Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: mWsFN46O+RrRPAl2NQoe0sw6/a1ooKiDD9QFhVBy/10=
Subject key identifier: 5D:23:06:6D:50:93:CA:9C:7B:25:24:54:75:F1:D9:38:36:38:D7:BE
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 0196BECA4A413DAF9EB3E096BEF9387E8DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 0F6C
Signing time: Sun 11 May 2025 10:00:50 +0000
Manifest this update: Sun 11 May 2025 10:00:50 +0000
Manifest next update: Mon 12 May 2025 10:00:50 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: XK7Rvm3E64xb610adzog23UoXiHZsYmevFgMzXWvk2k=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:4a:41:3d:af:9e:b3:e0:96:be:f9:38:7e:8d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: May 11 10:00:50 2025 GMT
Not After : May 12 10:00:50 2025 GMT
Subject: CN=5d23066d5093ca9c7b25245475f1d9383638d7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:9a:94:08:15:5f:6b:a2:1e:46:46:f0:b1:
29:ae:a2:8b:33:b9:a0:09:f0:d8:dc:51:74:4c:da:
5e:32:24:8f:d8:f7:e1:3c:14:4b:e6:aa:b9:0a:b5:
50:5e:5c:7b:42:be:cb:14:3e:6c:c4:da:67:40:4e:
c2:9f:62:92:d1:12:7a:d0:f0:05:8f:e0:82:df:69:
01:a8:c0:d3:59:b0:17:ec:80:50:e8:b8:64:24:54:
54:c1:78:07:54:66:38:8a:81:c0:2a:10:8b:83:2b:
51:c2:be:c6:23:9a:d6:65:41:ed:18:9d:4e:d4:5e:
ec:10:ff:26:09:64:4c:9f:e3:ae:fd:4c:e9:d2:fb:
66:c0:82:ae:2f:03:9b:c8:6f:ee:40:21:61:08:8d:
cb:16:be:9f:96:4a:db:38:51:ad:55:f8:c9:14:44:
be:aa:da:4a:87:00:f1:4e:6c:39:72:53:52:72:a2:
c6:8c:97:6a:40:0d:06:27:be:26:08:72:02:c2:a5:
be:50:4a:aa:5e:14:cb:8f:e7:4d:08:c5:63:b1:09:
5a:3a:48:52:01:10:d7:cd:50:b7:dd:c7:70:36:32:
47:12:fc:12:8d:67:3c:06:50:69:76:71:a3:4f:19:
b3:d3:27:aa:e4:e9:cd:e4:a7:ac:5f:47:c9:62:3f:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:06:6D:50:93:CA:9C:7B:25:24:54:75:F1:D9:38:36:38:D7:BE
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:f4:b4:ac:45:45:8f:9e:e3:59:5d:c0:12:d6:78:aa:4e:
4e:4f:0c:3b:8e:35:c5:e0:c7:a8:4d:ea:6d:c4:b0:53:1a:d6:
5a:a1:ea:e1:b2:2f:b0:06:2c:f6:b4:be:5e:4f:c0:86:0b:97:
5f:28:b0:f8:a7:42:01:4b:ec:ce:d0:10:6f:93:cb:9a:a8:ff:
a5:e9:eb:d5:f3:5e:7c:28:1f:a4:4b:50:74:92:a4:48:3f:b1:
00:2c:3f:de:9e:c2:b6:97:2b:dc:f3:a0:c4:1c:3c:81:ea:10:
7a:6c:7e:de:a2:41:33:ce:19:3d:fe:01:42:7c:db:e7:0d:e2:
2d:c2:a8:b7:fe:54:8e:3f:4c:eb:41:fd:88:77:a8:ae:bd:79:
ea:9b:b6:65:51:24:a1:4e:5e:a7:86:15:e3:e7:58:04:08:9f:
81:42:5f:f2:8a:62:a3:a1:f3:bf:5d:f6:a9:8c:d7:b0:4c:10:
0d:36:d0:14:d7:23:2d:8e:5e:b8:bb:5d:08:3a:c8:81:04:99:
6e:fe:0c:b9:2c:03:33:39:74:05:0c:cf:11:75:3d:5a:6e:2b:
4b:d1:fd:32:4a:03:aa:8a:d1:cc:a2:65:01:15:77:e9:13:b6:
66:7f:86:55:b6:5b:5b:57:d4:7e:8b:f5:93:cc:58:46:05:a2:
e7:b6:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:12:42 2025 by rpki-client