Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json)
Hash identifier: 69H1lEOC8D6O/TmoqonaRElUoJs5HuR0EnbkR1i14yk=
Subject key identifier: E3:D0:2D:85:27:4E:09:C8:54:9A:85:E9:7A:61:5F:58:D4:78:1A:45
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 01958CCED12241C6014B993F68BEA1AE91E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
Manifest number: 012E
Signing time: Thu 13 Mar 2025 00:01:58 +0000
Manifest this update: Thu 13 Mar 2025 00:01:58 +0000
Manifest next update: Fri 14 Mar 2025 00:01:58 +0000
Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: 6OflM+ovZgIxcDY64Z06kbCQFaxh6cfRvqGWZpawEn0=)
2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:d1:22:41:c6:01:4b:99:3f:68:be:a1:ae:91:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Mar 13 00:01:58 2025 GMT
Not After : Mar 14 00:01:58 2025 GMT
Subject: CN=e3d02d85274e09c8549a85e97a615f58d4781a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:76:e1:a3:84:e0:4f:5f:2b:0a:75:ac:85:
d4:1b:5d:85:5d:c6:71:5f:e7:70:a9:9b:1b:0e:80:
1c:a0:92:c9:bb:08:55:57:29:57:e2:98:66:81:46:
fb:a0:fd:c7:de:8c:33:29:46:19:53:30:f6:d8:e9:
dc:76:48:23:d6:16:60:0e:03:e3:a7:8d:98:91:f3:
c2:0c:22:e6:7f:ec:58:dd:97:39:b5:4c:04:ef:ca:
5a:1f:3a:9e:2d:d4:97:5f:32:eb:a5:91:1e:95:f5:
9c:7a:e2:ce:ad:cd:ce:15:16:a8:2f:2c:00:f8:d4:
a9:c8:3d:6d:99:13:c4:2b:fd:21:3c:bc:55:32:c7:
8e:c4:8a:b3:0b:cc:9e:83:4e:2b:27:11:3f:d9:10:
33:cb:36:80:08:49:6b:83:29:25:96:e1:90:a8:55:
5d:67:16:9e:96:fa:50:47:41:7e:ba:83:92:e1:a8:
c9:f1:f6:30:78:cc:ef:bd:0b:45:d8:b8:6b:ee:3f:
bb:e1:0f:59:4a:19:9c:48:e5:ec:a5:47:9a:21:1a:
19:5b:01:d8:0a:26:a9:bd:c3:26:0e:f6:d3:45:87:
b3:47:cb:3d:1d:59:f6:89:d0:a7:12:a7:d0:03:ed:
d1:22:0e:d2:7f:5d:d0:5b:aa:a5:90:70:f5:5d:6f:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:2D:85:27:4E:09:C8:54:9A:85:E9:7A:61:5F:58:D4:78:1A:45
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:c9:3d:39:3f:b1:9c:cf:8d:ba:4f:da:c9:02:af:ee:a0:d3:
10:43:b6:98:46:71:ff:4d:ba:b0:15:1c:20:25:19:ec:22:4b:
d7:cd:71:d9:9a:ea:01:c7:12:64:cb:a8:fb:fb:ab:c1:95:99:
2d:7f:97:01:10:73:77:71:0a:0e:dd:2d:1d:c4:6b:60:38:ed:
d2:fe:dc:a4:aa:ff:94:9a:17:cf:08:48:0b:8b:32:da:2a:74:
cd:85:ad:e2:a2:3d:0d:b0:05:ff:a9:27:34:fa:f4:79:e9:b5:
77:ce:95:71:08:e3:57:09:a8:f2:ce:d3:68:2a:36:c3:02:00:
b0:8a:83:0b:16:ff:23:17:61:21:4d:9f:56:54:89:76:cd:a1:
0e:da:11:e7:54:a2:aa:2c:f5:3c:47:6a:74:5c:b6:42:d0:81:
2b:d5:2e:f3:05:5f:cc:11:bb:09:b4:79:51:ed:bb:e5:5b:71:
6c:fe:49:d5:95:47:f4:f5:05:95:cb:18:a2:56:ba:36:dd:18:
af:2f:a4:06:fc:18:b5:40:43:0e:0c:00:8a:2a:d5:74:b1:b6:
db:94:e8:0e:13:d1:3d:66:8f:60:89:cf:ab:3a:50:86:f6:6b:
ee:c4:03:3d:eb:29:d3:64:95:c2:40:22:30:47:30:64:75:27:
dd:90:45:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:56 2025 by rpki-client