Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: z+aqT9kg4wmQAVv7lXgkE08EloL9kdSEDvo2ixJoopA=
Subject key identifier: EA:8B:02:95:C0:E5:FE:7C:D0:F2:21:69:91:12:9C:33:7E:41:77:B1
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 0196C45E5DC1A27EA47F1018C3EF94AEA618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 57
Signing time: Mon 12 May 2025 12:00:40 +0000
Manifest this update: Mon 12 May 2025 12:00:40 +0000
Manifest next update: Tue 13 May 2025 12:00:40 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: Qf+FAsHDeSDgq/zva74hubJT4Dd0MmmLNM9bvOxc1pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:5d:c1:a2:7e:a4:7f:10:18:c3:ef:94:ae:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: May 12 12:00:40 2025 GMT
Not After : May 13 12:00:40 2025 GMT
Subject: CN=ea8b0295c0e5fe7cd0f2216991129c337e4177b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:b1:a5:e9:95:03:c3:ad:5f:1b:86:0d:8e:
7d:0e:98:d8:aa:e7:89:99:4d:48:94:00:d7:5f:36:
e3:20:9f:92:bb:ef:d7:aa:d2:08:2f:c9:bf:78:4b:
f1:73:b3:d6:ff:1d:97:d2:84:c4:a5:6d:bf:cf:bc:
9a:8a:cd:21:90:c3:e0:5d:32:4a:68:73:f3:db:b4:
30:c5:9e:19:d4:f6:60:62:9d:0b:d7:e2:7a:5c:ce:
84:32:8e:06:c4:51:65:85:bb:81:dc:a5:ad:78:7d:
33:52:d7:34:75:2a:54:a3:f1:63:f3:d0:ae:c6:dd:
00:8b:38:1b:e5:b0:ad:48:d2:ba:6e:f9:99:82:85:
23:aa:a4:4b:b5:f2:d1:2a:ad:16:30:2a:16:43:a3:
20:15:24:a0:14:c8:44:33:6a:79:06:56:95:0a:7f:
5e:73:d3:74:c8:88:8f:e3:60:b2:65:e5:b7:80:bd:
f1:fb:4d:15:d2:7e:45:d2:ef:ec:ad:8c:c1:0e:01:
6a:0b:c9:32:dd:54:19:e7:2c:0d:91:0a:0e:54:9d:
67:65:db:a8:a9:12:29:c5:87:d9:83:77:c7:e8:9b:
5d:a9:28:36:c4:80:4d:c9:c6:dd:24:76:3b:2f:42:
b2:78:71:e2:17:1b:65:57:dd:12:45:19:ef:4f:7b:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:02:95:C0:E5:FE:7C:D0:F2:21:69:91:12:9C:33:7E:41:77:B1
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:64:45:2d:f5:07:18:de:70:c1:cb:2f:a1:27:ba:a1:46:63:
3d:70:a1:2c:52:a8:b9:f2:3b:3c:eb:04:85:b4:37:69:18:78:
d0:10:33:91:c4:09:5d:e0:be:14:2e:23:08:7b:a4:39:b5:c0:
0e:08:8a:a4:76:00:4a:4d:5d:e6:4b:56:c9:bb:6e:0c:9a:54:
70:81:e0:77:40:89:1a:2a:62:05:8d:ea:cf:e5:92:31:75:f4:
71:b0:91:93:ff:f2:bd:09:eb:35:7c:03:e9:88:f3:8d:48:0e:
b3:ad:40:6d:f5:a4:98:3a:0d:d4:2c:47:bf:83:6b:07:5d:43:
8b:dd:9f:86:d9:00:b6:fa:74:4e:f2:02:86:dd:33:2d:d3:50:
70:23:12:79:cf:71:8a:1a:47:98:27:41:4c:71:a9:23:47:ce:
c8:bb:fe:79:09:28:8f:66:6b:1e:c0:1e:2b:7e:2f:d0:61:e8:
0a:89:3f:b9:23:e2:5f:dc:d8:ba:06:98:61:56:12:4a:14:0c:
0a:5c:78:a5:9b:9f:75:78:18:76:4e:f5:cf:a3:0a:3b:5d:94:
6e:56:87:9a:f9:39:4b:6a:ee:2a:9b:5c:8e:fe:1c:63:d4:e5:
26:b9:2a:0d:70:d9:8e:f9:d3:35:84:d5:6b:29:53:5a:7a:08:
0f:d9:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:47:05 2025 by rpki-client