Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: x2w9PorxDBLq0FyStTB9qPEDsIIvJA6MuRjOesffh1w=
Subject key identifier: FF:C9:CF:65:76:9B:B5:25:7B:71:D8:B1:51:D5:DA:8C:9B:DB:B2:C0
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 019688EE5B58A61D66926AD6D8FAF8FB1772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0A67
Signing time: Wed 30 Apr 2025 23:00:44 +0000
Manifest this update: Wed 30 Apr 2025 23:00:44 +0000
Manifest next update: Thu 01 May 2025 23:00:44 +0000
Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: BBm3s386pQoZt1nfGnXqlamhvXkQdEaHDNpdnfFKLnk=)
2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:5b:58:a6:1d:66:92:6a:d6:d8:fa:f8:fb:17:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Apr 30 23:00:44 2025 GMT
Not After : May 1 23:00:44 2025 GMT
Subject: CN=ffc9cf65769bb5257b71d8b151d5da8c9bdbb2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:d5:7c:cd:d1:1d:38:0a:0f:3f:1a:bc:57:
8b:ed:b7:2b:d8:54:77:fc:4d:0d:59:c8:3c:05:3a:
e6:33:dc:03:52:d2:72:aa:30:12:c3:92:3a:e8:e2:
28:e7:86:bb:5a:52:25:4b:d4:1e:32:15:d4:74:49:
40:bb:58:37:21:43:be:61:c4:8a:1e:e3:ab:09:96:
32:2b:0c:a4:7a:91:20:e8:23:58:4c:d9:19:8a:bb:
07:eb:0c:d7:87:e1:f3:57:7e:8d:92:af:a0:be:d9:
aa:5d:ef:00:7c:55:71:ba:53:46:6c:5b:05:34:7a:
e7:1b:e3:67:08:a2:0f:31:90:bb:d7:73:48:83:ac:
77:c3:dd:57:36:b0:07:ba:a5:fd:92:72:1c:94:e3:
e3:a0:43:fc:81:c0:c9:79:3a:5e:58:1a:ce:3d:15:
2e:e3:94:99:a8:fc:16:9d:a6:56:c6:db:b3:24:7f:
36:fe:e5:bf:44:e3:d4:d8:dd:7e:d3:61:27:b2:74:
06:d2:9c:c8:09:13:04:ee:2f:9a:7e:99:14:6b:06:
9d:84:58:14:0c:a2:cc:f1:64:f0:62:26:b0:40:fb:
e4:7e:08:1a:45:12:de:bf:1a:4b:ce:34:a2:7f:f2:
39:5c:e7:11:f2:81:96:19:37:6e:f7:4e:72:b0:15:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C9:CF:65:76:9B:B5:25:7B:71:D8:B1:51:D5:DA:8C:9B:DB:B2:C0
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ad:af:1c:b5:ad:79:18:75:7d:a1:a5:87:b3:be:01:70:aa:
de:d6:4d:97:83:f5:c1:d5:5a:90:d0:19:fd:31:04:41:c7:a5:
d5:48:4f:3a:07:13:83:e6:cd:b3:1c:05:56:09:2d:e3:78:71:
22:ad:d6:7d:6f:9c:f1:d4:0f:86:4f:db:e6:ef:87:3a:34:e6:
fd:04:6d:0a:23:06:2e:a9:45:09:c3:bd:a0:52:c4:b1:dd:8c:
02:1b:46:04:77:11:64:f5:4c:d1:70:34:39:9b:1c:75:ba:c5:
77:08:69:e6:a4:ca:9e:5f:f1:f1:39:8d:cd:5d:72:40:84:c8:
b0:5c:f6:89:fa:6d:03:e4:56:fb:8d:d7:49:af:e5:48:d9:1a:
1f:e5:9a:59:df:0a:4a:7b:6b:4b:44:c3:3a:75:ba:ed:c8:4c:
40:77:f9:d2:d4:ff:ad:3f:8d:77:2b:c5:1e:1b:b4:e4:de:2e:
fa:ee:b2:ce:1e:6f:5a:c5:bf:16:68:a0:c6:12:e8:41:12:12:
d7:21:a6:a9:6c:bc:7c:7b:74:7d:1f:28:67:bc:0f:9e:60:ae:
27:1b:8f:a9:c1:44:0a:e6:8e:ee:40:29:2b:db:95:09:39:e6:
6b:87:e2:2e:59:05:e3:17:a8:9e:35:8a:51:6e:5f:95:38:2a:
df:3f:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:03:01 2025 by rpki-client