Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: 1x4B876Cz+C+QGb1zzMoTtq6Oxv01tq5oGfi9Q3d9/s=
Subject key identifier: F0:D4:32:FF:E2:E2:B1:5C:B4:38:42:00:43:20:88:81:97:95:3B:45
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 0196451FF1E3148FD6C327967B09A5771F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 0F2D
Signing time: Thu 17 Apr 2025 19:00:43 +0000
Manifest this update: Thu 17 Apr 2025 19:00:43 +0000
Manifest next update: Fri 18 Apr 2025 19:00:43 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: 6p0UAVRnlNzKFaJE+0UED6AromRCG3GSm26BPxU/vaw=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:f1:e3:14:8f:d6:c3:27:96:7b:09:a5:77:1f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Apr 17 19:00:43 2025 GMT
Not After : Apr 18 19:00:43 2025 GMT
Subject: CN=f0d432ffe2e2b15cb43842004320888197953b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:80:d9:ca:a5:26:0d:b5:f1:59:e0:ae:02:
4a:26:8c:1b:83:c0:3f:d1:29:86:c8:d5:c2:3f:d2:
db:68:80:0d:f2:97:f7:1f:59:5c:da:85:65:fa:25:
5d:69:c0:32:11:c0:3c:b6:db:f5:49:e2:5f:0d:29:
9c:b4:9a:ec:54:d1:6c:5a:9c:40:ec:51:cc:70:bd:
e3:3d:3c:12:41:09:75:27:c9:cb:cb:97:27:52:ce:
75:fe:e8:7d:e8:8e:9b:61:e7:71:e5:e9:7c:c1:cd:
b1:75:37:75:37:35:e6:61:89:d2:a1:6d:85:90:5b:
de:b0:5e:08:1a:be:aa:a7:be:7e:2b:2c:22:64:9c:
6f:b1:5e:e3:ac:07:43:bb:9b:9b:a6:a2:3b:fa:a6:
55:15:81:8e:5e:58:16:91:00:ff:74:f3:fe:a0:a1:
4a:77:88:34:5e:28:bd:c0:77:b9:91:66:83:98:e3:
b7:ba:83:b6:f9:93:d8:6d:ec:11:80:6a:36:2e:f1:
c7:cb:1a:cc:f4:8c:d0:c3:65:d0:90:6b:3a:0e:2d:
75:a5:42:4e:36:69:8d:b8:04:b9:7b:fd:f0:0c:da:
65:7b:f2:e5:26:6d:a9:0d:68:41:e0:12:a6:ab:93:
f8:ea:2e:da:b1:35:d4:5f:fe:37:47:01:55:db:1e:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:32:FF:E2:E2:B1:5C:B4:38:42:00:43:20:88:81:97:95:3B:45
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c3:a0:11:83:57:9f:31:7e:24:30:3c:bc:b1:71:ba:ea:f5:
46:2c:3a:28:3f:27:f8:f9:47:dc:42:6b:d4:6e:7a:f3:10:62:
1a:5d:91:25:f9:d0:a6:ec:18:f6:b4:72:c5:d8:e1:31:99:06:
89:97:af:ea:3f:34:9d:39:e8:1e:4f:73:54:d4:a2:92:d3:0a:
5d:49:80:4b:7a:77:4d:90:e2:6b:4b:e3:7b:4d:43:d7:72:8a:
83:29:06:57:90:f0:b7:78:66:da:ef:c2:a1:fe:84:89:a3:21:
f5:54:4c:91:40:78:5f:46:91:1b:6e:5d:ca:7b:63:0c:4e:6a:
28:f8:97:a4:14:d8:28:f5:87:f1:18:e2:04:81:e2:65:c1:8d:
a0:b9:ae:4e:b4:ac:b1:59:db:ae:ad:66:d6:de:70:29:dd:22:
8d:e8:44:4f:58:07:de:b7:a5:cd:91:13:43:35:27:a3:34:55:
c2:d1:bb:57:e8:55:65:ad:47:cc:75:31:58:2b:fe:b9:cb:f7:
41:89:2b:3a:9d:91:d2:7b:c0:93:31:2c:15:44:38:bb:98:27:
82:49:62:40:6f:5d:ed:4c:2a:fb:ce:c3:d5:53:08:ca:d1:ec:
7d:5e:11:c7:53:d8:57:30:fa:03:9f:a1:ce:c7:ba:40:83:b6:
25:12:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:30:39 2025 by rpki-client