Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File: Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier: RbG+hpv93z9tz8Z4ipkEzyjbwLEOcrx/gVaP08/Dclw=
Subject key identifier: E7:B6:DF:84:4E:0F:24:99:B7:7E:B8:CB:8E:77:4C:70:64:CD:49:14
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0196451FD7A0FE44F48AE9CFE134038AE340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number: 08DE
Signing time: Thu 17 Apr 2025 19:00:36 +0000
Manifest this update: Thu 17 Apr 2025 19:00:36 +0000
Manifest next update: Fri 18 Apr 2025 19:00:36 +0000
Files and hashes: 1: 7frYRaPWiUBQtdiw3rIrrhQhjyQ.roa (hash: HXRVWZcU5xbezLat9MNaXuodNGFiZBK+jua9+ZXWRsw=)
2: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: 6IKzBgscPCc4Iq2073o8iokwhYNXLwrDXPD/SaFshcw=)
3: dCxXanqYo2BAfARwyH_-JPoYvgo.roa (hash: v12nw6HCaY7DPyuKw9bgY2SCEviVsH9TJx3km0XK9nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:d7:a0:fe:44:f4:8a:e9:cf:e1:34:03:8a:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Apr 17 19:00:36 2025 GMT
Not After : Apr 18 19:00:36 2025 GMT
Subject: CN=e7b6df844e0f2499b77eb8cb8e774c7064cd4914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:0d:59:39:43:24:0a:da:30:08:6c:ba:fe:
4b:d8:05:45:9e:37:42:25:0c:b2:c9:32:cf:f2:b6:
51:b1:f9:c1:df:de:b9:4f:b6:a4:f0:2e:0a:20:ef:
76:de:c5:b1:98:04:9a:ef:46:a3:19:85:e4:2d:60:
96:7b:65:45:8b:f7:ac:7d:df:bb:58:a9:53:dc:7c:
ff:26:bb:40:92:47:78:90:34:28:3f:df:d9:80:05:
44:f5:8e:eb:cc:ea:dd:c0:91:43:3b:56:43:09:df:
bd:86:8b:b1:d2:15:f8:da:dd:32:d5:01:be:4e:0d:
00:87:56:b0:44:76:8f:ba:c4:90:16:09:04:26:82:
47:0e:56:e3:de:6e:3b:aa:74:7f:11:2c:25:7b:cf:
68:8f:1b:00:07:e6:3d:5b:32:e2:64:e8:ec:22:a0:
cc:1e:f1:b6:70:c3:73:5e:48:34:0a:43:1f:2a:a2:
26:cd:15:44:15:7c:b1:45:41:db:44:48:6c:36:37:
06:1d:a2:44:0a:29:bb:ea:51:31:93:06:e9:a1:bc:
3f:98:d9:b2:67:ff:f9:37:ad:09:91:ef:7b:cb:6b:
bb:fe:5f:e7:97:ef:6c:2f:41:1d:0a:20:cf:49:ab:
5b:57:25:01:16:8e:fa:d8:d5:20:ff:b0:ce:73:f0:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B6:DF:84:4E:0F:24:99:B7:7E:B8:CB:8E:77:4C:70:64:CD:49:14
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:be:ec:aa:82:b9:55:63:6d:86:f8:2a:9a:25:ea:8b:21:36:
4c:4d:80:af:cc:60:c8:71:c2:36:cd:0b:27:c6:0e:2f:10:d2:
b4:bc:da:31:51:ce:7e:d3:94:9d:32:a9:69:79:b4:97:5b:8e:
7c:40:c4:88:42:4f:46:aa:39:cd:20:97:7c:ef:91:fd:99:f2:
1a:61:1c:52:60:e9:3e:df:f0:f9:6d:1f:13:99:71:74:60:42:
d6:d8:4e:f0:86:40:f2:68:35:0c:46:9f:a9:91:61:fa:55:b1:
29:bc:8b:68:b4:62:7f:ef:3d:d4:80:d4:32:ee:1d:03:01:2e:
40:b1:2a:61:01:d2:2a:e9:fc:3c:61:10:92:ca:90:42:59:90:
1e:6b:78:40:7b:a7:6e:e2:c7:24:8e:84:03:23:1d:58:6c:63:
9e:5b:a6:02:53:f8:34:49:58:48:56:1c:54:ed:3f:e5:24:49:
8a:88:01:f0:77:5f:2d:a2:4a:27:1c:7a:b3:f3:f4:c9:8e:8f:
d5:d2:39:db:38:0f:df:78:0d:c4:98:0a:0b:0d:2b:a3:63:39:
de:f8:76:48:fc:92:98:b6:c6:2d:17:c8:32:e6:bd:07:38:f0:
26:11:a8:04:81:e4:4b:a0:02:da:bf:e7:61:51:29:01:d5:bc:
66:b2:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:44 2025 by rpki-client