Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier: 4SEvWSkBeWfPvmI4MC8dSbit4mFyl3Uwzgdlw0Idbk8=
Subject key identifier: BA:FF:DE:82:3C:FC:99:DF:35:B0:F2:A2:BA:37:0C:C7:03:82:49:84
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial: 0196C34C0B96561E6B8B4230CCAD5FFFEF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 07:01:02 +0000
Manifest this update: Mon 12 May 2025 07:01:02 +0000
Manifest next update: Tue 13 May 2025 07:01:02 +0000
Files and hashes: 1: CMFtvIRrP8F50u4CVRtzzHXRYto.roa (hash: zBitZQVL6CHlOMMwjKpEh8Pxjt6+cJBsedg4te+yLPA=)
2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: DO5BEIgeonceJURLJgQfBU1x238a9wBOKt+BocHLYZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:0b:96:56:1e:6b:8b:42:30:cc:ad:5f:ff:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Validity
Not Before: May 12 07:01:02 2025 GMT
Not After : May 13 07:01:02 2025 GMT
Subject: CN=baffde823cfc99df35b0f2a2ba370cc703824984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:8a:08:2d:24:52:ed:43:43:13:1b:a5:d4:
59:de:4b:1b:fe:94:dc:bb:a7:42:4f:95:cd:54:b8:
5a:fd:ac:4a:0c:a0:e4:69:72:16:af:33:37:76:c1:
da:b8:2d:ba:b7:cb:f3:34:8f:62:5e:c7:cc:19:64:
57:5a:4c:ca:de:76:d5:12:f5:86:cc:1c:46:af:e9:
4e:a4:b9:54:f4:4b:0c:5c:59:2b:e4:f7:71:a6:50:
d1:21:05:e3:ad:9c:5f:86:75:c2:40:76:41:67:52:
21:f8:1d:ad:8a:d9:23:3c:56:02:3e:55:29:f6:6f:
e9:a6:7e:fa:70:6e:ec:2b:17:5c:89:51:64:93:d7:
07:bc:19:61:5c:a7:5f:ab:6c:31:02:b2:eb:6d:28:
1a:3b:54:a4:51:26:84:d2:93:5e:40:0c:ab:16:29:
86:cc:1f:fe:9d:8e:a2:67:9d:c1:0a:57:5f:52:ac:
b1:7c:cd:44:fe:b5:36:64:2b:66:fa:03:5f:96:d2:
9f:96:ae:2d:03:35:ac:4a:3d:0a:6d:da:1c:0e:e6:
38:03:36:59:01:c9:76:3d:f5:ed:24:5c:73:87:28:
47:1f:e2:98:0f:55:82:ef:ea:4f:04:b2:7c:05:c1:
8a:14:53:16:ce:82:12:a4:2e:bf:1c:30:ba:7f:d2:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:DE:82:3C:FC:99:DF:35:B0:F2:A2:BA:37:0C:C7:03:82:49:84
X509v3 Authority Key Identifier:
keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:36:5a:81:95:2d:a2:03:ed:a6:5e:db:d6:02:cb:e2:e7:7e:
e9:65:ec:78:73:f8:75:9a:32:01:9a:c1:b0:25:c2:83:bd:ec:
42:b2:40:07:20:f4:21:4c:76:c0:aa:e9:59:7d:6c:bb:9d:59:
39:9a:c8:cb:e3:bd:6d:dd:1b:71:1f:1d:a7:f0:c3:67:30:94:
40:5b:82:23:c4:fb:0e:95:6a:68:a3:b7:0e:0f:58:ee:16:fd:
aa:74:84:33:15:be:1d:5b:0e:18:d5:be:0c:fe:96:2a:08:cd:
02:9c:d0:16:d6:fb:a6:bb:7b:60:73:52:fa:11:be:fe:08:63:
15:33:d0:4d:e1:0c:1b:ba:db:1c:31:9e:66:7f:32:59:2e:1c:
04:04:13:af:0f:52:c2:d5:28:b8:1d:f8:6a:b1:f0:f0:7f:11:
d4:c2:23:55:ec:36:09:bd:41:d3:c4:f4:ba:0f:dd:26:71:69:
0c:f8:78:92:1d:ab:1c:66:e4:bc:9b:f0:ff:76:b9:af:43:5b:
ac:c7:11:36:16:db:18:b2:8b:bc:f6:f5:2e:e0:b3:00:2c:88:
bb:96:4c:d7:19:a3:4b:e5:3f:75:05:f8:c1:0e:7b:34:f4:b7:
61:83:1f:27:f2:22:53:35:32:55:47:4e:8a:56:e7:8f:37:15:
4d:c3:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:36:56 2025 by rpki-client