Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: /BDKb8322xkuoJn267ifX658P8AK3IEDFMilg6PDavA=
Subject key identifier: 77:9B:14:A1:C6:DA:23:C6:15:51:3A:2D:8F:16:67:E9:FB:1D:8F:08
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 01967943F828CF6A8E7CF723A79443FA4499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 0668
Signing time: Sun 27 Apr 2025 22:00:19 +0000
Manifest this update: Sun 27 Apr 2025 22:00:19 +0000
Manifest next update: Mon 28 Apr 2025 22:00:19 +0000
Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: +8oqgOatrZoytZbyUcxvoqN6YZ11FHIyDhG5Wk2bBN0=)
2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:f8:28:cf:6a:8e:7c:f7:23:a7:94:43:fa:44:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Apr 27 22:00:19 2025 GMT
Not After : Apr 28 22:00:19 2025 GMT
Subject: CN=779b14a1c6da23c615513a2d8f1667e9fb1d8f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:70:c6:46:27:3d:f1:29:37:22:f5:3b:00:
4a:92:eb:dc:0b:0a:ab:30:a8:5b:ae:ff:ee:77:83:
6c:65:e0:75:f5:2d:b4:87:22:9a:f0:d1:8b:cc:e0:
26:df:80:96:b4:b8:99:80:00:3a:0a:60:7b:48:11:
2f:c1:7f:87:f2:ba:40:ac:fe:86:24:79:1a:c2:53:
b5:46:26:a8:7d:35:4f:18:72:1b:a6:9c:97:f1:ca:
46:93:b7:e8:6a:da:2c:61:b1:75:c7:0b:e2:61:a1:
52:68:32:e2:0b:8d:90:3e:08:4c:59:f4:46:87:6d:
2e:81:30:d0:d6:98:30:77:d6:00:bf:0b:78:a9:26:
d9:26:b7:5d:d3:27:bc:b7:21:d5:15:d8:d6:58:c3:
a0:9c:66:e5:d5:93:41:8c:83:12:5a:17:cd:0b:e8:
2a:85:a7:8b:83:b3:b3:fe:52:65:ff:bc:23:7f:f5:
f4:e0:9c:d2:03:f7:e0:8c:e3:a3:ba:53:1e:98:dd:
73:15:96:df:ba:1b:e8:2d:3c:ad:22:98:bc:4f:eb:
d6:26:df:c5:3d:c3:71:8b:15:98:ac:9b:b6:69:1a:
73:08:4d:c2:3a:da:87:4d:22:fe:dc:a9:16:b9:46:
2c:4a:64:09:dc:8d:3c:61:ab:6e:19:36:54:33:50:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9B:14:A1:C6:DA:23:C6:15:51:3A:2D:8F:16:67:E9:FB:1D:8F:08
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:a2:43:ab:b2:93:f8:67:54:0c:56:09:7d:1e:80:6e:33:
9b:b6:9f:36:5b:b9:0e:73:d2:71:14:e7:c8:a9:79:27:54:92:
ed:f0:52:33:3d:2f:34:0e:04:d9:16:a7:dd:2d:83:ec:c2:38:
a0:36:9a:66:8c:47:7d:f4:95:7a:1c:89:d1:a1:70:3c:63:93:
7c:de:6c:cc:e7:34:5b:97:7e:d8:38:c6:fe:13:2e:71:4e:c5:
1b:86:cc:58:cb:f7:8d:9a:47:57:2a:41:77:9d:ae:c1:14:d8:
3c:79:36:5d:b1:7f:99:41:d4:a4:90:41:78:76:78:fa:1e:c2:
d8:5e:2e:46:64:7b:35:2a:e6:ad:01:0c:25:d3:3a:69:e2:e5:
54:ca:75:ae:6c:f7:18:32:b6:54:e1:7a:6c:68:ac:ca:2f:a2:
81:69:a2:36:71:f7:6e:70:44:33:ba:cc:e8:7c:a7:01:44:ab:
c0:89:ff:fa:c2:b9:15:cb:17:25:cf:9a:ad:e8:b3:15:1f:be:
0d:a1:bd:5c:1f:31:3c:6d:11:b7:e9:ba:a8:0f:6b:d6:70:af:
8f:07:5d:a1:73:f8:17:55:db:b9:8f:dc:77:a9:ce:ac:0c:37:
56:49:d0:dc:88:07:83:90:4b:be:95:dd:c5:c4:0e:f8:a3:c8:
1b:09:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:02:31 2025 by rpki-client