Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: j2jPM5ZhBI6nHAZfieMQ0nx+eF94GPzX5Z1q62YPkB0=
Subject key identifier: F6:BC:8B:45:74:68:FF:79:5B:EB:57:84:07:18:42:25:09:C2:E3:22
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 0196767A5702E64F78B2573ACF85F9B5DC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0A68
Signing time: Sun 27 Apr 2025 09:00:51 +0000
Manifest this update: Sun 27 Apr 2025 09:00:51 +0000
Manifest next update: Mon 28 Apr 2025 09:00:51 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: riBYoGlQYxNUQbkpA07pdjDnI4QhQ2nNaXLsHy2ZBJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:57:02:e6:4f:78:b2:57:3a:cf:85:f9:b5:dc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Apr 27 09:00:51 2025 GMT
Not After : Apr 28 09:00:51 2025 GMT
Subject: CN=f6bc8b457468ff795beb57840718422509c2e322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:0e:51:c0:41:d5:d6:aa:68:46:55:d2:6e:
d5:46:f2:9f:82:bb:9b:08:c1:fe:f4:56:89:da:5e:
f1:2e:48:06:84:8c:f4:56:2e:48:20:bb:0b:63:0a:
14:34:15:bf:e2:1c:d8:6e:97:c3:d4:54:c8:e3:48:
35:37:6f:f5:bf:2b:91:c0:1a:5c:bb:13:91:75:c6:
1d:c6:9a:5a:d9:7d:d3:63:27:c1:05:9e:e1:72:0d:
0a:6a:cb:e6:00:a1:fe:83:0e:de:bc:a5:ba:3b:5d:
af:0e:3f:b3:01:03:b8:7f:5d:d5:b7:c6:c6:99:89:
35:54:fb:21:f0:2d:1a:4c:de:68:12:d4:be:8b:2c:
48:d0:2c:9f:09:50:b2:b9:de:66:a2:1f:1d:0f:0e:
a2:cc:3e:0f:0e:a6:1a:c0:b3:7c:4e:9f:83:d7:0e:
8c:1d:02:eb:e2:05:49:80:01:bc:f1:d3:be:06:71:
52:27:c0:1a:2c:95:ea:0f:14:98:cc:bd:8f:e8:aa:
de:f4:27:1e:12:18:a5:26:ed:2c:54:85:30:26:26:
41:e7:22:fc:c5:74:de:75:fe:f9:f4:55:a1:06:7e:
a8:d6:5b:d2:fa:e9:70:ae:ef:bd:18:8d:ed:8b:22:
2a:37:9f:8a:06:cf:b8:d2:3b:f8:7a:f9:93:02:b8:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BC:8B:45:74:68:FF:79:5B:EB:57:84:07:18:42:25:09:C2:E3:22
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ac:fc:9d:89:b1:4a:f6:6f:98:26:00:8e:34:7f:49:d4:39:
e4:4c:47:0d:dc:9b:7e:f5:86:09:64:34:ee:ce:69:1e:6c:cd:
84:3e:60:15:50:94:05:94:7d:f6:54:12:4c:d5:d0:df:6f:74:
9e:0b:ed:b8:53:bd:20:18:30:fd:f5:ef:71:c2:72:99:74:29:
c8:e9:e4:99:0e:56:b6:3a:d9:31:a9:98:4f:97:32:64:45:dc:
7f:6a:5d:ff:e4:37:3c:9e:b7:05:4b:a6:7d:f4:2b:7f:aa:44:
02:72:76:51:a2:78:e7:77:a2:c6:96:08:bb:f2:0a:15:0f:fd:
2d:91:70:dc:f2:02:d6:cf:2f:39:2f:c8:6c:e2:e7:77:af:76:
b9:e3:f4:81:f3:3f:8d:63:2e:fc:11:38:0a:07:f4:f4:a9:f4:
f5:94:39:80:3c:de:e1:33:ff:6b:f5:3d:f2:9c:17:ce:21:10:
bd:ca:f4:e6:92:1f:db:c6:e2:6c:69:09:4c:32:e9:66:7f:93:
8d:0b:f7:13:df:34:fc:37:0f:34:fd:87:b4:77:10:e0:3f:65:
3b:8c:e1:0a:72:33:36:33:5f:be:e0:8e:a8:ca:13:fe:ea:2f:
f3:11:c5:57:81:a1:4f:73:e1:21:5a:b1:e6:6b:e7:54:f4:6b:
51:b0:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:29 2025 by rpki-client