Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: uPnToGMa4PFTJ8qPb+1Hf44bq2fmA2cqplDUFuKHQ0s=
Subject key identifier: 28:96:4B:88:42:BE:15:EF:39:7C:6C:69:2F:2C:A4:FA:B7:4F:29:B9
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 019655009E387CF5802A67A23A0180A20307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 21:00:25 +0000
Manifest this update: Sun 20 Apr 2025 21:00:25 +0000
Manifest next update: Mon 21 Apr 2025 21:00:25 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: I1Qh7jKGILk200maKrL1Ek42uyK6OcILoL1VKC41msU=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:9e:38:7c:f5:80:2a:67:a2:3a:01:80:a2:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Apr 20 21:00:25 2025 GMT
Not After : Apr 21 21:00:25 2025 GMT
Subject: CN=28964b8842be15ef397c6c692f2ca4fab74f29b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:2f:27:31:fe:1c:da:90:80:f3:18:e3:b4:
ae:cb:dc:8e:c7:74:24:ef:d5:99:99:fe:8c:17:ef:
21:8e:b9:58:34:1b:4e:71:4e:50:2f:c8:3c:c5:41:
5a:e6:18:1a:d0:01:c3:4a:cd:d3:ae:55:7e:3d:4e:
e6:82:05:24:63:89:07:13:cb:dd:3a:f4:6f:da:ad:
e4:21:1d:4c:b4:fc:7d:c8:5f:5e:48:f1:95:e9:54:
52:b3:09:e1:ca:40:37:3e:bb:7d:28:d3:0c:77:4c:
61:6e:a1:e8:0d:b8:26:03:2d:b6:39:72:c3:0f:a3:
22:d0:25:db:fe:3f:8c:71:26:96:e9:1c:dc:65:67:
19:b5:09:36:0c:40:e3:25:46:25:7b:31:fd:9e:17:
84:da:3d:83:b6:3b:3b:c4:f8:a7:f6:d7:e5:0f:67:
5c:d5:d2:72:c5:68:53:21:f1:89:b7:25:80:a3:dd:
94:f2:06:7e:5f:1d:67:60:4f:59:b5:10:73:bc:c4:
76:f9:06:60:d5:9b:77:23:5f:cc:7f:b3:11:0d:53:
3b:4c:90:41:e2:9c:29:f7:e7:41:b5:e9:74:f6:b1:
98:38:c8:87:0d:27:44:e3:36:54:c7:3d:75:7f:39:
a5:ef:a3:6d:db:f7:fe:e3:4a:d1:1e:6f:aa:d8:cb:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:4B:88:42:BE:15:EF:39:7C:6C:69:2F:2C:A4:FA:B7:4F:29:B9
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:07:a9:eb:26:31:ed:a3:d2:6a:f4:7f:c7:91:c4:41:6f:59:
e2:87:4e:e5:d4:ee:12:78:59:e6:78:f8:9f:69:ce:be:c4:e7:
51:94:7e:23:66:40:04:29:8d:7b:1b:98:2b:29:33:bc:24:aa:
f3:bc:ce:fb:38:89:e4:57:a7:5d:b4:80:82:81:dc:75:6c:08:
f3:1d:7f:c8:25:63:ad:f5:f7:c8:0a:4b:57:74:f3:cd:56:d4:
50:53:1a:7b:96:d9:d7:a8:32:c5:95:9d:d5:e9:01:73:51:0e:
71:74:ef:6c:81:a0:69:ed:60:41:f2:c6:12:5f:54:b7:a8:c0:
29:21:7d:4b:76:46:42:5d:63:3e:2b:49:46:2d:de:3d:0a:e8:
70:4c:2f:ae:31:be:87:78:3b:fa:1d:79:3f:52:0c:34:18:a2:
4a:a2:20:d3:2a:84:f2:c2:fd:97:2e:33:6a:68:36:b0:a0:fc:
bd:1f:d3:02:b1:2b:24:c4:e7:f4:0e:40:39:ee:2e:1e:9a:0b:
8e:53:86:50:e6:f1:41:91:cf:b0:2a:35:6b:0b:a1:6c:0a:a2:
01:03:a1:67:26:b2:bb:c1:5e:8e:82:c1:b7:41:2b:9e:7e:52:
05:87:c3:70:98:88:85:90:6b:d2:77:e3:b2:f7:1b:68:2b:8b:
ee:d2:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:15 2025 by rpki-client