Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: X6UAeGcPYm0g/k3PTKrXy4l3urgMMx53k5lJWYXtQAM=
Subject key identifier: 7F:60:15:E6:89:4E:46:9E:E9:05:5B:B6:9E:C2:E0:D0:BD:48:92:0E
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 0196CA96FDBD5C761AE6FE645ABB8CDB2A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 14A4
Signing time: Tue 13 May 2025 17:00:15 +0000
Manifest this update: Tue 13 May 2025 17:00:15 +0000
Manifest next update: Wed 14 May 2025 17:00:15 +0000
Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: ZfzZn9E4q0V+XNQO9fUROnwY1ngFTmd/PyH6slut5WM=)
2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:96:fd:bd:5c:76:1a:e6:fe:64:5a:bb:8c:db:2a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: May 13 17:00:15 2025 GMT
Not After : May 14 17:00:15 2025 GMT
Subject: CN=7f6015e6894e469ee9055bb69ec2e0d0bd48920e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:dc:93:db:07:80:be:4e:25:d9:76:3e:27:
b5:2b:33:95:c6:89:09:30:a6:42:72:32:e3:c0:e4:
34:ad:ab:d4:17:dd:ce:91:c9:6a:26:c5:43:80:9d:
53:37:31:96:2b:53:af:ee:f0:c6:5e:82:3c:43:0b:
55:8a:56:1e:ab:b5:40:55:09:fc:ad:d9:c9:91:a4:
b4:f2:d2:69:01:e8:1a:9e:07:23:ca:00:d9:98:6d:
29:c6:dd:57:0f:20:b0:5b:6d:27:e9:c5:ae:c5:a1:
89:4a:42:a0:35:47:61:20:c0:15:14:ed:cc:87:e0:
f6:f1:60:6e:c9:7b:85:73:cf:f7:07:2f:39:2f:f2:
5c:13:1d:a1:f6:40:7f:66:24:df:90:51:3d:5f:4c:
f1:45:d9:89:34:62:cc:78:8f:3c:18:0e:5b:af:f3:
ff:7d:c9:66:54:1a:56:a2:5b:72:36:68:93:4e:41:
77:cf:46:c2:af:3c:b6:82:43:5a:6b:ff:05:24:ac:
52:8f:be:09:c9:59:c8:f3:e2:ae:8e:64:29:5c:d0:
52:66:83:bc:75:f2:8c:84:c5:88:11:e3:7e:a1:61:
6d:85:34:4c:f7:47:4f:94:a0:3d:74:7b:11:58:c2:
c6:03:6e:a8:65:51:75:c3:dd:36:f6:5b:96:d7:47:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:15:E6:89:4E:46:9E:E9:05:5B:B6:9E:C2:E0:D0:BD:48:92:0E
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0a:4b:00:83:44:77:2e:be:be:b1:96:72:71:38:9b:9c:9a:
29:4c:2c:2f:0f:47:db:8a:bc:6e:f7:a5:57:e2:78:db:22:9b:
b7:31:cc:f8:54:bd:eb:9b:db:53:ad:11:07:6c:d6:9e:31:a1:
23:8a:ff:87:38:e4:de:8d:ec:df:8f:77:e4:de:e0:6f:df:b7:
ac:48:f1:44:a4:1e:a6:76:15:de:21:36:a0:92:2a:38:d2:28:
8f:d4:a5:e0:a2:ba:25:f5:4d:e3:6f:c7:f8:7b:f8:ac:df:62:
05:d7:a1:e2:d8:f0:40:9d:b6:ea:39:c8:b9:0d:ed:3b:01:13:
31:3f:96:5e:d3:11:66:68:bf:37:9b:14:20:48:4f:cc:9f:ea:
17:55:b8:96:57:ee:c9:a1:24:87:68:32:3b:42:9b:5a:60:6d:
7b:f5:50:21:47:2d:64:74:37:33:53:6c:71:4d:b1:af:90:66:
ca:9f:4a:96:a3:5c:0f:c9:7d:06:e1:1b:9e:20:fe:34:4b:de:
c8:12:47:97:e4:2e:2c:21:65:fc:5a:49:c5:29:12:c4:45:b4:
d7:72:8a:22:0c:84:ae:00:83:1b:43:6d:1b:0e:7e:91:5a:c3:
e2:7a:54:1d:41:6c:91:b8:06:72:5c:b2:85:7d:3e:23:e7:bb:
31:c3:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:38:13 2025 by rpki-client