Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: U3r/cuAoO6AQ8tuvTNGYpr5thm44P6YxXIgLWgnrcEA=
Subject key identifier: 8D:FA:25:9C:82:0D:39:31:05:3E:B3:BD:0F:3C:96:60:09:E3:AF:83
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 0196790D6B98BE8BBE5DD561BB16E0AF45D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0C30
Signing time: Sun 27 Apr 2025 21:00:44 +0000
Manifest this update: Sun 27 Apr 2025 21:00:44 +0000
Manifest next update: Mon 28 Apr 2025 21:00:44 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: SDQMJZ2JHXYWXorI2qamoVHaqLst7jtJMnSwkMNQ2f4=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:6b:98:be:8b:be:5d:d5:61:bb:16:e0:af:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Apr 27 21:00:44 2025 GMT
Not After : Apr 28 21:00:44 2025 GMT
Subject: CN=8dfa259c820d3931053eb3bd0f3c966009e3af83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:12:5b:36:43:f0:7c:c1:38:35:f7:52:1d:
f1:b3:d6:e5:eb:09:e2:d0:1d:34:76:f1:80:92:a4:
44:ff:3a:c8:8e:52:61:92:bb:df:19:38:7e:1c:f5:
1a:9e:fc:3e:b5:c2:a1:85:ee:29:eb:a6:6e:ab:ff:
97:40:39:43:68:c9:47:d9:c9:15:f5:e8:8c:9d:7b:
a0:3f:af:b2:86:6f:a5:64:80:08:7a:bf:f5:70:1a:
40:fe:aa:86:34:66:a9:86:b1:51:65:ff:31:8d:8d:
16:99:85:02:e7:f1:9e:8e:23:22:78:c1:77:b8:55:
88:05:e4:eb:03:19:68:da:ee:51:0a:75:4a:53:df:
6b:87:32:37:74:b2:87:39:5d:a4:5d:a8:2f:20:6f:
06:ec:4c:fc:0c:0c:91:76:2f:c5:9a:a3:dd:9a:d7:
9b:c4:7c:05:f8:5c:e4:6f:e4:0d:3f:f3:3e:fe:d6:
76:23:b8:01:04:ec:ae:b1:25:68:30:1e:00:7d:82:
8d:5a:68:36:09:6f:1f:6d:e1:ea:31:81:d8:55:80:
18:d6:9f:b6:8c:48:b3:65:27:a0:bb:42:39:ed:48:
df:b4:60:16:e3:9a:b1:5b:73:fc:ba:47:88:65:6e:
b8:aa:84:7b:f2:b9:4d:ea:02:29:05:6b:c6:e2:ef:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:25:9C:82:0D:39:31:05:3E:B3:BD:0F:3C:96:60:09:E3:AF:83
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b9:ac:08:ca:e3:09:cd:28:5d:45:5b:f2:24:08:c4:18:35:
60:cb:fd:7c:42:ba:65:97:18:ef:f9:dc:90:88:7b:cc:0b:6c:
7d:92:8a:3f:83:89:71:14:91:7f:89:ec:c6:a9:93:43:69:17:
88:d8:9b:c5:97:33:0b:f6:4e:f2:2e:bb:2e:76:6c:10:34:93:
9c:48:81:1a:9d:8d:2d:d1:10:09:97:c6:f0:4b:50:7b:e8:c7:
88:27:d4:4e:11:3d:d4:d3:80:dd:61:85:f0:de:0a:7e:56:50:
3e:5a:a5:cc:e0:f3:d2:a0:35:45:22:49:28:8e:26:bc:5c:b7:
ab:55:fc:82:fd:b3:e3:e6:bf:f9:46:4b:7c:47:eb:de:a0:f8:
c2:7a:ac:93:9a:07:61:74:61:05:0a:97:b7:25:c6:ed:39:e7:
4a:58:7d:9c:0f:5c:81:07:6b:16:18:be:f7:e0:90:c2:57:84:
c1:b0:ab:80:e3:a5:75:8d:5f:bd:c6:d9:53:43:46:97:f6:b6:
fc:e2:fa:8a:7e:e3:46:58:5b:64:8e:55:16:54:f7:45:1c:1d:
6c:3d:c0:3a:4a:2d:c4:06:c8:0e:72:26:56:22:08:73:b2:b9:
58:53:b7:d5:ba:2d:17:4a:30:19:87:b0:b0:a9:3c:d6:57:80:
b0:f0:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:48 2025 by rpki-client