Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier: xo1UJXJJLQB8kQNzN8RkIkRHjDz+yBS0Lg80gHes3OA=
Subject key identifier: 84:D8:2B:EC:57:81:15:E2:1D:83:6F:A5:F0:D6:49:E8:04:61:BD:38
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial: 0196C15D9BF90D21E08698FC77030EB9B11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 22:00:59 +0000
Manifest this update: Sun 11 May 2025 22:00:59 +0000
Manifest next update: Mon 12 May 2025 22:00:59 +0000
Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=)
2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: tV/x2Jsz8/6fdSxsYJ55yS+W7AYsT3pk2c0zlUwW+FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:9b:f9:0d:21:e0:86:98:fc:77:03:0e:b9:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Validity
Not Before: May 11 22:00:59 2025 GMT
Not After : May 12 22:00:59 2025 GMT
Subject: CN=84d82bec578115e21d836fa5f0d649e80461bd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:ac:fe:98:31:5a:9c:2f:68:3a:67:fc:f8:
5d:ec:28:d6:36:52:00:1b:09:47:f5:c9:7c:24:d7:
f0:72:fc:15:43:21:c4:41:7d:e6:f9:54:ea:ac:4b:
53:3c:c2:fe:4f:80:b8:47:96:d0:cb:43:56:01:e3:
2e:d5:cf:80:22:59:0b:99:c1:e4:43:c7:70:b6:92:
6c:61:f9:b1:47:e3:53:34:f5:f7:58:47:58:f1:65:
ef:f2:73:55:dc:68:97:e9:88:86:aa:3d:e7:e1:a1:
f1:0f:ff:48:ca:c7:bb:f7:80:6d:91:fa:1f:e8:3c:
7e:2d:eb:49:d8:dd:bc:79:3c:2e:9d:52:52:95:21:
5a:78:ba:ca:8e:84:b0:aa:06:bc:70:a6:93:1b:f8:
ae:81:25:d3:ac:1a:55:0e:d4:06:93:36:24:c5:8a:
31:60:c4:75:e2:bd:bf:4f:21:59:a0:bb:04:51:ba:
46:8d:cf:bf:a0:9e:65:23:a3:0f:51:4f:9c:4f:9a:
68:09:d1:6c:ed:bb:9a:8f:32:0b:c8:9b:df:aa:1a:
d6:5b:9e:91:e3:ee:af:89:4c:92:58:94:78:2c:1d:
d9:72:ac:a4:70:f1:6d:b2:0d:e8:18:e4:e3:14:64:
01:12:57:4f:8f:36:0a:99:b6:70:5c:ea:49:cd:83:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D8:2B:EC:57:81:15:E2:1D:83:6F:A5:F0:D6:49:E8:04:61:BD:38
X509v3 Authority Key Identifier:
keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:64:88:c7:03:ec:0e:6b:3f:3d:ca:51:8f:03:95:94:ea:54:
fb:d7:70:4c:a4:76:33:9f:ca:9e:e8:e5:67:21:65:50:7c:2c:
6c:4b:cb:ec:29:a0:c5:0b:5e:97:3a:57:eb:7d:d0:5c:28:d5:
b9:4c:eb:1e:25:17:c0:63:1f:d9:11:a8:bc:1a:00:f4:ab:07:
65:42:87:8f:d5:15:7b:db:1d:97:b9:ae:d0:29:6c:41:01:c9:
21:40:ea:6a:d4:32:dc:8d:34:b3:2d:03:ab:94:09:4f:c5:e8:
0a:4d:66:a4:ca:4d:3d:74:a3:8f:41:fd:2b:ae:44:80:0f:df:
9d:71:07:e5:d9:fe:97:2b:03:98:7d:88:69:5c:43:d9:b7:a5:
d3:14:f3:9c:52:f8:e7:00:7d:da:b6:92:27:49:97:1d:d9:e3:
b0:38:c3:71:e0:4c:2b:bb:a5:ef:1b:02:82:a5:f9:06:7d:cf:
46:c4:b3:3d:8d:64:53:9a:9a:93:79:65:8f:9c:2e:da:f6:e9:
9b:41:ac:41:fa:f9:72:36:9d:c7:92:a1:69:49:87:8c:77:18:
87:67:6b:4a:aa:6a:79:ca:1a:27:fc:27:36:a2:ec:51:cc:0b:
85:4a:e8:c7:93:90:49:00:3e:22:ee:b6:11:d7:59:cc:54:56:
2e:c6:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:34:41 2025 by rpki-client