Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: uIh/vMPWGnV/9BETcUHfm7RpY7LyhpKxVFM/40QQB2w=
Subject key identifier: D9:4E:DD:19:EF:B8:AA:6B:35:ED:F9:6A:CC:58:CB:85:7D:78:9F:6B
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 0196876DEECBCACC5E5CA2A8A3C625ED9649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 16:00:50 +0000
Manifest this update: Wed 30 Apr 2025 16:00:50 +0000
Manifest next update: Thu 01 May 2025 16:00:50 +0000
Files and hashes: 1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: owwf1wLNGSdNotvvQLMvBE+xw6+15cTRn8dsDvbVXxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:ee:cb:ca:cc:5e:5c:a2:a8:a3:c6:25:ed:96:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Apr 30 16:00:50 2025 GMT
Not After : May 1 16:00:50 2025 GMT
Subject: CN=d94edd19efb8aa6b35edf96acc58cb857d789f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:5e:cd:ea:04:18:dd:d9:9c:9e:75:28:1d:
18:f6:1d:a8:ad:b8:96:4c:d1:32:1f:c4:d3:ec:61:
c7:e2:9c:67:dd:0b:29:0e:c4:33:8e:24:40:89:4e:
ec:a7:1b:7c:22:61:23:79:59:d2:1c:94:c3:3a:0a:
dc:69:94:c3:66:b4:10:f4:88:9f:28:e6:a5:79:8f:
bd:3a:12:0b:88:8e:26:cc:45:a0:a1:50:5b:23:92:
f4:31:28:32:a3:12:64:2a:b3:89:83:26:fa:57:4a:
5d:3e:47:3b:47:ae:13:7a:7a:c2:39:1e:82:97:3c:
73:12:95:9d:76:32:ec:f9:89:09:10:38:e8:c6:69:
9f:d2:83:40:c5:99:e1:e8:da:63:d8:1b:fd:b3:21:
b8:68:c9:dc:c0:5e:c3:a9:55:b4:27:ef:bf:ed:44:
23:02:ad:1e:39:64:ec:37:af:e9:1b:ab:bd:69:b9:
6b:e8:1a:b0:5c:60:0d:63:70:46:d0:a1:fa:be:f3:
a6:a0:93:34:91:fd:6f:98:57:5b:cb:a4:ea:b6:23:
6c:55:f6:a1:69:8a:25:c9:54:0d:1a:4e:39:fd:52:
05:cc:af:e9:15:61:67:06:c1:64:71:7b:f2:3d:db:
19:a8:05:0a:30:d0:13:99:60:8e:96:62:ad:48:74:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:DD:19:EF:B8:AA:6B:35:ED:F9:6A:CC:58:CB:85:7D:78:9F:6B
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:3b:07:11:c6:3b:9b:c5:22:67:64:bd:9d:a2:92:66:83:
5b:46:98:47:2c:44:2c:91:8c:b2:39:f3:39:b3:46:f5:a5:ce:
d1:af:77:1e:7c:42:7b:95:f2:ca:6f:a1:38:48:08:b2:08:73:
d9:c9:9e:02:52:e3:6a:6c:31:25:a1:f0:fc:51:a4:cb:63:4f:
b6:e3:fb:40:e3:60:7c:f8:10:e8:c3:bc:56:30:4f:e4:13:10:
0b:5c:94:6b:5e:b8:c8:f1:3c:c5:fa:af:65:6d:9b:47:af:7a:
18:4d:d6:cd:31:7d:8d:ed:88:9b:3d:a2:2a:69:85:c8:0f:a6:
44:b0:4d:d8:c6:56:16:db:1b:38:ce:86:70:1f:32:0c:5f:22:
6f:f1:78:d0:86:18:ee:c1:23:fd:59:bd:6d:2a:02:85:d5:cb:
4f:cb:1b:4c:97:1e:4a:db:b4:8e:25:d5:70:7e:cf:47:04:71:
99:92:2f:93:f7:f9:e5:c9:d1:2e:f4:e8:12:37:de:49:ad:0c:
41:47:3c:b5:bf:a4:9d:02:e2:28:d1:ca:b3:ce:0a:1c:4d:bf:
32:80:73:68:e5:ed:a6:ab:36:10:4c:a5:1a:fe:13:81:44:02:
31:35:4b:31:2d:33:bd:43:ee:bd:9c:7e:83:79:eb:e0:e2:34:
2b:89:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:04:23 2025 by rpki-client