Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: BTAb3mG692a82kpVbCvemRLDIYE3gqj0xe5jsR8nf9Q=
Subject key identifier: AB:41:96:44:EA:BA:9A:15:31:F7:0B:F5:1D:9D:AB:8E:2D:EF:88:36
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019745F90F7871583559915B2F82F408C380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0CAF
Signing time: Fri 06 Jun 2025 16:00:39 +0000
Manifest this update: Fri 06 Jun 2025 16:00:39 +0000
Manifest next update: Sat 07 Jun 2025 16:00:39 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: o7k+A4H+ZudC1f4WMwvx6zZ5gp7zTBF7doZe5C6w5Us=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:0f:78:71:58:35:59:91:5b:2f:82:f4:08:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Jun 6 16:00:39 2025 GMT
Not After : Jun 7 16:00:39 2025 GMT
Subject: CN=ab419644eaba9a1531f70bf51d9dab8e2def8836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:05:52:86:fc:d2:e5:df:91:dd:47:57:36:
a6:4c:ce:1f:eb:e4:5a:0f:70:b8:3f:89:17:04:1d:
ea:1a:94:43:b8:ec:3f:d5:a0:0d:4e:26:97:f0:18:
21:c6:b1:d3:b9:81:e7:a0:83:8a:b4:01:c7:53:17:
32:a7:05:60:59:33:1c:42:6c:b6:38:c2:4e:61:3a:
12:3f:22:6e:62:0b:6c:eb:3a:42:d3:99:e8:92:4e:
5a:1a:1d:7f:de:af:d8:18:f8:d8:8a:2d:79:81:9c:
5e:a5:79:40:e8:ec:6a:f0:40:0f:94:3d:14:73:0a:
a5:27:5a:34:d8:1a:29:de:4c:d8:7f:56:d0:99:82:
bc:5e:65:7e:6c:a4:2a:c5:9f:e0:8a:09:a1:2e:7d:
d8:21:8c:ae:ba:59:eb:08:6e:0a:29:24:d6:e6:44:
ce:45:a7:8e:cf:27:74:d0:20:ab:f3:e6:f1:94:ea:
30:1d:2b:26:1c:8e:a4:98:a3:be:5d:7f:2b:1e:d3:
8d:cc:8c:0b:2e:a3:f3:e0:f6:62:2e:a0:38:4e:7d:
3e:46:d0:c2:2b:0d:df:fd:19:b9:0c:83:bf:53:f2:
be:8f:6d:ab:45:02:28:41:0a:9f:f8:b2:07:0c:64:
de:dd:59:7d:fa:74:c2:27:a1:8c:0e:06:bd:f7:c8:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:41:96:44:EA:BA:9A:15:31:F7:0B:F5:1D:9D:AB:8E:2D:EF:88:36
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:51:53:c8:27:71:68:2d:3a:61:31:d3:73:47:51:12:36:
b8:3e:b3:86:38:fd:be:42:5e:e6:84:81:12:62:3f:52:39:d0:
4d:d9:71:70:d3:f4:42:c8:75:d3:d5:31:04:14:4d:4a:25:4c:
89:da:ad:41:d8:61:e0:b7:cc:45:ef:46:03:79:30:c8:78:c8:
6a:9b:d4:c3:5b:d1:8c:85:05:74:2e:78:81:b8:49:f2:27:d5:
d6:f3:dd:ab:8d:ad:0b:30:e3:56:3c:02:07:eb:ef:92:5b:e3:
38:a5:02:04:e1:ed:38:ef:08:35:fe:b6:eb:d7:ee:38:63:e0:
af:3d:24:82:f8:8e:d3:87:80:e1:7c:3c:bd:aa:c4:e7:45:f3:
fa:4d:33:50:74:bf:fe:5d:d6:0d:d7:e4:e5:ee:0c:90:cb:66:
e6:3c:1b:af:a9:ed:4c:a7:99:cd:c0:b9:23:e3:a9:7b:7b:0d:
93:6d:b7:b5:aa:68:b1:b5:f1:6c:63:60:69:1e:5a:f4:f2:af:
6a:3b:e9:35:45:0c:dd:c5:70:28:ae:59:cf:14:2c:ab:29:fb:
1e:6b:4d:81:80:14:06:a4:7c:28:02:c9:ef:43:4a:93:6a:6d:
18:2c:65:27:c9:6c:ed:3a:36:2b:2d:56:02:03:87:d9:36:68:
55:24:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:26 2025 by rpki-client