Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: /uqFoNGl23KuT8ahvzq4f5f4oJpZRz0XzZOYuebReLM=
Subject key identifier: 4D:56:91:DC:2C:7F:A2:FF:41:C9:4B:9B:92:8E:02:B9:CF:10:F7:2C
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 0196AAD583A991A07666DD69DF5C00AC1573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 1022
Signing time: Wed 07 May 2025 13:00:41 +0000
Manifest this update: Wed 07 May 2025 13:00:41 +0000
Manifest next update: Thu 08 May 2025 13:00:41 +0000
Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: Mg69fgzUDcFbiukb8GrJmxPqLFv0M3rMcInGJ09JA9s=)
2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:83:a9:91:a0:76:66:dd:69:df:5c:00:ac:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: May 7 13:00:41 2025 GMT
Not After : May 8 13:00:41 2025 GMT
Subject: CN=4d5691dc2c7fa2ff41c94b9b928e02b9cf10f72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:81:34:b1:21:83:2c:0b:8a:62:2d:45:a3:
59:91:65:71:a2:c7:be:ce:b1:bb:6c:c0:ed:89:94:
4f:d1:51:f0:2a:9b:b3:69:4b:ad:9a:5b:0f:9e:98:
b1:f9:b9:bc:0d:b2:48:eb:79:8a:e1:00:62:e0:aa:
61:65:68:dc:28:c9:e0:89:e3:fc:22:2b:41:f0:8f:
95:13:05:d6:72:07:4d:62:f6:10:9b:ba:c8:49:0f:
ba:81:00:c8:86:62:9c:79:ce:15:4b:ce:63:fc:ef:
58:4f:37:b9:6d:8f:d1:13:42:9d:df:86:a6:82:d2:
07:59:2a:bf:64:05:ef:56:ba:be:f4:0a:56:1f:3b:
06:fd:11:9f:a0:52:a6:58:52:3a:f9:82:76:2c:85:
2a:a7:57:ad:e0:20:68:4e:ed:8a:fb:4b:0d:a0:69:
85:a6:ac:31:7a:4d:1b:f3:0d:bc:59:83:44:be:99:
95:30:c0:9a:bb:4a:d1:36:b6:5a:32:75:2f:d1:27:
e5:80:20:90:56:0c:c8:a0:42:c6:0a:dc:3d:35:f0:
c7:a2:4a:72:21:ff:f3:df:4f:7f:1a:8f:c3:61:43:
0b:c4:b5:a7:0a:b3:97:58:13:9d:df:d1:f6:0b:25:
0c:07:74:7e:c9:72:e9:c9:30:ee:d3:3a:50:0f:b5:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:56:91:DC:2C:7F:A2:FF:41:C9:4B:9B:92:8E:02:B9:CF:10:F7:2C
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:56:27:ec:e0:6d:f4:b7:23:11:75:6a:6c:15:94:a2:88:
05:3f:7e:3d:ad:a1:81:ae:43:7f:5d:a1:1d:f2:da:2d:72:5c:
8e:b0:89:ba:57:e9:f7:83:1b:96:00:cf:19:19:3b:f4:b6:77:
0b:4b:df:4b:08:1a:c9:e5:61:4a:b8:a5:76:7c:1a:80:fa:ad:
b2:77:0f:28:2f:5e:6b:af:36:a7:a9:6e:00:8d:79:b9:65:f0:
a5:09:0d:57:b1:96:49:12:18:79:4c:73:fa:9b:f3:1e:16:2f:
d0:b3:fc:e4:62:01:13:be:5b:6e:df:88:75:ea:85:9e:d5:38:
68:69:cb:d0:54:7a:fc:28:91:14:9f:8e:50:24:f5:cd:4b:a9:
2b:28:18:89:d7:71:58:2e:d0:b8:b7:c7:f0:64:24:07:8f:44:
7c:0c:54:5c:21:52:83:bb:78:fc:b5:36:e2:fc:01:42:a5:ec:
f2:c2:01:04:6e:b0:d2:71:9b:c0:5c:ed:b7:85:a7:e9:32:4b:
cb:58:a9:36:a1:c6:f3:32:28:17:30:0a:00:e5:ca:c2:a7:55:
13:dc:ae:8c:59:ef:00:5c:db:c2:35:7d:8a:d5:25:7c:6c:69:
29:e3:36:2b:41:fc:c7:46:11:c6:87:22:7c:03:26:90:94:27:
81:39:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:05:09 2025 by rpki-client