Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: olJXNL78r2IsFQshESete1Ev+YZG5EYtg+xBLjBbYyU=
Subject key identifier: D8:51:C5:A3:B5:33:C7:60:6F:21:4E:E3:C3:CE:4F:51:79:9C:89:73
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 019676E8219DBAAB3E797423A599038C9305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 11:00:46 +0000
Manifest this update: Sun 27 Apr 2025 11:00:46 +0000
Manifest next update: Mon 28 Apr 2025 11:00:46 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: aEKRVNr4Ss7tUO6C1/hX4uDh4M6Bq4sfzw4p773L1bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:21:9d:ba:ab:3e:79:74:23:a5:99:03:8c:93:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Apr 27 11:00:46 2025 GMT
Not After : Apr 28 11:00:46 2025 GMT
Subject: CN=d851c5a3b533c7606f214ee3c3ce4f51799c8973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:dc:a4:57:66:b4:1e:41:c5:b7:ce:5f:96:
7a:49:99:8f:af:64:5f:56:ea:c6:b4:db:b7:ca:6a:
e0:e0:3a:2b:02:06:ce:54:78:57:7f:da:0a:a2:ab:
59:56:7d:c2:18:42:a7:05:ac:0f:69:dd:17:eb:1a:
7f:41:75:c8:bf:3c:b9:f0:89:bd:2d:34:47:4b:5e:
b3:46:fa:4d:24:6f:95:4c:75:20:10:52:20:15:9d:
2e:e3:3b:c4:84:a2:1e:59:ea:48:81:22:ef:fe:c6:
7c:09:13:70:0a:5c:02:3f:bc:a4:e1:1f:a3:fd:3d:
b9:22:f8:1c:c8:40:23:87:ec:2f:43:87:89:72:16:
18:4f:9a:67:1e:b6:62:23:8f:27:0d:9a:71:89:46:
ba:3c:2f:f3:b8:f0:8a:5b:8c:3f:5b:59:3e:59:e1:
3c:64:df:11:ab:8c:5a:4c:be:2c:47:b9:bc:26:b1:
67:6e:71:8b:38:dd:75:af:8c:c9:f8:62:75:28:73:
f3:2a:d6:a8:f4:d7:6b:88:d1:76:05:bf:9c:d1:f3:
b3:dd:37:a8:5f:4c:e4:f2:e1:ee:c5:7f:10:5b:78:
8d:b6:0d:38:98:07:2d:18:89:a7:80:08:ae:52:c6:
17:64:a3:6f:ec:fd:a6:bf:1b:4d:94:d7:24:15:79:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:C5:A3:B5:33:C7:60:6F:21:4E:E3:C3:CE:4F:51:79:9C:89:73
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:b5:8c:6e:c5:db:cf:86:76:6f:2b:ed:03:f5:02:63:4e:
f1:d2:44:4c:8d:38:df:e2:72:8a:b0:2a:67:12:c2:fd:2f:26:
ef:6f:d6:8a:b2:51:7f:88:0d:15:57:9e:92:2b:21:a3:57:90:
fc:9d:dc:c8:b0:b6:eb:81:98:e1:0a:37:f0:04:ee:23:ac:fd:
e3:10:e7:17:f0:d7:7d:64:62:d0:53:76:0e:48:7a:6a:79:07:
95:20:80:93:df:3d:75:71:ec:21:5f:64:9d:aa:04:b9:1e:fa:
5c:14:81:1b:12:9c:09:b8:a9:04:db:c0:2d:e1:27:7a:ed:5e:
65:b1:92:82:a0:ca:fc:77:8e:6a:33:e8:18:fb:69:ec:45:f8:
95:a8:6d:d7:96:c6:64:e8:a2:50:47:5c:cd:bc:5b:3b:eb:4f:
ce:f4:d6:0a:5f:3d:77:7b:da:23:a9:49:d8:2d:ed:97:01:e9:
4a:19:90:73:b9:84:f5:35:e2:09:43:09:bc:c1:ae:0e:e6:00:
35:ed:72:06:4e:99:7a:0a:90:7b:23:60:f4:35:20:2f:0e:08:
f6:68:a6:8c:67:c1:53:98:76:d3:67:a2:39:e9:63:9f:6f:d0:
64:49:4f:17:27:4a:c6:d8:47:5f:b2:4b:07:2f:c3:90:f7:6f:
a9:b1:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:12 2025 by rpki-client