Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: 1eMf3Dv7utAFwiJ8ZjKeixq5nmgh9IUSQo8MXyq6YoM=
Subject key identifier: 50:23:AF:12:91:10:A6:A7:9A:48:63:0A:97:A2:50:10:08:59:51:01
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 01967A57033DC63EF22BD330444E4884FB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 03:00:44 +0000
Manifest this update: Mon 28 Apr 2025 03:00:44 +0000
Manifest next update: Tue 29 Apr 2025 03:00:44 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: eHXQoKiID40UzIep6xYfaG7ZEEOeo5TE86fr9sPqGIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:03:3d:c6:3e:f2:2b:d3:30:44:4e:48:84:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Apr 28 03:00:44 2025 GMT
Not After : Apr 29 03:00:44 2025 GMT
Subject: CN=5023af129110a6a79a48630a97a2501008595101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:96:92:e5:51:66:ec:2a:02:ce:76:ca:1b:
5a:85:24:17:90:1e:97:34:2b:54:23:3e:9b:13:9f:
1e:71:c7:da:7f:e8:9f:11:5c:01:ef:8d:c7:fd:d6:
cb:ae:6b:ad:5f:94:f2:2c:ec:42:e1:5c:5d:30:84:
9f:6e:51:df:5f:92:e3:ff:0b:da:d6:cc:d5:35:00:
d2:ca:40:05:1b:22:49:8a:28:3b:f0:d6:64:98:8a:
46:26:29:da:e7:01:88:82:92:5d:ef:bb:1c:67:41:
9d:5a:25:c5:7a:19:cc:82:f7:e3:5a:26:88:a5:24:
cb:26:16:37:63:de:4a:ee:50:56:61:61:c7:55:b0:
83:dc:78:7b:4b:3b:56:c2:49:b3:30:09:cc:7b:7a:
6c:67:c6:b0:5e:17:18:cb:47:97:e5:58:9b:c6:ac:
ab:ee:e3:91:0a:cf:bf:4c:15:98:27:69:2c:18:d4:
95:69:94:d2:bf:51:1c:21:25:7d:99:53:ed:f5:fa:
2d:20:7d:3f:95:da:9f:0d:2a:77:bf:6b:88:7b:ff:
a1:df:6a:79:17:fd:f9:20:34:77:d0:6e:59:d1:9e:
40:91:c3:f2:49:dc:7e:02:9a:c1:b1:34:11:de:bc:
b0:cf:33:2e:e9:14:28:69:c5:87:64:b9:90:c7:fe:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:AF:12:91:10:A6:A7:9A:48:63:0A:97:A2:50:10:08:59:51:01
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:58:8d:54:8f:3e:a6:b6:06:1d:ba:09:6c:d2:74:0b:f9:c1:
c0:29:3b:e3:28:62:74:3d:d4:bb:69:11:3a:26:63:fa:28:b9:
2b:2a:55:82:41:ca:3d:92:18:40:e1:9d:3b:f3:cc:dc:54:83:
78:dd:9e:47:3b:ec:e6:ca:a9:45:42:53:3b:83:23:fb:22:a6:
a3:e0:fe:61:d5:58:e8:cb:66:d4:68:4e:d4:ac:53:05:de:74:
7c:b9:d8:45:b4:12:0e:9f:97:03:b7:c3:3c:71:9f:22:e6:db:
ca:ae:a3:d6:94:88:58:86:f6:ac:5e:2b:f4:ad:69:a5:9a:24:
3f:78:4c:ca:ab:57:e6:04:38:fc:56:61:77:c1:d5:a8:bd:1e:
62:83:3d:af:05:18:11:1c:e6:3f:fb:b5:9a:8e:0d:1f:fc:a2:
49:2e:df:4b:f1:13:2e:75:2e:a2:4f:1d:72:44:50:09:72:1e:
c2:bf:21:51:fd:b7:5e:a5:33:74:0b:b6:c7:4c:ee:64:66:68:
05:d0:a7:e7:02:27:95:5b:bd:2e:fe:57:ff:07:a9:3a:fd:ad:
14:85:17:7f:11:34:49:6e:98:7b:c8:56:7d:bc:8a:b6:a4:10:
63:c5:14:6b:19:cd:db:07:a5:9b:c3:0d:47:53:12:3e:51:83:
e9:6c:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:31:23 2025 by rpki-client