Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: 5i3/WiiJ38xFvyze78sI4jrGd9sUFfZ500WM/znPHj0=
Subject key identifier: 15:FB:75:59:BF:28:00:30:8F:49:3F:DD:01:4D:97:ED:80:5E:F7:40
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 01967AFBCABE8B5AA578951B77BD7F065B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 02A0
Signing time: Mon 28 Apr 2025 06:00:43 +0000
Manifest this update: Mon 28 Apr 2025 06:00:43 +0000
Manifest next update: Tue 29 Apr 2025 06:00:43 +0000
Files and hashes: 1: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (hash: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: ggF5fKrlVXZqDNKK+Zt8H2OrdjBMJrs1IrbqNP5p1Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ca:be:8b:5a:a5:78:95:1b:77:bd:7f:06:5b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Apr 28 06:00:43 2025 GMT
Not After : Apr 29 06:00:43 2025 GMT
Subject: CN=15fb7559bf2800308f493fdd014d97ed805ef740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:e2:11:05:25:08:44:86:bd:a5:c2:c0:17:
b0:81:d6:cc:a7:50:fa:aa:ee:04:27:bb:77:1c:89:
71:3f:4b:ef:2e:25:f4:81:91:58:77:a6:cf:e9:f8:
c6:c4:0b:a5:e3:59:34:34:7c:10:c6:8c:0e:bc:9f:
b7:c5:2d:17:50:e9:49:24:d1:eb:9a:d2:97:6c:87:
48:7a:52:8a:2d:ea:b0:23:f8:69:3d:19:65:3a:8e:
b2:17:52:9b:92:ef:04:cf:86:b5:32:21:0e:c7:27:
f6:7d:a1:76:93:69:26:ca:50:f7:78:01:f8:77:04:
84:19:3f:c9:6a:ae:2e:fe:43:b3:34:cd:11:58:86:
10:56:74:95:de:65:e3:ae:14:d7:8d:04:1b:0a:c3:
2a:92:66:28:d4:6b:43:a8:fe:09:32:4e:55:64:c6:
2e:a9:23:c4:3d:16:71:23:0f:f2:bc:8a:ae:58:f9:
3a:6a:f2:d9:78:83:91:f5:81:fa:da:76:ca:84:9c:
99:a4:24:0c:63:dc:3e:1a:29:e7:c9:79:b9:c0:d9:
bc:b0:6e:3f:7c:0d:69:c2:6b:99:8b:fa:11:32:87:
c8:5c:7a:86:58:b4:44:f4:f6:f8:ec:64:f0:eb:45:
05:66:ce:73:16:c2:c7:a6:99:44:29:ed:6b:08:8d:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:75:59:BF:28:00:30:8F:49:3F:DD:01:4D:97:ED:80:5E:F7:40
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:56:ea:7f:d7:0e:8d:fe:1e:d9:0d:31:16:ad:6e:a9:45:17:
f4:3e:a6:a7:fd:31:bf:c7:66:75:cf:80:a9:87:a2:80:8c:c8:
67:6c:7f:f6:30:f3:77:33:6a:41:f9:81:51:ef:85:01:33:18:
8d:35:1b:42:19:16:7e:88:56:2a:24:0f:23:38:9f:da:95:5c:
da:a8:75:81:3e:7d:2d:ba:d3:95:10:66:28:48:c4:20:6b:e4:
09:b5:7a:93:58:9c:be:9c:56:a9:5a:e4:50:aa:39:a7:b0:2d:
0e:43:0d:bb:ed:52:21:63:2f:5e:41:fb:8e:cc:dd:01:9f:52:
77:09:7f:ed:d8:ee:10:b6:a8:be:78:e4:da:db:bb:8b:20:c3:
5e:ef:78:9c:e1:bb:af:78:3d:ba:01:fd:32:5a:5c:a9:a2:06:
ca:ba:62:40:ae:e5:8b:76:6b:6e:29:0b:b1:68:1c:3f:12:1b:
fd:68:76:bc:ce:e5:86:aa:5d:32:1a:a0:58:61:f8:22:d6:60:
13:e0:31:a1:09:41:5f:13:54:e9:2f:e0:5e:2c:16:d1:1b:1f:
85:7b:f9:49:8a:35:d9:83:fd:ba:32:45:2b:f9:3c:df:45:5f:
fc:d2:51:27:d8:b7:e9:7a:a4:7e:f4:09:90:24:7a:5b:21:f0:
6f:ff:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:28:36 2025 by rpki-client