Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: RPt/SpxD5H1PlOSS5jzALP0gtFdmf/ExxbE7nVsV8sI=
Subject key identifier: 85:85:ED:5E:CE:5F:EB:00:88:CC:32:BB:14:AD:F1:67:AB:5F:4D:53
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 0196BE255B44220B1BDC2F6D65B53AEB438A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 1079
Signing time: Sun 11 May 2025 07:00:41 +0000
Manifest this update: Sun 11 May 2025 07:00:41 +0000
Manifest next update: Mon 12 May 2025 07:00:41 +0000
Files and hashes: 1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: yqisVDmJaCqkyH9xKW3zc/d1qAKiqKGFMlVQzuPvKqs=)
3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:5b:44:22:0b:1b:dc:2f:6d:65:b5:3a:eb:43:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: May 11 07:00:41 2025 GMT
Not After : May 12 07:00:41 2025 GMT
Subject: CN=8585ed5ece5feb0088cc32bb14adf167ab5f4d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:6a:4a:a2:95:e7:90:af:ad:b4:a0:9a:34:
17:d1:18:61:a6:67:00:1f:dc:f0:52:68:c4:8b:be:
66:eb:b6:51:2a:0d:40:fc:7c:4f:f1:00:fb:fc:1c:
61:cf:72:07:be:36:95:a3:43:76:09:b9:d3:56:2f:
23:63:1a:4a:a4:2a:45:5f:bf:95:8b:cb:9e:60:ac:
3e:7b:bf:f2:73:3a:ca:10:6f:35:d5:f5:4d:fb:f5:
ab:96:53:46:41:21:c5:e3:e0:e0:60:5a:85:20:3b:
eb:63:67:df:d8:8f:ab:7b:36:32:b8:d5:c5:03:9b:
d7:60:81:ba:74:4c:02:19:42:ae:3b:db:83:6a:32:
ff:a5:5e:54:14:7c:f6:f8:c9:e5:91:41:4c:54:4b:
bd:45:5f:66:e7:e0:09:80:f4:66:fa:b7:db:a1:b9:
bf:a0:a1:12:3f:25:30:ee:31:97:42:5a:e0:f4:b6:
f1:04:7f:b9:0a:79:d0:0a:1f:11:7c:f1:80:80:2c:
50:f6:54:c1:53:16:4b:d1:6a:44:f5:2a:0f:54:56:
6e:f3:0c:cc:13:10:d0:e4:12:12:25:b8:33:4f:26:
39:61:6f:4f:89:79:14:ee:2b:c3:11:d9:96:c2:84:
d4:9b:f1:e2:ae:45:35:9b:d1:d0:fb:f0:4e:06:b5:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:ED:5E:CE:5F:EB:00:88:CC:32:BB:14:AD:F1:67:AB:5F:4D:53
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b3:61:39:16:7b:b7:34:87:41:9c:cd:39:85:ec:e9:03:7c:
4f:fa:f8:bb:68:61:98:fb:c1:38:36:fa:50:41:9a:47:56:1f:
d8:89:54:3b:4e:98:15:7c:18:13:f1:5b:e5:20:58:03:64:ce:
0b:85:a0:ea:0d:65:60:97:80:07:40:00:5e:9a:b5:5e:e2:11:
53:8d:15:6f:0d:6b:1a:7d:43:be:70:a0:52:32:36:88:f8:e6:
c8:6f:79:7d:03:33:2f:30:d2:2e:34:aa:4a:a2:d8:f6:9f:f1:
f0:93:c7:a9:ce:72:16:e8:0f:f2:79:ce:16:f2:7d:e3:bf:d7:
f7:a6:a9:d3:7c:15:82:b6:a9:18:0f:6d:02:03:24:16:ba:83:
78:ab:d3:fe:7e:7d:a9:a5:71:5b:78:35:ec:41:e0:32:7d:3f:
31:7d:0e:a0:81:f0:c3:fd:14:d0:db:45:04:ea:b1:a3:e5:4d:
23:93:f0:95:34:95:24:c2:68:95:a5:cd:28:78:5a:b2:c8:3f:
fc:36:8c:50:07:54:2b:23:8f:a1:df:6d:42:4d:5d:c2:e3:e4:
1f:8e:8b:b3:0d:83:f9:aa:68:37:ed:a3:3a:75:80:57:55:02:
14:a3:99:2e:57:8f:22:65:81:2b:5f:90:1b:1f:71:55:2d:f7:
68:9d:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:25:59 2025 by rpki-client