Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: si5OYSepiRUfWOjuThbIXu3/MKX3W80MpVzxfF1Bx0g=
Subject key identifier: FE:4C:E2:A7:D6:1B:B2:C7:11:F3:40:12:85:C1:F5:3B:69:49:57:23
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 01967ED8C12ADFFF0F0B99EDB2968A61F4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 02A2
Signing time: Tue 29 Apr 2025 00:00:56 +0000
Manifest this update: Tue 29 Apr 2025 00:00:56 +0000
Manifest next update: Wed 30 Apr 2025 00:00:56 +0000
Files and hashes: 1: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (hash: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: dDHwvwOfwdwWq/t+YSgr3/lCFLPpSCRmX7fBGf770qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:c1:2a:df:ff:0f:0b:99:ed:b2:96:8a:61:f4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Apr 29 00:00:56 2025 GMT
Not After : Apr 30 00:00:56 2025 GMT
Subject: CN=fe4ce2a7d61bb2c711f3401285c1f53b69495723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:a5:ac:79:e2:e0:f4:9e:b4:b0:10:12:c4:
28:16:31:76:fa:e1:93:8d:e1:4f:d0:46:93:8d:c9:
e7:c4:7f:53:ce:aa:99:aa:c6:0d:f4:f0:2a:51:c9:
40:10:7b:30:09:6b:a0:73:89:66:61:22:18:d0:7b:
3a:0d:ef:ce:cd:6b:44:e5:84:64:7b:1e:05:5e:34:
5d:dd:70:0d:bd:e8:da:a6:d9:ee:af:96:65:0c:6d:
d0:2e:14:a4:7a:e3:a9:d6:de:4c:47:3f:d1:4b:b2:
cd:b1:46:94:f8:32:94:3b:db:c5:64:59:9c:fe:56:
7a:91:d6:c0:82:04:86:9f:99:d5:63:71:56:51:45:
48:18:12:1f:d2:a0:10:5d:4e:cc:d0:9c:3b:51:cb:
ac:4e:44:b0:7a:13:7a:5a:5a:02:12:24:ed:fe:c2:
22:7e:88:4d:d3:99:12:bb:a7:1f:59:89:a5:08:29:
9d:45:00:6e:85:af:17:02:81:df:7a:1b:70:6f:4b:
4f:81:81:43:8e:fc:a6:10:8c:42:d3:fc:71:8d:1f:
40:a6:3b:fb:34:87:14:9b:9c:b6:3f:55:95:43:8e:
de:19:67:f9:40:41:49:63:67:d4:f6:16:dd:a5:dd:
f2:9e:cc:91:94:c9:fa:3e:44:40:26:fb:14:4f:36:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:E2:A7:D6:1B:B2:C7:11:F3:40:12:85:C1:F5:3B:69:49:57:23
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:85:ec:03:f7:35:cf:f5:02:5a:93:81:15:fe:80:78:cf:5a:
30:cc:10:d7:75:2a:78:13:16:3b:cf:62:cc:90:63:f9:7c:92:
f7:f8:27:9e:7d:c4:90:27:d1:12:03:26:94:84:f3:f8:0c:e5:
f7:12:57:68:55:bf:07:83:0b:b5:ab:68:81:f2:82:5f:4a:77:
ca:1c:66:e7:f2:da:f1:84:e1:45:13:f8:65:2b:a1:95:7a:d0:
0e:71:64:1d:91:88:3f:4e:80:dd:3c:ee:48:4e:be:c5:5a:89:
9b:f7:4a:e3:80:e3:8c:1a:96:18:7a:b5:f6:6a:b1:a4:b6:e6:
75:c8:e0:36:72:28:3b:90:50:27:d4:8c:f3:3e:f1:29:a9:8d:
b0:dd:c0:ad:00:9a:28:dc:18:f3:83:e1:78:ca:f6:67:9e:d2:
f9:98:8c:22:b2:88:85:41:1c:6c:e0:ac:89:91:83:c7:c0:b4:
ce:a7:cd:44:fd:99:f4:70:f0:1d:cd:63:2f:99:e9:69:b2:3c:
03:57:72:de:f8:61:ab:f5:d5:66:5a:aa:f8:be:e6:41:44:f1:
f8:47:ea:ec:00:ce:c9:44:f4:a5:4d:44:e6:d5:a3:2e:ff:d1:
8e:46:c7:76:d2:c5:dd:da:10:ae:a0:2b:24:0e:bb:bd:ec:12:
18:20:e5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:39 2025 by rpki-client