:45 +0000
Manifest this update: Thu 01 May 2025 01:00:45 +0000
Manifest next update: Fri 02 May 2025 01:00:45 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: QPpMQOAtbR/wOLhbCajOwddnLKGyLvq7IwF6vXWogV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:3b:2b:7c:c9:79:bc:45:76:e2:04:3b:f0:14:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: May 1 01:00:45 2025 GMT
Not After : May 2 01:00:45 2025 GMT
Subject: CN=e7e70ad60e6e357347b5b0d7b0a97bfa1a1898d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:0f:5f:41:04:ad:c6:97:ce:f1:e3:3f:4e:
0a:45:22:90:3f:b2:6a:86:64:89:a3:e9:c6:45:e2:
ac:06:47:b0:16:7b:04:2e:6e:61:48:54:50:32:1f:
1d:c9:3b:37:44:51:9b:0e:d9:16:4f:42:33:cf:17:
a1:ba:83:3e:02:26:4d:ff:51:56:08:e6:f2:7c:2e:
0a:5b:33:e6:80:20:5c:2a:19:d0:c0:42:9c:da:98:
23:05:0b:3d:4c:5b:0c:bf:6e:48:7e:00:f0:06:45:
02:ed:f5:c6:6c:a2:4a:6d:ed:5f:24:ab:c8:b8:24:
dc:1a:9d:81:64:c1:a3:1b:43:a2:18:ba:4f:04:6d:
aa:1b:b0:59:bf:a4:2a:37:93:6b:95:f9:6b:fc:89:
7c:d2:f5:cd:c2:b6:1e:50:5e:67:34:9a:5d:7d:92:
52:24:57:b3:d0:47:a4:12:f1:7f:2e:a4:ec:7c:32:
10:0a:e9:ce:83:76:f4:05:c9:67:f5:36:38:b8:6b:
e8:0a:d3:db:c9:2d:65:04:0c:a0:e1:a3:01:7f:fd:
b5:b6:38:ae:6d:94:83:7a:74:ff:2c:ad:e7:6d:57:
9f:4c:a1:be:32:5f:9c:e2:8b:ca:3d:74:c7:2e:a7:
53:1e:78:4b:c1:6f:66:7d:93:59:3e:d9:7a:5b:7d:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E7:0A:D6:0E:6E:35:73:47:B5:B0:D7:B0:A9:7B:FA:1A:18:98:D5
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:06:46:5e:8a:1c:a0:85:ee:35:34:25:d3:c8:c6:b5:31:8b:
84:06:d3:2f:f3:30:71:81:2a:c4:da:81:47:2a:a3:77:0f:fb:
3e:fa:d5:47:2c:ed:8d:f9:85:24:68:f9:ba:95:63:4f:7d:82:
a9:5a:bd:eb:de:74:0d:c2:db:c0:8c:aa:2e:95:77:f3:11:16:
24:28:33:7c:53:99:0f:dd:24:5b:c9:c3:4e:55:8d:51:a3:64:
fd:97:47:de:6a:1a:df:a9:29:53:26:31:e4:31:6d:12:92:ab:
ff:4e:34:ef:19:65:64:f3:36:46:62:e2:38:e0:14:ed:ff:e1:
f3:72:13:d5:e0:f3:49:aa:fc:31:fb:df:b2:5a:56:53:94:76:
1c:41:20:b9:98:36:f8:52:79:3e:84:1a:f8:25:b7:69:f0:75:
18:0a:d0:88:cd:1e:65:7f:c5:a7:4d:45:3f:7a:ae:19:9e:16:
d3:ec:ba:7e:9a:e7:f9:12:1a:cf:af:d6:46:e5:fb:3d:b7:09:
52:15:1f:a3:be:95:66:dd:41:d7:07:30:e0:cd:23:a9:42:a5:
cd:24:9a:ae:42:91:ed:3a:62:7a:44:a9:78:6a:c2:26:b4:c3:
91:6d:0f:15:e0:28:ae:66:75:29:53:58:ed:c7:3f:94:3e:d1:
03:72:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:51 2025 by rpki-client