Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: QSE5imOBhIKYE7mi2a5jbb/E1diZiZ6LS7X6vEPKY5Q=
Subject key identifier: BD:C3:2A:D3:57:20:A5:EA:14:51:FC:70:1E:9C:4D:0A:93:1C:7A:93
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 019656139346114EDD3D263886BF6B87BE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 02:00:45 +0000
Manifest this update: Mon 21 Apr 2025 02:00:45 +0000
Manifest next update: Tue 22 Apr 2025 02:00:45 +0000
Files and hashes: 1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: b4QHCwxTZpLKwX8wwX9JZb1cA+NUFHkkS+V3SVwTqCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:93:46:11:4e:dd:3d:26:38:86:bf:6b:87:be:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Apr 21 02:00:45 2025 GMT
Not After : Apr 22 02:00:45 2025 GMT
Subject: CN=bdc32ad35720a5ea1451fc701e9c4d0a931c7a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:a0:9f:11:75:d3:54:77:77:8f:84:85:b9:
fa:80:4a:a4:b6:ef:8b:48:e2:d5:b9:89:37:77:58:
29:54:97:41:d7:55:f6:89:1f:a1:1e:f1:66:0c:fe:
4e:0d:19:e7:d2:8e:59:9a:00:02:3b:03:2c:3a:a7:
87:5a:9a:f3:40:61:47:81:dc:df:ca:fb:17:c4:fa:
24:7c:d9:a1:71:7d:69:70:e9:3d:0a:5e:15:d2:f1:
69:58:f8:5c:7d:d9:14:2d:a8:90:73:98:e2:c9:d6:
0c:36:c2:ca:a1:75:2e:b6:c5:d2:57:11:67:6e:7c:
ee:ef:17:2f:de:05:c7:0e:15:49:52:aa:50:a4:ef:
e3:fa:57:16:0d:f6:3f:13:ba:3f:61:0f:2a:18:51:
16:1d:1b:8e:73:68:9b:8f:06:c5:11:74:f7:e7:f6:
04:4f:83:aa:2f:7c:ed:ad:ba:4d:ad:c6:a6:5b:e4:
8d:e8:f1:5a:25:cf:c1:3d:03:5b:87:3c:2d:b6:bc:
c6:35:06:4b:a8:e3:16:50:89:fa:55:4e:0c:78:69:
61:6f:e0:4f:03:15:8c:13:41:5a:9b:4a:27:b7:b7:
aa:d4:6b:4f:17:35:42:ab:dc:b8:29:61:76:fd:7c:
bf:0b:83:af:c6:29:15:79:c2:9e:d4:52:b4:44:8c:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:2A:D3:57:20:A5:EA:14:51:FC:70:1E:9C:4D:0A:93:1C:7A:93
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b8:9c:8e:ed:8d:67:7d:a1:92:45:40:5a:36:5c:f6:f6:7f:
cc:4b:8c:f4:09:fd:26:c9:63:22:7b:da:91:1b:9c:b6:e7:42:
1c:2c:78:56:5b:34:d4:b9:ed:1d:b4:0c:56:ac:4d:fd:b7:b9:
5c:f7:08:34:22:c5:1f:56:1d:0b:79:b7:7e:f9:8c:2b:6a:8e:
85:80:44:d7:be:15:f3:a7:9d:88:b7:9a:bc:5a:2d:b6:99:52:
c2:3b:1b:d4:f4:b3:fe:ca:f6:5c:82:7d:51:52:89:e5:1e:52:
d4:ce:80:34:12:86:04:71:90:c6:e5:ae:1d:4a:02:e2:9e:e6:
a6:03:7a:00:f4:98:b2:b4:e8:5b:d6:57:41:47:ce:e2:7b:4f:
30:93:83:f8:1a:55:16:58:db:74:17:80:77:03:91:05:95:fa:
ab:38:de:58:d8:91:a8:70:b0:fd:1b:c6:39:9d:18:90:2d:8f:
bf:d0:fb:81:1d:87:dd:fb:46:3c:b5:fd:d0:c7:be:91:7b:c4:
88:b4:69:60:fb:31:aa:23:d4:7c:00:a1:13:a3:7f:ae:67:4c:
eb:de:60:35:0b:e5:25:ef:db:28:0f:2c:0e:d5:bf:61:33:f9:
cb:92:f9:29:08:27:9c:47:10:bf:00:89:32:2f:62:f4:f9:cc:
67:78:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:23 2025 by rpki-client