Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File: WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier: cjUHtg1WIIgS4+zPFa9TuI/mZ/mH93bOzAGbKsivd+I=
Subject key identifier: 94:AA:49:4A:B8:E2:EE:91:55:AD:57:AC:E5:54:EE:71:90:7C:71:37
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0196BCA47BF0F3EC5E20E370CF97D245AC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number: 153E
Signing time: Sun 11 May 2025 00:00:18 +0000
Manifest this update: Sun 11 May 2025 00:00:18 +0000
Manifest next update: Mon 12 May 2025 00:00:18 +0000
Files and hashes: 1: 0m6Zs8TtQ0noHtuYMEIz7RlZ7FM.roa (hash: SY6YBaXw8ZDaB1rXBNbn1lkSJOuF9LQILLzywGY4QG4=)
2: UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa (hash: c7iWfc2h0xfZuOGmHIC37VdlCYWmVoLvyubnSxmqlrQ=)
3: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: JSRc5jP5HbXPLDkkpnZPyVbcfCmFN6zkMtHY4GC5cs8=)
4: a0heAr5Tdh28am-YWZ2LDUI1i-I.roa (hash: 4Riercylxh3jedSptQ6f+cc+w6P5hj4cNLgG2FwgmtI=)
5: gw7B96UShjsyHnq6pn1ZB8lO3nw.roa (hash: weKIf0S7rCXr80VHrw+niMSn5bWUOaoN4oVmKk0/npM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:7b:f0:f3:ec:5e:20:e3:70:cf:97:d2:45:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: May 11 00:00:18 2025 GMT
Not After : May 12 00:00:18 2025 GMT
Subject: CN=94aa494ab8e2ee9155ad57ace554ee71907c7137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:52:a0:d8:85:56:1c:82:b3:e6:56:ac:b7:
34:f7:39:28:02:a2:31:d1:40:65:62:dd:21:28:08:
7a:84:b5:2d:86:6a:76:80:e7:5d:2e:45:dc:15:54:
1e:a5:28:7b:28:64:c6:ad:c7:88:2d:58:c3:c0:54:
1f:6e:18:52:7e:82:25:f0:72:5e:a4:d7:3d:30:65:
92:81:b0:77:93:72:6e:3c:e3:df:e5:ea:8e:15:28:
59:31:2a:c2:65:4d:b8:5d:ee:b6:95:51:72:5c:33:
a7:36:ca:d1:b3:44:04:c0:3f:3c:56:dd:bc:4b:3f:
95:ee:9e:4d:22:07:e9:6d:51:7b:5e:97:08:65:ab:
49:70:23:37:30:da:4e:22:b9:73:7d:82:3c:e7:48:
1e:86:70:04:7d:61:54:73:d8:68:40:9b:4d:20:fa:
97:ee:dc:95:af:cd:b8:f3:cc:44:e5:a5:6c:fe:41:
37:ce:11:e8:d0:f5:71:41:aa:b9:f3:a7:c5:44:bf:
92:b6:bd:72:5b:6d:76:30:80:03:f3:a3:07:c2:d7:
79:7b:e5:63:47:6c:c8:17:3b:c9:61:9d:08:fb:39:
f3:fd:8e:7a:f8:91:39:02:6b:92:c4:79:37:eb:7f:
6a:65:a8:70:56:58:31:a7:79:3b:13:83:1a:6a:8b:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AA:49:4A:B8:E2:EE:91:55:AD:57:AC:E5:54:EE:71:90:7C:71:37
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:be:c5:fb:2d:39:ec:1b:2f:d7:06:f8:87:c6:a6:a5:c4:
7e:cf:8f:67:ed:a3:08:10:70:11:02:29:9e:98:d3:1f:ad:69:
cb:44:92:7a:c4:fb:24:c5:62:38:49:f2:c0:95:ee:4a:7a:c6:
c0:ee:13:37:c0:0b:a8:af:0f:d1:65:e2:e5:fe:47:68:07:2c:
3a:e3:77:49:9b:81:b5:97:88:a7:1e:85:c5:1d:34:3a:7e:e4:
9f:cb:69:3e:35:a7:6a:32:3e:4b:6b:e2:03:cc:06:30:bb:04:
e0:b8:2b:49:7a:f5:80:4a:08:0b:44:85:34:1c:41:80:f3:d3:
ab:64:fb:96:f5:18:31:ab:d9:52:7e:db:e5:92:4a:f0:40:1d:
93:dc:57:b3:71:ab:98:18:02:8b:92:7c:61:03:f6:1b:6e:7d:
f9:28:63:07:d2:4c:79:65:45:01:0d:29:52:63:c2:70:00:63:
96:42:2f:b2:c4:9c:34:1d:59:d6:48:5f:3b:9f:89:ba:87:ad:
3e:3c:57:a3:70:fb:81:fd:67:46:f6:5c:14:ee:a4:36:5a:d2:
f5:f7:25:b0:4e:2d:bf:76:8e:48:fb:12:53:94:a4:f3:e0:a4:
da:f6:9c:7e:2c:24:7b:d1:7d:af:5d:c5:a2:f4:41:50:71:49:
17:b7:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:35:37 2025 by rpki-client