Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: PQuSYNeMGyMcOQ3hwQfIoyJ604Utng6+/eiHR/qbs9M=
Subject key identifier: E1:5F:B3:0B:C1:82:0E:D8:4F:F6:3C:2A:82:EF:9B:BB:64:84:2A:9E
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 0196A1D24332A6A0CB34FB49DBBD4627299A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 153F
Signing time: Mon 05 May 2025 19:00:33 +0000
Manifest this update: Mon 05 May 2025 19:00:33 +0000
Manifest next update: Tue 06 May 2025 19:00:33 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: rzhyOk2gyqbKPuOBXQTwihHweTU65vD5aAwriZcRJLg=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:43:32:a6:a0:cb:34:fb:49:db:bd:46:27:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: May 5 19:00:33 2025 GMT
Not After : May 6 19:00:33 2025 GMT
Subject: CN=e15fb30bc1820ed84ff63c2a82ef9bbb64842a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:56:33:bd:70:88:e2:e8:6b:cb:12:5e:33:
d5:79:72:0c:25:d5:1c:d2:85:95:49:0b:d6:3e:31:
1d:38:43:f4:6a:65:1a:da:3c:14:61:27:ad:d6:29:
2e:1a:00:46:dd:3f:50:ff:f6:80:51:0a:5f:41:31:
01:ab:20:31:6e:8f:57:fa:f3:dc:37:f2:d8:c5:27:
6a:cb:d0:83:cd:7a:fb:fa:b6:31:26:6b:56:fc:bd:
fc:c5:6a:bf:ba:e4:c3:f3:fc:6e:92:85:97:a7:65:
a9:4c:d3:2f:01:61:81:f4:46:21:7d:70:9e:f0:2e:
8f:39:92:13:d1:59:c3:29:48:4d:d9:23:04:c2:8c:
c3:64:57:0c:2c:5c:33:df:b0:9c:6d:64:d1:9f:63:
f1:7a:e1:57:95:5a:c2:ea:dc:44:e6:c0:f9:ee:8b:
cf:49:62:0c:3a:e5:97:a4:74:0e:5b:7b:7e:f8:80:
50:00:94:2f:6a:35:f3:f5:39:0e:83:42:aa:8f:81:
d8:95:b6:d0:e9:9e:01:b7:0e:5f:36:2f:70:78:fd:
f8:a7:14:56:eb:f7:42:06:16:f9:00:77:b8:db:a0:
45:83:d5:1f:52:92:c2:4b:96:a5:54:56:02:a8:10:
3e:9f:47:43:a3:be:41:06:0e:8b:9e:5d:59:26:38:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:B3:0B:C1:82:0E:D8:4F:F6:3C:2A:82:EF:9B:BB:64:84:2A:9E
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fe:cd:dd:51:52:4a:d6:33:64:b0:68:dd:bd:9e:a1:c5:ad:
dd:21:cf:f5:5e:75:16:b7:62:33:74:53:25:e4:94:f4:75:c9:
a9:93:11:ce:da:53:c1:3b:93:1b:24:07:3e:26:97:1b:2d:f1:
27:88:5d:3e:36:55:4f:73:9b:4d:0b:0a:82:38:b0:04:41:d7:
7a:34:fe:d4:5d:e4:c4:47:1a:fd:98:9a:9f:9b:c2:28:61:d8:
94:6f:6f:7f:51:a2:24:82:d4:f7:12:76:69:6d:c7:fd:75:93:
94:28:c7:92:97:17:6c:71:6c:27:12:ec:66:6a:d6:73:7e:fa:
50:0a:9b:38:b7:c1:04:66:66:b9:ae:4c:bb:da:2a:c4:8e:f7:
fd:20:b6:b9:23:9a:3e:28:69:1c:2a:f1:92:fd:75:78:2a:c3:
f9:d3:39:c9:29:4a:5e:4e:4e:de:50:30:72:21:7d:e0:8f:09:
8a:c5:16:ba:7e:a5:e8:b8:d9:56:17:f9:21:2c:0e:31:61:c7:
a1:cd:11:f6:ee:98:10:ba:14:ab:43:f7:fc:df:d8:07:b2:79:
d5:57:db:7f:16:ab:3f:95:9e:ed:de:51:80:ea:b3:75:88:bb:
63:79:7c:88:d1:10:9f:41:ed:f6:fa:42:03:2c:dd:94:19:bd:
2c:45:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:57:26 2025 by rpki-client