Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: 9FSdCdZBJdd04Ly22HPKeHTDLAmFeTe0aDeVhYMR4RM=
Subject key identifier: 0D:7B:B5:57:6A:32:33:78:2B:1D:2E:FE:86:E5:B0:CA:3C:80:C9:97
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 019674C278CEFE155046F6D70FF5E632245E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 0FDD
Signing time: Sun 27 Apr 2025 01:00:23 +0000
Manifest this update: Sun 27 Apr 2025 01:00:23 +0000
Manifest next update: Mon 28 Apr 2025 01:00:23 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: JGEl1HPMP+HFWLJlDPQ9m4wLWeSG3Evx9eG8xrGM23A=)
2: xBWezcOjf0HLBQBmbtDyglq06CU.roa (hash: dlL0ZUaafY/fyT+lFkSao0d0hLl5qFvGU+tiAKR4bcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:78:ce:fe:15:50:46:f6:d7:0f:f5:e6:32:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Apr 27 01:00:23 2025 GMT
Not After : Apr 28 01:00:23 2025 GMT
Subject: CN=0d7bb5576a3233782b1d2efe86e5b0ca3c80c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1c:d2:ef:b2:3d:83:b2:b3:c3:2c:4f:36:8e:
dc:b4:3b:1f:1f:ef:30:df:4e:d3:f2:d9:cd:f3:ea:
63:94:6e:f3:a2:6a:75:5d:40:8c:fe:51:1d:39:db:
b5:0f:67:08:31:ef:8f:f5:00:8d:30:bf:51:55:02:
f2:7c:d9:39:26:b4:9b:86:96:2c:96:a1:a0:68:71:
87:e0:9b:84:e4:03:21:58:2c:c9:86:3e:cb:bd:67:
0c:3c:90:14:2a:15:12:fb:f0:af:f4:99:b0:60:73:
30:28:b1:db:e9:69:a7:6c:2e:58:ba:3b:50:c8:0a:
7e:b0:c7:c4:72:16:7e:56:ee:a4:f3:73:51:60:76:
2c:da:0b:f3:c8:8e:8f:9b:bf:f0:7f:47:7c:eb:99:
6b:e8:16:35:4d:46:8a:14:5c:1a:cd:aa:e5:c2:b3:
53:9b:24:61:45:25:7a:48:bc:ff:8e:34:d7:72:c3:
42:2f:77:f3:54:f1:09:5b:e4:88:16:f4:b2:78:58:
e5:18:d6:b8:c1:fa:1c:06:78:f7:1e:ae:5e:d5:d5:
ce:f4:31:5f:d6:44:b0:e1:7c:3a:d9:9f:a7:c9:68:
6c:a1:1c:9c:db:27:c7:04:f4:09:09:e0:9c:fc:18:
19:e2:b4:7d:7c:ca:9e:95:c3:aa:dd:cb:9f:18:70:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:B5:57:6A:32:33:78:2B:1D:2E:FE:86:E5:B0:CA:3C:80:C9:97
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:ae:e3:d4:4d:d7:78:a9:f3:8f:59:61:13:29:ec:17:a1:
f0:fa:13:a6:bf:b2:4b:19:d1:0b:59:1e:ec:3f:a4:f7:ae:38:
d0:0d:52:32:ec:b9:78:30:f3:25:de:9e:c1:d1:60:fd:cb:69:
8d:9e:d9:5c:1d:0c:30:85:c0:14:6e:21:d7:83:36:e4:60:88:
e1:af:bd:f2:51:d2:a1:10:74:ea:6c:d9:4b:89:2a:c3:c7:30:
63:a1:c5:58:38:14:33:aa:d0:ee:16:3a:65:1e:7f:82:c1:ed:
27:e2:8f:38:0f:0e:c8:07:d3:1a:d0:ba:46:89:ae:bd:67:71:
cc:10:31:a5:cc:ac:29:ab:fc:2f:b5:96:ef:2c:88:8b:1e:67:
6d:29:97:4c:4f:ae:21:c3:98:ee:b6:d3:1f:d1:67:82:ea:9b:
f1:45:bc:66:5b:b0:65:96:13:29:5d:b3:bd:e6:d6:10:ee:fa:
a2:1e:bc:28:13:4d:16:09:34:17:fd:18:70:c8:7b:e8:33:1a:
9a:a3:0d:d6:aa:c5:2c:ad:2e:20:42:13:52:3f:59:39:9a:4c:
05:ba:53:cd:66:af:b5:3f:9a:6b:84:ca:aa:9b:15:53:b6:7b:
42:a9:96:48:f7:22:49:55:f6:bf:ae:f8:a8:6a:97:82:b0:9a:
c6:ec:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:39 2025 by rpki-client