Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: tEmhCr6vLXRpkhQJG60q3rijgWy7SepxCTHGpAFhl1w=
Subject key identifier: 3F:80:87:8E:D2:4B:B2:99:DB:90:5A:C6:8A:04:8B:CC:80:CF:9B:86
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 0196A42E8B60CCCB98F83BF765803E6B0813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 06:00:35 +0000
Manifest this update: Tue 06 May 2025 06:00:35 +0000
Manifest next update: Wed 07 May 2025 06:00:35 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: nYkIFNGo5iUfqL3chMqYMQHetdLOsOFlH55o/CITMck=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:8b:60:cc:cb:98:f8:3b:f7:65:80:3e:6b:08:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: May 6 06:00:35 2025 GMT
Not After : May 7 06:00:35 2025 GMT
Subject: CN=3f80878ed24bb299db905ac68a048bcc80cf9b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:a9:b9:b8:9d:c7:4f:13:31:8d:f6:b3:d0:
9e:30:0b:bd:e6:a1:2a:82:82:b6:dc:5b:1c:82:f9:
55:ed:c5:1a:c6:9b:be:ff:ec:70:2f:74:23:3d:a5:
e2:36:b7:1e:30:f1:dd:8e:c6:4b:88:f2:69:ec:6e:
6c:02:d2:17:93:ef:1b:ea:a5:3b:ba:ed:e5:a5:cd:
3f:36:92:5a:ad:a5:44:5e:d2:fc:d1:0c:72:1a:7b:
01:4a:70:13:eb:c7:9d:14:05:9a:21:9c:90:be:08:
7e:91:7a:b4:a4:7a:37:4f:32:3c:b4:49:43:22:f3:
f2:5c:6c:3c:dc:9c:38:dc:89:08:6d:ea:c0:49:aa:
2f:73:47:4f:76:71:cb:60:3f:d0:1d:ba:b8:93:d4:
2b:92:0f:a2:09:44:8f:05:33:6e:82:ae:16:ac:c7:
40:b8:f7:f0:e0:3f:6c:04:b6:31:dc:01:7b:4f:60:
4b:ea:b5:f5:df:94:1a:2a:d2:6d:f3:46:db:e3:cc:
0f:ef:e9:5f:fb:33:bc:9e:45:e5:15:d7:b1:1d:26:
b6:5b:98:02:54:e2:f2:98:e1:1c:3b:8d:ac:45:af:
e7:f3:f3:06:d6:a3:5c:f5:9b:53:c6:d5:e0:55:45:
4a:2e:b9:ca:6b:a4:9c:f8:b0:73:2e:da:7f:d9:8b:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:80:87:8E:D2:4B:B2:99:DB:90:5A:C6:8A:04:8B:CC:80:CF:9B:86
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:22:6e:79:c8:cc:0b:57:e1:92:4b:99:d1:4a:aa:87:f5:29:
7e:73:c4:3a:ec:e2:c5:1e:3e:2e:1d:33:eb:2d:c4:e1:cf:c9:
41:15:c2:8a:c7:2f:4e:68:be:12:f5:bc:61:7e:a9:0a:a6:f2:
d3:c1:8e:cf:24:a9:f1:63:38:af:6c:43:c9:ba:3c:ff:2c:6a:
dc:6c:7a:b8:f4:6d:ca:04:18:2e:1f:6a:6e:2c:25:b8:2c:94:
0b:fe:0b:31:75:b6:30:f1:6a:2f:38:a2:94:0e:df:cb:3b:9e:
b6:83:a6:88:58:a7:e3:19:fc:4f:3c:bc:dc:c2:b5:72:ce:ef:
30:e8:08:27:0a:72:3b:2d:6b:d7:53:c6:b2:db:32:b8:62:af:
cf:5d:02:3d:8b:26:0b:6a:d4:b1:b5:b4:f8:58:1b:9c:0c:3d:
34:12:7d:ee:8d:be:c5:a8:68:ac:57:7a:88:ca:f3:c1:73:4f:
ba:08:10:76:c8:b1:90:52:74:09:f0:ee:44:f2:fb:06:b3:52:
82:cb:8c:bc:4b:42:c3:75:7e:74:20:97:66:3c:b3:6f:a9:a1:
66:e2:1e:dc:98:6c:df:30:2d:89:6d:32:ae:4e:4a:d0:82:65:
c4:10:ae:aa:5a:c8:3f:7c:00:ef:3c:71:e9:d3:e3:56:3c:41:
fa:6c:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:31:10 2025 by rpki-client