Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: csva9lJ+YtX5OB4mXjZLX8oxq4bO2uvr85K6BO7Kmko=
Subject key identifier: 76:9A:3D:59:6C:03:EF:8D:24:80:15:74:53:8B:F4:19:9C:88:21:FD
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 01967DC604A8F08EA38D747EE23425BCFA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 1525
Signing time: Mon 28 Apr 2025 19:00:51 +0000
Manifest this update: Mon 28 Apr 2025 19:00:51 +0000
Manifest next update: Tue 29 Apr 2025 19:00:51 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: TROGXPWyoVMFRGZtcabPvzHru7cYI/dLQeokuvJGuGA=)
5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:04:a8:f0:8e:a3:8d:74:7e:e2:34:25:bc:fa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Apr 28 19:00:51 2025 GMT
Not After : Apr 29 19:00:51 2025 GMT
Subject: CN=769a3d596c03ef8d24801574538bf4199c8821fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:11:01:d7:50:20:e0:5c:83:ef:12:7c:11:
99:5e:16:a9:56:e3:6d:c3:e8:14:11:94:30:47:6e:
c9:a6:ad:2e:86:8a:41:af:11:a2:6d:30:48:c0:98:
07:4a:25:8f:61:9b:e9:45:b7:be:75:fe:73:60:55:
8c:9e:a5:64:0b:52:5b:7d:dd:62:7a:54:81:42:cc:
81:bc:1f:9f:6f:17:44:4a:ed:5e:6d:e7:1b:58:a8:
ed:23:9a:91:27:26:4c:9c:9b:52:16:79:17:af:4b:
22:69:e3:5f:87:7c:27:39:da:cf:dc:37:20:81:45:
19:f1:40:78:c8:34:0a:c3:5c:8a:5a:ce:57:7c:01:
f7:45:1b:16:b6:c5:8c:05:0c:d7:24:8e:29:07:09:
5d:17:73:8c:b4:23:56:22:b3:08:e8:b0:8c:b1:57:
0d:75:02:96:ab:18:3e:37:8b:29:6b:10:be:30:7b:
6f:51:ee:23:6c:0d:13:b9:58:6e:dd:3b:82:7c:f2:
ad:84:57:b7:24:6a:4c:4f:e8:90:d4:e1:22:2f:8e:
73:63:40:05:f0:fb:02:a6:62:07:cc:a7:99:12:c6:
fb:45:93:4c:5a:33:8d:fd:83:2f:6c:6f:8e:9f:dc:
b4:5a:04:5c:c1:a1:51:c5:48:1a:06:55:be:8a:89:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:3D:59:6C:03:EF:8D:24:80:15:74:53:8B:F4:19:9C:88:21:FD
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:33:5a:a7:e8:43:02:29:8f:0f:6e:b8:0c:4b:3b:c5:0e:a7:
17:d5:a2:57:bf:0f:00:54:80:f1:1d:88:ef:b5:28:cf:26:f4:
0c:87:49:8a:0d:de:2c:b2:0f:ba:97:5f:da:38:8f:c4:31:f7:
ac:bc:0b:f4:ec:d0:17:9b:fe:1d:51:6b:86:b9:1f:4f:b0:06:
4e:36:97:63:ef:5a:9d:12:48:68:94:2f:61:20:2b:29:f2:2d:
b7:f1:e1:a8:bb:9d:25:59:02:d3:bd:28:4f:d7:cf:40:9d:f4:
ee:44:20:f9:46:6d:24:d5:c2:8a:da:9f:34:ea:da:5e:d8:45:
a9:c7:ef:be:90:11:43:7c:92:e7:ef:b6:f5:08:89:f1:f8:2d:
8b:bd:0e:4b:c1:b4:80:c4:b2:a6:c3:98:2e:85:f9:34:f1:1d:
5e:f6:79:b3:49:04:3a:29:fe:e2:3c:33:14:71:88:c7:88:db:
69:e7:a8:d1:8d:04:f3:50:68:6d:a0:ec:69:84:76:52:18:f8:
a5:e1:41:a4:43:29:88:9f:7d:10:80:15:a7:f9:49:bc:55:9b:
2f:22:71:33:7c:cc:13:22:0c:fb:35:8b:68:fd:ee:df:c9:de:
89:bf:34:d9:45:d4:fc:b2:28:05:41:71:60:65:b2:fa:a1:ca:
73:e0:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:31:27 2025 by rpki-client