Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: BV3nbg8QDQqdGoj+Glo/Nw61Ja9Vd64OO0p26bbxFAY=
Subject key identifier: 33:A8:42:87:84:59:23:E2:84:DE:8D:3A:4D:C2:96:28:5F:A3:77:44
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 0196CD61D69A6AD17EB96B28ABFB1D8F496D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 06:01:03 +0000
Manifest this update: Wed 14 May 2025 06:01:03 +0000
Manifest next update: Thu 15 May 2025 06:01:03 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: 8qXNSnR9dI9hZvvalzCjtf8/tFounpXa0e8cBTGMkW8=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:d6:9a:6a:d1:7e:b9:6b:28:ab:fb:1d:8f:49:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: May 14 06:01:03 2025 GMT
Not After : May 15 06:01:03 2025 GMT
Subject: CN=33a84287845923e284de8d3a4dc296285fa37744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:2b:cc:f7:f8:94:6b:d4:02:92:2f:69:d9:
0f:91:af:65:32:65:39:e0:7e:dd:c4:1e:13:1c:68:
cd:4b:39:22:b0:1f:d4:00:3c:cf:1c:1a:43:6d:a9:
f4:1b:8c:2f:cc:ce:4f:e2:87:52:de:02:11:03:1b:
bf:d0:ee:44:dc:18:77:8a:f0:17:53:8d:f0:3a:bf:
17:72:6a:7f:e3:3b:e4:ae:b2:c5:3e:cf:4c:85:8f:
99:6c:68:cc:c6:b9:63:d0:7e:1e:44:01:74:29:bf:
56:e7:9e:fb:41:be:1d:8b:c6:bf:e6:13:39:f9:32:
fa:5e:11:8d:47:71:a5:27:70:33:02:7c:fc:ae:f6:
15:67:91:ce:46:ca:04:c1:2f:d6:2b:13:2b:7b:da:
32:2c:b1:e6:b1:3f:48:70:02:81:9b:de:bc:4b:67:
89:98:c2:f3:cd:d5:06:0f:43:6e:70:e5:0c:89:70:
2f:d5:4c:f2:ec:ad:3f:f0:a2:1c:2e:6d:a6:9e:02:
79:0e:00:be:c4:1e:64:2f:71:85:e2:2f:c6:aa:ad:
96:be:2e:96:e7:3e:73:65:a3:3d:1e:da:21:e6:98:
c1:2d:21:b6:2c:f8:7e:5b:4c:82:43:2f:0e:b8:92:
cc:6d:38:a2:fa:48:e1:1a:12:10:b7:3e:a3:e8:6a:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A8:42:87:84:59:23:E2:84:DE:8D:3A:4D:C2:96:28:5F:A3:77:44
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8a:ad:35:47:ec:f7:ff:ab:05:8d:a5:d0:be:6f:7e:66:60:
fe:e8:d1:ab:e3:1a:69:75:6f:d2:f7:25:9a:b9:cc:d0:1d:ce:
02:be:b0:df:69:49:86:90:4f:b0:f1:52:c6:9f:7d:d1:a2:7e:
1b:77:56:26:59:cc:9a:64:30:de:7e:61:28:1f:35:7c:ca:ff:
90:93:f7:e6:3e:ad:1b:db:e6:5e:f8:ae:e4:7f:71:81:40:42:
00:02:88:08:d0:13:cc:89:bc:5c:48:cc:2e:72:a8:ee:6f:9b:
db:97:f4:7d:b9:0a:e1:79:ef:55:23:ca:f9:b4:cc:7a:ec:d8:
ed:b6:eb:c5:ac:c5:e5:61:b6:ba:39:2f:72:9e:d1:d9:c1:4a:
cc:71:99:a9:57:e8:5f:7f:3a:98:42:4a:5f:67:3c:84:3c:5f:
16:eb:9f:b8:05:e6:0a:b3:61:89:58:13:88:3f:f0:c3:f1:56:
6b:45:4a:88:27:aa:91:d8:39:2c:01:54:a9:26:62:31:1b:55:
f1:bd:b6:56:e8:ba:3e:f6:b0:e9:7b:87:43:eb:1b:2f:64:f4:
d2:ea:73:33:66:c0:e0:cd:0a:3c:d9:81:15:ad:7c:2e:fc:be:
1d:1c:30:9d:66:73:03:ba:2d:c4:3e:df:90:23:79:17:ec:c8:
7b:48:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:17:34 2025 by rpki-client