Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: D5nQKVYy/PCV8DlxB03GwcJuU/sz41V+QU+bvs9nakQ=
Subject key identifier: 05:1F:90:0D:9F:61:CE:FB:B8:26:88:73:01:66:F3:74:F5:7B:1D:C8
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 0196C683D893F18E7CA6B31A78C970F272C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 22:00:51 +0000
Manifest this update: Mon 12 May 2025 22:00:51 +0000
Manifest next update: Tue 13 May 2025 22:00:51 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: aw6p6bJ9cABJAOopp3wHBkHKHmOMhuYUQvsMmdtop34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:d8:93:f1:8e:7c:a6:b3:1a:78:c9:70:f2:72:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: May 12 22:00:51 2025 GMT
Not After : May 13 22:00:51 2025 GMT
Subject: CN=051f900d9f61cefbb82688730166f374f57b1dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:05:80:1e:d0:70:81:62:79:e6:65:b5:a5:
34:03:a3:c7:2c:98:82:40:ea:26:15:34:1b:83:b0:
bb:a2:a0:29:b4:3c:0f:a4:f1:5a:97:f7:5a:31:0d:
5f:e3:74:11:9a:89:29:45:33:7e:a0:c2:f9:f8:5e:
63:56:98:d8:4a:ae:1f:ab:9c:21:40:7a:64:27:fd:
1c:09:ff:03:7c:8d:4b:e8:19:2a:1f:ab:99:c6:5f:
b9:bc:a7:13:82:c2:03:f1:ab:39:e0:7d:3d:93:25:
06:54:5b:b9:1e:8e:76:25:a3:1e:8d:8b:2e:c6:57:
fa:b4:a3:b4:cf:57:7a:db:18:7e:88:4c:e3:0e:0e:
8e:94:91:8a:d0:d5:8d:99:07:c8:07:d0:40:1f:9f:
76:75:ac:41:bb:89:3a:27:a9:99:a5:5d:d2:5d:a0:
5b:23:c7:01:3d:fd:a2:e2:28:a3:39:79:80:53:6f:
2b:44:d5:f2:d5:8c:27:51:67:b2:e1:70:9e:e6:02:
f8:48:08:43:92:6a:c9:74:27:e2:85:25:6c:80:19:
bc:86:18:c6:55:9b:f7:65:c1:eb:45:cd:54:5f:2a:
19:26:59:b6:c0:d7:34:c2:dc:e6:27:92:8f:ee:30:
14:bc:42:9c:6c:69:56:10:de:e6:60:b5:5f:31:84:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:90:0D:9F:61:CE:FB:B8:26:88:73:01:66:F3:74:F5:7B:1D:C8
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:17:1c:13:0a:01:bc:5a:94:01:23:64:bc:4b:b5:ca:73:4e:
7d:c1:36:7b:bd:f7:9b:d5:20:a1:6d:30:cb:d0:c2:45:41:8f:
b1:bf:b5:13:e1:09:ad:8e:1c:fd:5a:f1:de:d8:49:ab:b5:a6:
33:21:09:38:ab:8d:cf:d8:19:85:7d:48:73:3a:7d:35:ee:7d:
15:0c:5a:ca:99:e6:49:67:63:a9:ba:b4:83:f7:63:f8:37:60:
ac:e9:72:03:3f:93:e5:83:61:7f:08:06:60:89:c4:6f:14:8c:
29:37:81:26:d0:df:88:dc:ed:bd:88:7c:ef:80:51:71:29:4c:
2b:82:a2:8a:d3:e5:78:57:1d:39:88:21:b6:68:14:22:47:b4:
cf:4a:a2:49:c9:93:af:2c:55:f7:bf:32:6d:7f:a2:2d:d9:ea:
ff:66:7d:38:cc:04:24:bf:0e:49:aa:87:23:c0:a4:e3:ab:b6:
11:53:ae:c4:04:e9:16:70:ff:5d:83:a4:e8:8e:72:19:69:2e:
58:24:75:d1:03:f4:6e:5e:98:8b:07:bc:ef:52:21:ea:19:a3:
2e:dc:44:29:c5:9f:76:c2:9a:32:59:8e:e0:d3:c0:4d:3b:e3:
dc:40:dd:75:2b:c8:7d:a8:b5:18:8e:b0:86:cd:e9:b9:b1:3c:
b4:9e:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:22:03 2025 by rpki-client