Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: nc7Yo2TiYtryJfurwYY8Fnl2VRnsVqebMtqRi/vRCI8=
Subject key identifier: 4C:97:2D:17:8E:C2:B1:74:3B:DB:C1:F0:E8:D0:32:DF:9E:A3:DE:DE
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 019644E925420727A444CA9DD7EC7715613A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 01A5
Signing time: Thu 17 Apr 2025 18:00:52 +0000
Manifest this update: Thu 17 Apr 2025 18:00:52 +0000
Manifest next update: Fri 18 Apr 2025 18:00:52 +0000
Files and hashes: 1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=)
2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: jGWEF09k/KFJmBvwvj8dB94Ht2rVEEMPw7xjRZyk6wo=)
3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e9:25:42:07:27:a4:44:ca:9d:d7:ec:77:15:61:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Apr 17 18:00:52 2025 GMT
Not After : Apr 18 18:00:52 2025 GMT
Subject: CN=4c972d178ec2b1743bdbc1f0e8d032df9ea3dede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:77:37:65:cc:eb:6f:fa:d1:c6:78:49:9f:
0d:64:11:91:f2:a5:05:86:98:ba:8b:3f:53:18:44:
5d:82:75:6e:d5:7b:62:5f:b3:89:03:a5:0e:62:22:
e2:92:3b:4d:95:1a:64:72:fe:cb:28:19:f7:88:87:
d7:fa:85:e1:1f:91:20:13:28:15:bd:dd:64:d2:f4:
2a:05:ee:e5:e5:25:c2:e3:89:fc:bb:e6:68:6e:6d:
c3:e0:a8:8a:c2:55:68:30:2c:a6:0f:61:de:8f:ee:
cf:eb:9f:bf:2a:08:7a:27:b8:e3:4b:47:fa:53:7f:
27:aa:9e:81:d3:d7:74:7f:7a:fc:82:9d:2e:6a:ca:
4b:e9:d5:9e:ae:e1:9e:9b:c4:9d:55:2f:e3:8d:cd:
e9:5f:e5:c6:67:c9:77:96:1f:76:b0:8a:ce:4a:4e:
83:40:be:c8:30:b6:fe:6a:80:de:fd:4f:55:b4:a3:
bb:ed:57:79:59:66:35:89:01:e5:d6:70:e2:57:7e:
44:fe:2c:bb:77:3c:09:56:bc:d0:8b:f2:32:79:f3:
c3:d9:a7:4d:d4:9a:2a:5c:bf:29:0a:35:44:27:54:
44:ed:c3:48:b3:82:99:5e:11:0f:e4:a7:c7:d2:25:
3e:d7:5b:e0:b9:9d:ee:fd:c8:a5:65:1c:0b:54:f5:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:2D:17:8E:C2:B1:74:3B:DB:C1:F0:E8:D0:32:DF:9E:A3:DE:DE
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:bd:66:44:51:3e:26:51:f0:91:fc:05:1e:17:78:6a:0e:
65:5d:f6:9d:ae:50:a3:75:05:70:01:4c:d4:bc:18:a5:f1:d5:
c6:2c:10:0d:8d:19:6a:9f:9a:58:b0:3f:0d:1e:d6:e7:2e:21:
c4:f1:77:c8:d4:57:de:c9:06:5e:9e:61:65:9c:9f:01:02:63:
c5:ee:72:ab:e6:ad:ec:9f:cd:0d:20:cb:00:a2:b4:2c:92:00:
54:ef:4c:55:35:c1:48:47:b1:4f:07:3c:fe:01:eb:30:2e:96:
47:3f:7d:27:ed:44:46:34:2c:ff:a7:5a:29:06:31:3d:35:24:
66:43:86:51:6b:1b:75:d2:3c:12:f5:a0:30:cc:56:45:0c:54:
b1:09:33:66:95:b4:34:16:17:fc:ad:13:94:d6:e7:8c:83:5d:
88:8a:bd:2d:5a:ea:68:a7:97:8c:b3:dc:68:97:65:45:0a:a1:
e6:d3:20:81:7f:c7:d9:58:dc:b6:33:05:1c:79:5a:b5:41:4f:
b3:c2:a9:1c:a6:00:da:5f:92:14:93:e2:76:48:67:ef:73:26:
8c:ce:58:1a:a3:11:ef:d2:0b:d0:13:d0:e3:81:0e:24:9c:22:
02:c7:61:bf:e8:11:22:a3:d3:26:d3:47:91:fb:c7:09:c0:72:
5f:dd:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:05:48 2025 by rpki-client