Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: RhQ+j73T4Ycm0nKsMAhVKvQdHSKHUCJ5v1ulOSsTfGY=
Subject key identifier: 67:79:19:35:21:55:5D:17:A6:CD:5B:CA:49:99:BB:8D:E8:96:9D:90
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 0196A01AE45A6A54D593D117271F29467E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 11:00:39 +0000
Manifest this update: Mon 05 May 2025 11:00:39 +0000
Manifest next update: Tue 06 May 2025 11:00:39 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: 6RWOFLiy4uUyk35viOo9wvRijJVlgUukcxDmPJNtTu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:e4:5a:6a:54:d5:93:d1:17:27:1f:29:46:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: May 5 11:00:39 2025 GMT
Not After : May 6 11:00:39 2025 GMT
Subject: CN=6779193521555d17a6cd5bca4999bb8de8969d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:e7:16:a2:26:45:76:1e:36:28:c5:34:6f:
6d:d3:e7:fe:ad:e3:91:6b:00:ff:16:e6:bc:55:94:
ea:14:e6:d7:15:71:ec:93:03:c6:1e:9e:d1:be:7f:
f3:53:3a:d5:bd:a7:0d:d1:dd:b4:98:94:a6:9c:b6:
ba:d0:24:22:81:d1:74:f4:8a:3a:89:2f:78:d6:61:
6d:18:46:42:d4:6e:c0:8e:40:2f:00:9f:3b:9b:31:
f6:7d:83:83:fd:15:1c:05:cd:6f:6a:7a:47:32:cb:
9a:fa:3d:3c:f1:35:8b:30:f6:a1:91:e3:7b:5c:58:
a6:d9:82:cc:85:6d:01:52:fb:24:5b:91:47:dd:c6:
de:fe:ec:76:b3:2b:1e:c3:8c:c0:08:8e:b5:bb:51:
73:ae:0f:b4:c1:10:d0:24:0f:60:5a:f7:4d:43:d6:
08:64:97:ae:41:06:9d:5a:7d:88:7c:4f:c8:f5:a2:
e8:a5:89:13:c8:18:04:12:ce:64:ff:64:38:a8:5d:
c9:da:02:89:5b:96:57:2d:73:e6:f6:c0:11:45:a8:
b6:1c:18:b7:d0:2b:2e:72:30:fd:f7:c1:04:32:ef:
76:47:5d:14:f1:b6:95:4b:b0:20:57:23:27:f9:51:
9e:18:90:c8:bc:72:b4:17:f7:82:fb:d9:79:1d:d8:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:19:35:21:55:5D:17:A6:CD:5B:CA:49:99:BB:8D:E8:96:9D:90
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:46:61:40:1e:94:16:10:85:8f:78:cc:6c:cd:3f:76:4d:65:
96:f2:93:6c:04:ee:1b:a2:23:9c:0a:88:97:92:9b:cc:c9:22:
d2:69:73:60:db:6d:27:d1:68:4f:76:04:d8:d2:c6:8c:ec:50:
a1:dc:11:a4:d6:8c:dd:26:2e:57:2b:28:12:65:1c:66:58:9b:
4f:50:08:fd:3c:06:cf:bb:ec:b6:31:7b:91:a9:3a:35:0b:36:
e5:22:d7:43:11:c3:5a:e6:f0:c2:41:12:8c:f3:ad:9c:67:a4:
ab:fd:37:fe:70:bc:c1:66:66:6b:de:84:27:00:49:f8:56:3e:
f2:a8:39:90:e2:76:3d:77:96:bb:30:58:bc:97:dc:9f:6a:5a:
86:ce:e9:88:7d:b2:31:8e:0f:ad:9e:a5:5a:8b:89:e5:28:20:
b6:d5:d3:b3:b0:3e:df:e0:e2:d9:61:ad:c7:f0:5b:f0:39:ff:
2b:39:a4:01:f8:a5:fb:c1:32:bd:71:a3:1c:53:c0:7a:92:0e:
79:d9:31:55:ab:38:c6:c3:72:d3:85:0e:6c:37:e0:9e:17:bb:
1b:ab:de:8f:61:c9:ff:e5:57:d2:91:b6:b5:08:3a:96:b6:de:
84:d9:2f:f5:43:06:ca:e8:34:ac:f0:48:d3:ea:5c:e6:0e:1b:
d7:d5:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:11 2025 by rpki-client