Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File: wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier: 0QkZ3zPb/mwkEOHnCeJ7ovcUDVYfkQV4P8ISnCs2CFI=
Subject key identifier: 12:B4:DB:84:D2:70:B0:57:55:44:03:32:88:A6:D6:3B:15:BC:8E:04
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer: /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial: 0196BE258910CB579F50EE1B6F54B86EEE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 07:00:53 +0000
Manifest this update: Sun 11 May 2025 07:00:53 +0000
Manifest next update: Mon 12 May 2025 07:00:53 +0000
Files and hashes: 1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=)
2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: Lt8ryoDR1nZKKOrS9vj1vHm/RYcW8njxIcAo9W+6d9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:89:10:cb:57:9f:50:ee:1b:6f:54:b8:6e:ee:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Validity
Not Before: May 11 07:00:53 2025 GMT
Not After : May 12 07:00:53 2025 GMT
Subject: CN=12b4db84d270b0575544033288a6d63b15bc8e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:df:f2:d3:d5:ff:99:45:61:ac:ec:c5:67:
80:6e:55:17:ec:75:4b:6a:c9:e4:b4:39:b9:4f:49:
1b:97:10:14:6f:73:12:93:d6:2e:d3:d8:3a:1b:47:
55:1e:9a:3d:5f:98:5c:e6:16:46:6c:b6:f8:aa:d3:
3a:bc:1c:d4:dd:83:7b:0a:7e:08:a8:e7:e9:3d:92:
17:b1:79:27:37:64:55:97:55:81:0e:f6:96:6a:fe:
a3:f4:b4:92:60:ca:1b:1d:84:e8:88:75:b1:c0:58:
0d:19:33:d2:26:f8:eb:46:29:60:c9:23:5a:e6:88:
06:92:99:00:c5:fd:35:c2:96:9f:61:57:c6:a5:e8:
8d:cb:2e:b2:7d:ce:93:5f:95:27:eb:f7:2b:c8:2f:
be:75:2d:6a:55:bf:ca:ae:b0:69:a8:4d:b7:e5:a8:
d0:e1:0b:1e:98:22:62:32:fb:fc:00:90:54:ba:7c:
1f:89:27:28:56:9f:27:6b:83:fa:85:64:ed:f8:54:
07:8e:d9:ed:10:0f:95:6f:ff:2c:f1:5a:d6:b0:fb:
1b:71:81:3d:46:66:0d:8c:82:48:f3:76:a2:1b:65:
e8:63:78:38:92:dc:45:43:46:2c:22:b5:f5:95:72:
30:7e:85:0a:e5:41:30:fb:5e:84:ef:f8:30:f3:a6:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:DB:84:D2:70:B0:57:55:44:03:32:88:A6:D6:3B:15:BC:8E:04
X509v3 Authority Key Identifier:
keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5f:1b:d8:e9:bd:63:89:e4:00:a4:ff:ac:ea:c5:a9:a1:e6:
cf:ba:41:8c:d3:9f:38:b6:6d:21:5e:56:e6:21:b3:0d:8e:ba:
91:41:85:d9:48:bb:05:83:5f:c7:8c:cf:12:ec:da:f2:64:ff:
2f:69:e8:6d:2d:fc:99:97:19:aa:e2:b6:f9:b9:e9:15:ba:20:
65:17:ff:e1:83:ed:ed:77:c4:58:3b:87:94:20:7d:dd:7a:0f:
4f:1d:cd:54:b4:9b:e9:91:3c:89:90:59:e2:2a:04:a9:93:be:
0c:27:4c:e5:ca:91:9a:5e:40:d0:f8:de:8b:5d:ea:4b:9e:52:
5f:7c:c5:e7:5f:fb:04:85:ff:93:4a:b2:14:a6:03:cd:fb:58:
4c:dd:cb:b9:f6:00:1e:07:97:7d:52:33:99:94:fa:93:6a:b9:
5d:ac:40:bf:ac:42:9c:3a:12:8a:1c:cb:0d:49:ef:49:0c:20:
6b:b1:ca:3c:a0:14:29:f6:77:8c:fb:10:4b:fd:2e:ae:48:4a:
5d:2e:12:97:ad:8c:0f:27:3c:74:b8:58:8c:da:44:71:ae:d7:
60:95:2d:39:1d:7b:35:64:68:6e:da:64:bd:37:80:59:10:26:
b4:e1:41:38:d4:ee:84:47:df:34:93:37:d9:79:4a:70:b8:87:
bb:33:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:57:00 2025 by rpki-client