Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: g8Dj3LgMEHn+EwDOnN1DxG6jRQu9uB0qfzy2WDRpVYg=
Subject key identifier: B3:B2:DF:96:70:40:57:1B:A5:3D:DD:C7:E4:A7:DB:1D:00:96:5B:C2
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 0196BD4984E0329119984BC99884D0817CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: 01CD
Signing time: Sun 11 May 2025 03:00:34 +0000
Manifest this update: Sun 11 May 2025 03:00:34 +0000
Manifest next update: Mon 12 May 2025 03:00:34 +0000
Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: jAtSc28mUN+myyDqbfrl9pYI5JFjHcsPoRkhqkJ1TYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:84:e0:32:91:19:98:4b:c9:98:84:d0:81:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: May 11 03:00:34 2025 GMT
Not After : May 12 03:00:34 2025 GMT
Subject: CN=b3b2df967040571ba53dddc7e4a7db1d00965bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:2b:a4:46:9a:af:9c:6a:07:8c:f3:7a:f4:
3c:37:14:c4:8f:80:af:45:c6:64:0e:ed:1e:e7:7d:
2a:31:06:e4:57:c1:19:bb:6d:d9:41:0f:24:89:05:
46:73:b4:45:9a:b6:88:27:ba:15:3a:bb:9e:a7:3a:
d6:52:80:8a:4f:30:1d:21:06:c5:c1:27:24:62:ed:
6f:74:45:16:c1:b2:17:c7:40:4d:9c:a7:b7:ae:56:
42:33:99:0c:42:31:2a:a7:00:70:ec:c8:af:49:a0:
28:59:1d:bc:2e:4d:ae:ab:0e:9f:e1:0e:2d:4f:92:
c7:32:3a:0d:3b:4c:92:e6:df:df:3a:53:b1:14:ae:
19:94:d9:45:55:0b:d6:4e:9b:19:fb:7f:5b:c9:f9:
e8:b8:38:47:e1:1e:38:bf:8b:2b:2f:be:cf:62:d4:
13:d6:5f:a7:1f:97:4b:e1:76:78:b6:a7:a0:07:b7:
0a:b6:9c:c0:b7:35:90:94:32:32:a6:f8:3b:be:b8:
da:cf:b9:25:0e:7e:29:1e:5b:aa:2d:ad:39:2d:f4:
6a:b1:9d:6e:6c:e8:85:1a:95:38:bf:1d:1d:23:a2:
e9:f8:80:08:2b:32:f1:fc:6b:33:5d:18:6c:cf:f6:
19:98:6d:64:6a:de:af:f8:d8:02:d8:40:87:11:18:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B2:DF:96:70:40:57:1B:A5:3D:DD:C7:E4:A7:DB:1D:00:96:5B:C2
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:86:8f:b1:d0:6f:44:48:69:6f:cd:7d:47:93:c9:de:70:
07:16:f0:0b:e6:28:5a:c8:cc:9a:a6:1f:f8:72:3e:f3:5b:57:
03:71:d2:69:19:32:d5:aa:04:4b:3b:e8:51:7e:c8:7a:78:3c:
c4:51:3a:96:8e:11:97:3c:61:c6:c3:3f:71:80:9c:2c:74:0c:
9e:7a:0c:08:1b:0c:e7:f5:a5:bf:19:fe:63:e8:a8:c4:b5:03:
b9:59:27:74:e7:69:59:d7:7c:8c:50:1e:4b:06:9a:07:12:df:
09:01:bb:86:d1:90:e6:b6:c6:94:ae:3f:7e:34:be:b7:49:61:
f0:fc:78:7e:11:1f:5f:25:f0:fa:33:8d:5f:b4:b7:22:1b:00:
c9:c6:9d:e5:7b:8b:09:76:04:09:54:eb:63:f2:f9:57:21:21:
ec:f4:b1:4b:c4:92:1b:cd:e7:f1:97:f8:bd:30:6d:8c:ba:af:
c2:66:82:70:09:b3:7c:36:87:d4:8d:da:3f:42:1d:5d:e1:2a:
4a:98:51:7a:a6:0d:06:04:9c:d1:f4:ea:66:e9:1d:2e:ae:ec:
c3:39:77:4e:be:fe:41:6f:d2:75:9f:2e:77:97:9f:b6:51:90:
33:ed:1e:59:75:b6:d6:1e:9d:ff:01:61:71:42:62:b2:d7:da:
7e:23:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:48:42 2025 by rpki-client