Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: 8BYepQPQykV5rpb+P59RkX0LRyUmrYP92jadCmlLYZE=
Subject key identifier: EC:AD:BC:7B:B2:74:AE:8C:B7:04:19:75:35:61:D9:22:FD:E8:1A:A2
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 0196B52232712FB61433092271C4C13E134F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 13:00:39 +0000
Manifest this update: Fri 09 May 2025 13:00:39 +0000
Manifest next update: Sat 10 May 2025 13:00:39 +0000
Files and hashes: 1: V-65NroNLvpJ9Twbo3fHxbLWAEE.roa (hash: NtuVubfew3le+olU13mvFJqg5qy010/3pkiRpLBMMVI=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: bqJ7hFdw1fW62ayGlpi2kKT6ZBDD7/Z+U8ybHPbdzB0=)
3: k0eS8GbpTFpaVPi3K9_CZDFOaPU.roa (hash: Ej4uiaS/aPM289NUT10w3nroNfgE/+kc/Uq0qTQREqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:32:71:2f:b6:14:33:09:22:71:c4:c1:3e:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: May 9 13:00:39 2025 GMT
Not After : May 10 13:00:39 2025 GMT
Subject: CN=ecadbc7bb274ae8cb70419753561d922fde81aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:81:85:5e:b1:43:55:42:a0:a8:01:45:6a:
5a:7c:10:0b:6b:34:9c:63:06:13:b5:f0:d4:c7:e1:
31:cd:d0:1c:3c:5a:0f:d3:70:77:37:47:ea:46:09:
82:66:c0:4c:5f:6a:13:3a:70:7f:10:b6:f6:7b:eb:
a3:ae:c3:62:08:f2:d9:29:e7:ce:96:cf:0c:5f:42:
92:0c:26:42:5f:88:4a:de:37:41:49:63:31:ed:49:
b8:4c:cf:b3:d8:fc:79:c5:8c:4f:4a:4b:99:a4:76:
0d:c7:0a:96:2a:4e:97:78:c8:d4:8b:0a:e2:a3:cc:
b1:8b:d5:16:6d:de:61:76:50:9d:09:87:29:a5:4a:
17:a4:e3:cc:41:6a:37:63:95:c1:66:b2:74:38:23:
1e:5d:4a:7c:8d:f4:aa:73:39:88:cf:61:e6:a9:8f:
9a:4d:1e:ea:ac:36:d2:8b:68:52:61:04:91:2f:1a:
aa:70:49:28:12:61:6b:f5:92:1f:04:9f:92:d2:70:
58:d7:c9:72:be:bf:3d:02:31:34:d4:a1:3a:a5:0a:
bf:12:07:da:a7:c9:aa:fc:e3:56:f4:c7:66:92:1b:
49:56:ce:b7:fa:01:ad:fe:34:14:cd:32:be:36:06:
91:32:70:9d:c1:07:c0:5c:a8:76:75:bb:86:ee:09:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AD:BC:7B:B2:74:AE:8C:B7:04:19:75:35:61:D9:22:FD:E8:1A:A2
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:8d:d4:43:1e:2f:5a:1b:65:1e:9c:50:a2:db:20:07:5c:
bb:33:0e:aa:b0:df:57:2c:61:b7:d3:a5:88:f6:55:f5:2f:ba:
34:18:d6:ed:e0:43:02:75:e0:b1:09:47:10:65:15:c4:d5:95:
9f:b4:5b:c6:db:1b:74:92:ba:32:a3:ad:f6:00:48:88:97:bf:
44:dc:f2:a2:c4:61:a8:bd:72:27:9b:24:43:b6:0b:58:40:ca:
9b:b7:ff:78:ac:b1:24:c2:2b:5e:dd:68:d0:e2:58:f7:6e:57:
41:a9:18:0c:37:15:52:63:48:42:c3:af:c9:f3:01:28:2a:08:
f3:69:31:8d:f7:20:4b:80:d0:41:d3:6f:aa:e8:40:54:a6:17:
07:73:0b:32:49:5d:c3:67:80:90:c7:81:54:90:62:51:23:0b:
c3:e7:08:57:6d:51:7e:e2:5f:ab:f9:4c:f8:48:98:bc:92:2e:
1f:61:66:1d:ca:93:95:c2:bf:54:4d:b5:11:5b:7a:fb:b7:d1:
e3:2d:d5:f2:b0:52:0d:11:0c:8b:22:4b:34:11:8d:0e:ef:3f:
42:ba:fb:97:0d:c2:49:dd:7a:ed:28:78:d9:54:5d:06:10:7f:
9e:94:0b:98:2e:f4:51:69:49:0c:66:ce:53:3c:c3:fe:7e:b6:
bd:7f:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:10:44 2025 by rpki-client