Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: NTquQxUtkeFUlYHs31YwfKlzd9hnITyw+HgsFIQEvCY=
Subject key identifier: 03:AC:8D:C0:54:B8:32:55:D8:E5:47:10:11:2D:0D:71:EB:D9:1B:8D
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 0196B47DC73A5CC74F5E02125990C1C53E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 070E
Signing time: Fri 09 May 2025 10:01:03 +0000
Manifest this update: Fri 09 May 2025 10:01:03 +0000
Manifest next update: Sat 10 May 2025 10:01:03 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: UBztzfbrigfFpdgQDH00SdJh0UzYfgVtXcgYp1ex6iI=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:c7:3a:5c:c7:4f:5e:02:12:59:90:c1:c5:3e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: May 9 10:01:03 2025 GMT
Not After : May 10 10:01:03 2025 GMT
Subject: CN=03ac8dc054b83255d8e54710112d0d71ebd91b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:e1:cc:16:32:d1:03:35:dd:40:5d:6c:ab:
0a:2a:4f:00:e1:42:33:8f:64:5a:57:e7:66:6a:6e:
c7:28:8d:d5:2f:24:9a:7a:ef:39:6b:fb:83:3e:61:
56:92:9b:66:f8:a3:b1:0d:cd:d8:f8:c6:be:ee:13:
85:63:38:8a:a9:7b:fe:73:30:c2:da:23:08:04:1a:
20:b0:46:87:77:3f:dc:44:f6:ea:f6:43:c1:6b:d6:
47:cb:3b:ed:e2:df:9f:59:bc:60:3f:9f:b2:ad:b2:
15:52:1b:e0:81:1a:07:a7:04:eb:44:21:d7:66:f5:
6c:b0:7d:17:d5:ab:d0:f8:56:8f:0d:20:aa:2d:e3:
87:ab:8f:40:8e:5a:2b:47:95:2f:14:ce:ac:05:2c:
a6:e0:dc:25:26:e0:06:66:35:db:71:73:dd:c3:e4:
7c:b2:64:c9:ca:69:89:4b:04:08:70:f3:67:27:b6:
fe:53:de:16:8a:3f:e6:41:1f:03:6c:da:69:e5:c8:
99:bc:63:aa:0c:45:f9:55:9d:8f:e1:82:14:0a:e1:
9a:e0:ae:87:3d:d5:6b:70:d9:ac:a1:ab:5f:d5:36:
8f:08:24:f7:db:3f:92:a6:bb:4b:46:c7:6a:41:32:
ce:7d:6c:a2:15:f2:17:97:bc:44:35:57:a0:c2:41:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:8D:C0:54:B8:32:55:D8:E5:47:10:11:2D:0D:71:EB:D9:1B:8D
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:73:83:a9:8f:18:67:51:56:bb:f7:e1:9c:ce:19:d8:59:
4a:42:19:32:54:e4:d4:c5:63:2e:c9:90:fe:b8:dc:8d:e6:d9:
d9:56:7d:d4:c9:48:09:bd:bf:0b:98:0b:31:aa:d4:15:15:76:
48:b7:bd:5d:9c:0b:12:5b:e6:75:22:2b:72:94:20:7d:11:39:
c4:09:a1:ef:23:d8:07:15:fe:df:9a:4a:51:58:6a:68:e7:d1:
e6:ce:db:e4:db:e1:38:4f:a9:2b:d2:27:65:1d:99:46:5f:bc:
12:ee:8f:38:4a:66:ac:58:2d:b4:34:51:ea:c7:c7:18:e9:35:
3e:ea:a6:81:eb:58:27:3c:90:bd:18:22:13:f6:b8:0e:da:54:
e5:c8:db:25:52:5e:28:06:3e:d5:cc:f8:66:76:d9:c0:2d:78:
ab:f8:05:19:55:26:ab:d4:3a:d2:32:e4:e7:74:8a:13:73:46:
b6:f3:e0:ad:00:ff:ea:9e:10:9a:79:b3:ed:b6:56:1b:d0:6c:
b2:05:40:82:02:1f:51:47:17:4c:48:1b:15:38:75:ef:cc:64:
96:12:e8:d6:e7:8e:df:58:ae:df:e8:71:94:68:8c:84:2f:a1:
5d:55:15:8b:12:80:73:8f:7d:38:fa:ad:fc:c3:22:3b:db:ed:
50:b3:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:21:38 2025 by rpki-client