Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: AABxIqwyUU8ga8t5EbWuvY2jNErTcfAO6JszE+CwCTk=
Subject key identifier: 1B:57:B4:8F:9C:AA:C5:2A:BB:00:12:4E:CC:45:82:B7:1D:16:5B:ED
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 0196BA11A8AC05F8B5AAE4DD60FFEDD69FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 0FBA
Signing time: Sat 10 May 2025 12:00:41 +0000
Manifest this update: Sat 10 May 2025 12:00:41 +0000
Manifest next update: Sun 11 May 2025 12:00:41 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: sbjVCosEHU9Ia7sE8457cqjoM+nyQEdgg1hrJ3b9w2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:a8:ac:05:f8:b5:aa:e4:dd:60:ff:ed:d6:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: May 10 12:00:41 2025 GMT
Not After : May 11 12:00:41 2025 GMT
Subject: CN=1b57b48f9caac52abb00124ecc4582b71d165bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:27:61:04:26:bc:d2:6a:13:fc:76:7e:39:
1b:1f:44:c9:05:81:f8:6e:5b:a3:ec:af:dd:26:f0:
d4:34:ea:5a:ed:13:43:9d:dc:b5:4d:7e:af:f8:4f:
ed:88:36:02:4b:7a:b4:a7:8a:0b:41:83:5a:82:7a:
d1:d7:96:7b:ea:23:f0:5f:39:50:a0:76:d2:01:01:
74:ae:21:61:1c:22:0c:cd:6e:f3:29:10:ad:b1:be:
44:e3:09:ea:8d:88:f4:8e:bc:5b:89:5c:a6:68:cd:
fe:6c:6d:3a:50:f9:ec:d0:ea:3c:e4:f2:dd:55:d4:
fc:05:0f:1b:e3:72:09:8b:db:e5:75:25:64:6c:35:
81:58:2a:93:2f:18:2e:5a:9c:04:5d:c6:81:46:3f:
a6:3c:e1:64:f2:58:8c:a1:94:80:da:5f:ba:4d:fc:
69:e0:9c:84:e9:29:b7:72:31:04:68:37:1d:06:0f:
60:c5:bd:82:b9:c8:c4:77:1e:58:8b:b9:3a:fc:20:
cf:e4:65:2d:37:31:d6:6f:77:31:0d:bc:ef:76:f3:
e6:78:15:9b:96:cf:7b:ae:73:97:e9:c4:2b:39:5a:
e6:bc:41:2d:3d:21:7a:24:97:02:d8:7c:16:c2:29:
8f:99:6b:6b:39:cb:4f:55:8d:11:b6:16:3c:f5:c2:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:B4:8F:9C:AA:C5:2A:BB:00:12:4E:CC:45:82:B7:1D:16:5B:ED
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cb:d0:cb:fc:f2:63:95:63:d3:cd:a3:1c:90:05:42:c5:6e:
74:64:9c:41:88:4d:8a:d9:51:bd:6d:8a:d3:82:f2:d9:93:3d:
7d:cf:44:a8:68:67:9e:f1:38:0e:b3:7a:01:78:dd:34:d5:41:
25:68:c7:a0:24:ab:5a:b7:f6:9a:ce:1e:ed:35:fd:a1:e5:49:
55:af:b9:5e:d8:5f:4a:6c:f9:ae:fc:90:07:f4:ab:60:b8:9a:
21:81:e2:31:de:b7:2a:f5:d7:45:05:75:5b:9c:88:65:57:d4:
06:65:2b:74:be:49:00:03:19:6c:c2:ba:c6:cf:a3:af:95:77:
be:96:43:95:46:ab:e7:9f:e5:33:60:e7:dc:04:00:44:a1:90:
77:ff:b8:eb:f6:08:f5:b2:87:be:fd:fb:e0:64:a8:38:97:12:
fb:c1:de:bf:96:12:ab:b3:1b:56:78:bf:9f:d4:84:76:be:5c:
1c:aa:29:c8:90:ab:bd:b1:7c:31:36:ad:e7:e1:c9:b4:0e:52:
21:2f:90:5e:05:6f:5f:cd:2b:b4:e4:6f:c6:d1:88:a4:e8:7c:
5a:f4:68:3e:56:e4:07:2b:4c:41:6b:52:5d:99:32:43:da:1f:
9c:39:d9:aa:21:c4:89:f6:4f:85:9b:cb:49:24:cd:5a:b9:c1:
ea:70:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:42:16 2025 by rpki-client