Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File: w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier: pYkNFshA6X7UjZKxBxYlE+mOdVSMSZgZkpT5HIryTgU=
Subject key identifier: BE:70:69:E0:5A:08:A3:1A:53:F9:49:0E:BF:D0:D4:B5:25:12:6A:9D
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 01969604F0CA235AC23892F0398E70A88E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number: 1525
Signing time: Sat 03 May 2025 12:00:28 +0000
Manifest this update: Sat 03 May 2025 12:00:28 +0000
Manifest next update: Sun 04 May 2025 12:00:28 +0000
Files and hashes: 1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=)
2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=)
3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: e72A+pboEUqIZgccmJqID+QiXPhJMHW5kFeC0wq4X0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:04:f0:ca:23:5a:c2:38:92:f0:39:8e:70:a8:8e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: May 3 12:00:28 2025 GMT
Not After : May 4 12:00:28 2025 GMT
Subject: CN=be7069e05a08a31a53f9490ebfd0d4b525126a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:07:6b:0a:12:c7:e9:4e:91:61:a7:0a:67:
5b:62:54:45:12:21:4f:67:75:65:e0:34:46:43:ae:
bb:fd:a7:c1:94:5b:38:99:8e:90:05:6a:0e:4a:20:
fd:cc:d9:ed:c2:2e:63:b5:5d:88:24:a7:1b:4f:b9:
0c:53:3a:00:97:06:ae:df:f3:8c:3d:fc:30:39:15:
53:b9:09:7f:fc:88:f9:c1:fa:ef:3c:2c:7f:e1:dd:
b2:a1:f1:90:66:0c:73:54:79:cd:e7:a7:dc:cc:12:
1e:72:55:3a:1b:6d:c3:7f:6d:ea:b0:23:78:0c:dd:
bc:ab:bd:38:20:88:97:74:b3:6f:48:41:d7:64:c3:
06:e7:5c:45:1d:5b:ed:48:86:69:2a:54:fd:90:db:
00:3b:e2:a6:48:27:b2:e7:28:96:de:f7:08:37:3b:
33:6b:72:05:35:02:fe:5d:37:06:00:19:8e:1d:a8:
86:37:41:64:95:af:7b:3a:a8:ef:3f:34:3e:7b:31:
93:4e:c5:a1:e8:53:7d:34:92:18:06:e4:65:06:3d:
ca:4f:b1:fd:66:17:18:f6:4e:df:c1:fb:14:87:f5:
aa:12:e7:58:8b:93:58:9e:63:f4:d4:6b:6a:0c:0d:
38:8a:27:9f:43:0d:7b:a8:a2:05:b0:8d:77:bb:db:
fb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:69:E0:5A:08:A3:1A:53:F9:49:0E:BF:D0:D4:B5:25:12:6A:9D
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ca:1a:6f:15:18:31:f5:c5:45:03:9e:49:d3:9b:84:e6:19:
ea:fd:0b:e5:51:45:5b:40:b0:d7:0c:5a:f6:36:84:73:39:38:
47:22:89:53:c9:38:ea:64:17:ec:6c:b7:22:22:d0:31:8d:eb:
7b:58:8f:4e:11:f6:51:52:e2:07:c5:74:39:ea:b9:e9:ce:61:
9a:a4:c2:f2:48:05:5c:e8:f5:a4:56:9a:f9:6d:1f:d0:14:66:
da:32:70:31:57:bd:50:6e:b4:b4:e3:38:cd:2a:70:c2:48:30:
ee:1f:f9:f8:73:df:85:29:e1:c5:76:93:f4:fa:51:92:90:a1:
3e:dd:b7:22:c5:3b:69:e7:bb:ef:16:0d:f6:fd:f1:da:70:43:
73:ae:a9:88:85:68:4a:d4:1c:42:2a:a5:87:46:4c:24:55:59:
91:4c:80:09:23:73:f5:d3:99:c4:6f:8f:8a:3c:44:23:93:33:
41:12:5b:47:f2:cd:fa:f2:0b:c3:04:e7:88:52:dc:44:e9:22:
54:9f:76:c9:18:a2:a8:f4:88:1f:76:2e:0f:42:bf:33:3a:85:
ab:a5:47:30:ca:bd:f3:c2:73:35:53:34:b3:cc:7c:25:2b:c7:
09:f8:b4:aa:b9:e9:12:64:5a:d6:7c:10:de:a9:39:69:e8:80:
79:c2:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:13:37 2025 by rpki-client