Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: JpFsCYK8fSqIheNl2hpYFkr9H7d40xKHkI5X2HjIZzo=
Subject key identifier: 6D:26:A0:12:16:D3:3D:5C:EA:D1:CF:52:37:1E:03:FA:F4:38:16:A2
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 019658DD41FD11A466745823832B0671B4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: 0199
Signing time: Mon 21 Apr 2025 15:00:17 +0000
Manifest this update: Mon 21 Apr 2025 15:00:17 +0000
Manifest next update: Tue 22 Apr 2025 15:00:17 +0000
Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: bvW8LQZjBoSCB6/iZnIRDid8jW8CwcBj8A/VNzczBhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:41:fd:11:a4:66:74:58:23:83:2b:06:71:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Apr 21 15:00:17 2025 GMT
Not After : Apr 22 15:00:17 2025 GMT
Subject: CN=6d26a01216d33d5cead1cf52371e03faf43816a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:74:d9:80:7d:7f:b8:30:f2:b8:4b:28:04:
54:a7:85:6a:ab:1d:63:4d:93:07:71:cf:ed:6b:1b:
26:2d:47:76:8d:88:07:db:c9:69:4e:7f:89:26:05:
e2:6b:5b:f6:1a:cf:70:11:04:e9:f0:e2:d7:9a:7f:
5c:78:52:43:c6:52:62:83:44:32:55:9c:88:6e:bb:
bd:85:cb:78:49:9e:0b:6a:bd:a8:81:b3:34:3a:fe:
61:4b:f9:6b:2f:9d:69:3c:ce:69:c6:c3:62:1a:ab:
b4:80:23:f6:d8:b8:68:47:04:7f:42:41:51:cb:23:
a3:8b:ac:11:04:8b:31:6b:75:10:c7:3e:9e:ee:e3:
77:22:e7:d5:9d:5f:b3:c2:9e:26:0e:ff:ed:b2:d3:
7e:6e:ab:e1:47:49:33:d0:e9:1a:48:ee:43:43:79:
9e:20:48:a0:41:24:ec:19:ba:b1:9f:1e:fd:99:f9:
05:6e:a7:fc:88:45:be:70:dd:38:83:9d:b3:ed:ac:
52:08:45:94:5e:47:d4:b1:48:e5:b1:47:a0:be:f0:
59:66:52:83:89:90:23:e3:e6:cd:d6:5e:26:5a:01:
ff:f7:cc:50:44:46:98:cd:3c:40:90:32:c6:7c:c8:
2a:51:86:a8:be:32:1b:e6:34:c2:87:94:be:4c:19:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:26:A0:12:16:D3:3D:5C:EA:D1:CF:52:37:1E:03:FA:F4:38:16:A2
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9f:cf:29:36:df:48:71:29:32:cb:d0:69:14:6e:a9:be:47:
d4:da:7f:1b:62:ad:a6:f8:9a:a3:96:97:75:90:45:3e:7d:59:
00:07:68:d1:db:f5:27:47:56:a7:c2:40:b9:62:99:f0:4f:a9:
90:7d:ab:78:ae:3f:92:00:62:d8:73:5e:2d:0f:48:a9:f2:84:
8b:a2:b0:d0:bd:e2:53:98:0a:7c:bc:04:43:da:71:02:11:17:
90:a5:46:71:2d:e8:08:1b:4e:28:ac:13:f7:c7:41:e1:c7:13:
1a:85:b5:2e:ba:7a:60:4f:d1:a9:e3:79:81:f5:02:a5:f4:f8:
17:82:69:0f:64:1f:65:2d:ac:38:f6:e1:35:4c:16:4f:68:fb:
15:df:10:96:3a:79:ae:d7:2c:de:2b:ef:c8:ba:c5:ef:f5:ee:
a0:b7:d7:3a:21:28:98:1c:c8:0f:5a:5a:20:08:31:a1:48:26:
9f:9c:5a:b6:b7:86:12:2b:19:22:72:15:ab:8a:d3:7a:fd:af:
8d:9c:4a:00:7f:95:8c:24:af:90:50:9d:36:05:65:b1:59:e8:
f7:e5:8b:2d:ec:42:a8:78:49:6f:93:d8:66:17:1f:e7:aa:a7:
33:76:32:34:08:70:c5:43:8c:0c:17:6d:18:97:d3:f7:e2:d6:
1b:4f:23:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:05:07 2025 by rpki-client