Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File: WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier: iEf5F4PLpkOeImk5BVEsl+8Vl5IKhDP6Coz7A3jI6a0=
Subject key identifier: DA:01:BC:00:EF:15:18:08:16:DC:09:CF:C5:F3:20:D0:16:5C:12:6C
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 01965726D3E8F177969AAB35640CF3A94E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 07:01:24 +0000
Manifest this update: Mon 21 Apr 2025 07:01:24 +0000
Manifest next update: Tue 22 Apr 2025 07:01:24 +0000
Files and hashes: 1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: 9DtGVd65G1roVXwdUEcIA6MieNl7DNXDbZt6/4w1pMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:d3:e8:f1:77:96:9a:ab:35:64:0c:f3:a9:4e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Apr 21 07:01:24 2025 GMT
Not After : Apr 22 07:01:24 2025 GMT
Subject: CN=da01bc00ef15180816dc09cfc5f320d0165c126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:e4:d8:21:32:34:21:a4:52:2a:7f:d4:fa:
8c:43:89:75:90:9d:ba:ee:b9:f6:1b:3e:f8:75:bd:
ad:b2:11:77:7a:1c:8c:b4:5e:92:24:db:11:08:65:
ac:f3:f0:f4:b3:3d:cf:39:08:7d:cf:2f:a6:ed:9a:
a5:5a:79:08:c1:6a:ca:ac:60:7b:0d:e0:6f:92:4c:
a7:34:f3:8e:eb:48:39:85:4a:dc:7e:c8:fb:54:85:
dc:6d:26:95:83:0f:a5:97:df:7f:2e:ca:f2:f5:d7:
89:7d:06:d6:ba:a0:63:ac:c4:6a:64:43:db:f0:83:
f7:19:74:ff:d4:c6:c3:ba:c0:fe:99:04:32:02:df:
29:63:d9:7c:7c:db:18:8e:22:ee:5f:ff:6b:00:1f:
0b:27:c5:92:3c:05:fb:41:e5:fe:3f:ef:b9:12:55:
e3:a6:91:35:23:1e:56:14:76:16:5f:e2:ff:dc:2f:
40:61:9d:e3:f1:d4:16:9f:70:a4:a8:8c:47:6b:e3:
cf:73:e6:93:fd:0c:28:90:72:9a:6e:8b:e0:67:7c:
59:51:bf:e3:3f:c3:cb:5f:68:23:02:e9:3f:4f:53:
e0:1e:fc:3c:e7:43:2e:ae:b2:90:58:49:0f:eb:e9:
f3:14:54:9b:37:9f:da:73:05:7a:40:2e:fe:fb:9b:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:01:BC:00:EF:15:18:08:16:DC:09:CF:C5:F3:20:D0:16:5C:12:6C
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ea:f0:fd:c7:19:25:09:3f:31:b1:08:7b:c8:0e:87:f0:55:
93:79:b1:6e:cc:fa:ff:49:4b:38:18:f0:a6:fe:6a:28:2d:7c:
3f:9e:e6:e5:a6:5a:47:21:1a:6f:39:96:d8:03:71:06:19:9f:
4e:6a:b0:09:72:e3:7a:0d:04:f0:0a:12:38:12:37:60:55:af:
79:51:59:93:fb:b3:e4:a8:a0:eb:4a:e9:33:9a:7e:6d:77:73:
1d:92:6c:37:e7:74:82:cc:37:9d:9a:68:58:d2:3c:01:3b:5b:
fb:ca:54:a7:1a:f6:b4:ec:f0:c7:03:c5:50:6b:c8:e1:1c:f5:
2c:b7:78:47:6e:26:30:02:af:06:fd:6e:85:6b:e7:f1:c1:91:
f9:d6:47:e1:20:53:06:65:4a:6a:5d:57:b3:9e:64:21:e1:57:
12:4f:eb:b0:d5:5a:b3:cb:84:54:3c:8e:68:bb:51:6f:dc:04:
b7:64:80:cc:6a:8d:b4:ed:12:b9:87:40:0d:de:4f:b1:49:95:
cc:8b:a0:15:a1:91:21:9b:b8:04:48:5d:54:e2:9a:5e:80:84:
5a:ac:56:7d:7d:6f:52:f1:78:8d:53:28:ef:c9:01:45:af:7b:
46:bd:5a:d7:95:c9:f8:b9:f1:00:f8:8b:ff:7d:ee:9b:24:52:
eb:ad:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:45 2025 by rpki-client