Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: FRzmUJKXY1XMv+gaRV3Al8Ouk1Cwc0R5Tc1F2Y4Hews=
Subject key identifier: 56:CE:5F:EA:CA:EB:F9:A7:D0:D1:6F:D0:CF:8B:1F:90:42:49:8C:39
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 0196A08962982099A1E61F12AF406F0ADF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 129F
Signing time: Mon 05 May 2025 13:01:20 +0000
Manifest this update: Mon 05 May 2025 13:01:20 +0000
Manifest next update: Tue 06 May 2025 13:01:20 +0000
Files and hashes: 1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: Wm0lSzP5K8/6YdqLgf0TjgtTQXvKRAeiKpCk59+3WCk=)
3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:62:98:20:99:a1:e6:1f:12:af:40:6f:0a:df:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: May 5 13:01:20 2025 GMT
Not After : May 6 13:01:20 2025 GMT
Subject: CN=56ce5feacaebf9a7d0d16fd0cf8b1f9042498c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:45:f9:a6:d9:5d:78:1f:9f:80:48:b2:11:
af:2c:91:2b:a8:e5:a3:f1:05:6c:4c:a1:77:d0:23:
f9:36:62:a1:71:55:f9:8a:54:6c:04:8f:e7:40:84:
c9:ea:ac:09:16:1a:1e:91:2a:ff:1f:c1:28:4e:1f:
9b:45:57:90:09:c1:2f:b8:56:f3:a9:68:5c:17:4e:
47:13:fa:54:a0:e5:fb:c0:3a:fa:45:b5:be:65:39:
11:32:61:22:e5:e3:94:46:bd:23:13:96:06:c1:df:
27:bf:4d:14:31:88:99:2c:90:db:06:fa:fb:c1:b6:
47:da:92:bc:70:69:90:98:33:cf:ae:2e:84:d3:13:
0c:55:f3:59:4d:2b:94:01:01:4e:3b:14:6c:5c:9f:
e1:25:bb:2e:e1:df:4e:20:27:14:24:61:9d:1f:63:
58:52:33:12:1c:32:f4:2a:c5:4c:f4:fd:2e:df:28:
70:96:35:a2:02:bc:07:42:14:ff:2b:b3:53:48:bc:
04:f1:1e:93:8a:7a:6d:e3:f5:01:e7:8c:97:5d:df:
a5:1b:f7:78:68:ba:ae:2e:62:44:00:d5:e5:9d:3b:
9e:d3:87:75:8a:14:68:b6:3e:95:28:e1:23:45:eb:
16:b0:66:3f:c8:06:56:21:48:ee:97:5f:23:d6:24:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:5F:EA:CA:EB:F9:A7:D0:D1:6F:D0:CF:8B:1F:90:42:49:8C:39
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7e:6c:4d:05:98:42:c5:f6:32:cd:c8:21:76:b9:aa:10:70:
a5:37:eb:76:00:a9:b6:c7:f4:8e:48:97:bf:c6:6f:8b:ba:54:
13:de:24:3c:23:b5:d4:9a:c2:c0:10:2f:5f:8d:50:43:e0:0e:
66:ac:63:c5:3b:91:49:bd:85:ce:46:e7:8c:53:b3:36:6a:89:
d7:24:fa:11:f1:72:5f:8f:b6:1b:04:10:83:a4:41:48:05:04:
2b:72:a0:fa:6c:24:cc:3e:89:bd:dd:95:22:03:67:88:9e:37:
d2:01:a2:ac:6d:d5:54:31:22:b1:73:fb:31:6b:dd:60:08:c2:
7e:67:98:01:b2:fa:e5:e3:d2:f9:20:c4:b3:06:3c:ef:31:96:
22:11:85:51:b2:cb:f2:8d:91:c8:5b:fe:f3:6c:1a:4e:9a:f3:
aa:4a:43:76:bd:ee:84:d1:93:46:91:4f:09:9d:da:0a:66:79:
57:24:74:c0:e9:50:c6:b8:94:fd:6c:13:ba:a1:07:e4:7f:f6:
c8:2f:fd:84:83:8b:67:6f:a3:9b:33:ca:a3:62:b7:12:ae:57:
9e:e0:4f:13:fc:86:f1:9f:5a:9c:45:a5:82:da:29:4c:95:20:
72:69:1b:91:36:1b:8a:4c:0a:fe:ce:1e:28:01:58:4f:c7:c7:
37:7a:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:03:16 2025 by rpki-client