Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: K//fMsNzn2qAyYZTG3rnAigdir3CGaxY9IU2iXL/r64=
Subject key identifier: 92:F8:CF:25:1F:7C:C5:0B:18:B3:C4:1C:1B:57:15:E4:07:7F:8A:7C
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 019679E8E748DFADA0647B72A03E353484FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 01:00:28 +0000
Manifest this update: Mon 28 Apr 2025 01:00:28 +0000
Manifest next update: Tue 29 Apr 2025 01:00:28 +0000
Files and hashes: 1: CMFtvIRrP8F50u4CVRtzzHXRYto.roa (hash: zBitZQVL6CHlOMMwjKpEh8Pxjt6+cJBsedg4te+yLPA=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: naE6haDY3zg8HVCmgJIbR6Hdm5fdJKCSQjc9uRXa/Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:e7:48:df:ad:a0:64:7b:72:a0:3e:35:34:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: Apr 28 01:00:28 2025 GMT
Not After : Apr 29 01:00:28 2025 GMT
Subject: CN=92f8cf251f7cc50b18b3c41c1b5715e4077f8a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:6a:70:93:b9:41:bc:25:06:cb:b5:a6:e7:
ac:86:bc:50:6a:1b:2f:a3:1d:b0:9d:80:6c:ab:e8:
2e:f8:77:d1:49:d7:a6:90:ec:b1:32:92:1d:81:69:
72:73:89:19:40:98:b1:38:98:5d:2f:11:b0:63:35:
d3:f9:73:5c:70:ba:48:28:ee:c1:5e:77:43:9c:f7:
83:20:4d:f7:40:82:ee:cc:b1:d7:08:30:09:72:6c:
ca:30:60:96:04:e8:81:68:70:b9:5f:0a:d2:c6:e6:
33:67:72:f3:58:ed:12:17:68:32:6f:5c:50:e1:b7:
2d:4f:b0:43:e0:b1:cc:cb:9c:36:98:a6:3c:f4:60:
5d:9c:6c:bb:b8:f6:53:70:fb:90:14:d7:1d:b6:66:
2f:65:c5:e3:d3:cb:1a:25:05:37:c9:21:8f:b4:0f:
c6:64:85:74:50:04:d8:32:16:ea:b6:96:b6:33:07:
6d:72:d4:83:b4:8d:fc:56:1b:c8:5b:40:f5:89:92:
26:32:bc:de:f7:5d:f5:88:2a:3e:93:e5:11:50:25:
9f:1b:4a:16:54:ad:d7:c0:07:a6:25:67:4f:04:98:
f2:2e:cf:80:dd:79:9c:33:12:37:4d:62:25:8f:29:
fe:69:e4:7a:ab:31:04:6c:68:7b:08:9e:09:d0:71:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F8:CF:25:1F:7C:C5:0B:18:B3:C4:1C:1B:57:15:E4:07:7F:8A:7C
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c8:bd:88:10:bf:2e:57:e6:90:bb:27:57:91:f7:25:e9:ee:
57:92:7a:81:00:d4:09:59:ea:a6:db:9d:b4:83:d0:91:00:69:
23:2e:8f:5f:e7:b7:98:16:ec:fb:7a:39:50:d0:af:c7:98:f0:
41:ce:35:54:29:f8:b4:a8:ef:4c:04:28:52:73:70:2f:9e:6a:
27:dc:16:00:55:b8:6d:47:07:5b:4d:d9:1e:b0:87:01:87:20:
95:25:c7:0c:60:9a:04:97:72:42:d1:54:2f:48:58:97:8e:b3:
4a:46:c0:5f:cc:b4:a5:6c:e2:63:0b:a0:b4:fe:ff:46:fb:86:
ad:ee:c4:44:12:0b:56:f9:2b:9e:80:ff:f0:85:a6:b4:fc:ff:
fd:c4:35:7f:cf:76:bd:1e:d0:28:83:04:54:9b:a1:70:82:d1:
6e:77:c4:74:52:81:4e:59:4d:21:d1:c8:62:a5:ed:3f:a9:fe:
64:0b:d6:7c:0c:6b:17:88:d2:dd:6f:95:9a:f4:31:20:e2:52:
56:91:4c:59:f8:5d:59:bc:73:40:75:d3:94:9d:e0:48:ef:64:
55:19:dd:f3:99:fa:22:68:51:49:4d:c3:c2:2b:4c:0a:18:6d:
ff:b4:aa:15:7e:03:14:d1:56:56:74:e9:d9:fe:78:67:79:63:
4d:a1:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:15:57 2025 by rpki-client