Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File: WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier: JixQcGQVgtPE83sjtuMMgDi+Cd03PLTN/C9a/QEUrOw=
Subject key identifier: B0:DF:14:81:A1:6F:0C:52:8D:22:33:A5:60:98:8C:6E:02:1E:E4:4C
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial: 019683FF1A258FF26C5AE959E73206BF4936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number: 06AA
Signing time: Wed 30 Apr 2025 00:00:55 +0000
Manifest this update: Wed 30 Apr 2025 00:00:55 +0000
Manifest next update: Thu 01 May 2025 00:00:55 +0000
Files and hashes: 1: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: V+XEBi6hryKa9aW96XsJLpkRrLky7aata2If2QJseks=)
2: znM5PqUezkFDKWgZEHXhAygqSEg.roa (hash: rSr63BYEqjq/FlyGA7frAkMF1kFl0699EpH0gvi204o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:1a:25:8f:f2:6c:5a:e9:59:e7:32:06:bf:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
Validity
Not Before: Apr 30 00:00:55 2025 GMT
Not After : May 1 00:00:55 2025 GMT
Subject: CN=b0df1481a16f0c528d2233a560988c6e021ee44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:45:81:49:80:a4:c4:6b:ff:b3:77:d0:99:
44:e4:10:64:b5:a1:f7:4a:34:f4:fd:e0:3d:94:e9:
f5:6d:d4:ef:32:99:92:88:58:6d:95:9b:e2:93:79:
56:d7:16:f6:df:2e:6f:6e:8e:31:28:5a:06:66:91:
bc:6c:18:45:29:52:b2:0f:d3:64:95:6e:35:0d:44:
c7:0a:d4:f2:c8:38:11:4f:c9:bc:39:ba:be:5a:6a:
25:a2:fc:47:f0:cc:0a:7b:43:68:9d:4d:10:80:d8:
7e:5d:65:3f:3a:31:ab:a5:7d:f4:9d:f8:12:6c:b2:
a5:01:9f:72:22:b3:4f:7f:7f:0f:1c:85:0f:bd:b0:
32:29:c3:1b:d6:77:13:6c:5d:9f:61:64:27:5b:80:
98:39:5a:bb:89:90:2e:ed:63:2d:6a:c2:b0:db:07:
75:90:42:ec:af:b7:25:e9:e3:3a:36:13:22:0c:a1:
3f:25:77:0a:da:cd:12:ae:4c:ce:9a:2b:2a:ea:69:
e3:b8:3a:2d:e0:13:04:67:32:3e:88:ae:7f:e0:d9:
b6:e2:e4:20:0c:d8:3d:b7:a8:5b:58:27:e9:a2:05:
32:72:99:07:1f:7d:25:ab:40:ca:ca:87:d4:72:bd:
e4:ca:f8:f4:bd:cb:fd:97:74:78:73:22:b5:b2:ee:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DF:14:81:A1:6F:0C:52:8D:22:33:A5:60:98:8C:6E:02:1E:E4:4C
X509v3 Authority Key Identifier:
keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:94:48:f2:af:ab:d2:e6:59:c4:67:bb:25:20:4a:d4:7e:
ca:e5:7b:17:cc:82:ca:d7:f0:17:40:68:3e:ca:67:ff:8a:a2:
93:6c:0a:0f:4e:8e:f6:b2:69:9a:fb:f6:0c:5b:33:a2:10:e5:
c0:66:76:7d:14:f2:9d:79:61:74:10:f2:c9:6c:52:91:c9:d6:
27:ff:24:39:d0:fc:10:33:77:f1:42:70:99:af:a0:81:fb:f7:
73:52:62:8f:10:25:8e:e2:35:aa:84:f3:cb:f8:f2:9c:b6:60:
45:1a:6f:ff:b1:43:10:38:45:e8:90:4e:3a:30:93:2b:da:1c:
4d:ab:8a:5f:7d:9b:2f:bb:9a:14:22:44:bd:f6:5f:29:d3:1f:
53:27:36:51:56:b2:1a:ca:bb:c4:da:46:f0:e8:5e:78:34:44:
05:7c:42:35:ec:6b:cd:b7:4c:47:f6:88:57:e3:94:ce:29:a1:
4f:1a:f6:68:3d:9d:48:c3:46:92:25:50:e4:e8:ed:fe:cb:e2:
9c:ee:97:71:c5:5f:46:cd:e6:a4:d2:0a:9f:d6:fe:7f:b6:08:
52:c1:c9:84:18:25:6b:8f:e2:87:96:40:60:73:42:a7:c3:cf:
70:9f:b9:67:01:5b:a5:05:79:d6:af:fa:8f:12:a5:cf:53:86:
3b:3f:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:06 2025 by rpki-client