Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: GxCU7F4z7eYGLDpoxn6QTBOrCc/klDw9oOuMVoCugfI=
Subject key identifier: D3:65:90:31:7F:B6:E3:1E:F4:F4:D7:1F:7C:CF:FD:0B:50:78:D9:D8
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 019652DB8C9BA1102A637EC7B80E57CE1566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 1466
Signing time: Sun 20 Apr 2025 11:00:42 +0000
Manifest this update: Sun 20 Apr 2025 11:00:42 +0000
Manifest next update: Mon 21 Apr 2025 11:00:42 +0000
Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: j8DsqCAECXhwq9ITuGCGgOljDR1+8ZIjmqHI2iSrbow=)
2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:8c:9b:a1:10:2a:63:7e:c7:b8:0e:57:ce:15:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Apr 20 11:00:42 2025 GMT
Not After : Apr 21 11:00:42 2025 GMT
Subject: CN=d36590317fb6e31ef4f4d71f7ccffd0b5078d9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:32:2c:b7:84:31:ec:81:48:04:bf:14:a4:
82:3c:f6:2f:06:19:15:05:b7:fe:79:6e:cc:95:30:
77:64:dd:3d:e1:f7:d6:4b:37:62:d0:a4:3a:d5:65:
7e:a1:c8:42:93:a5:26:70:56:9b:48:a2:fd:59:9f:
44:51:95:ef:eb:51:83:e6:c5:82:39:a8:26:af:47:
8b:55:f3:c3:9f:41:f0:52:31:a1:04:b2:47:e4:49:
2e:54:f4:26:1d:a6:e1:4b:48:19:f8:f0:ce:59:d6:
22:6d:18:64:0a:fc:b2:17:29:c0:59:b4:54:25:55:
99:51:cd:0b:f5:da:ce:0d:84:b9:e9:81:81:f8:4a:
53:3a:98:f1:02:6f:87:95:3f:fc:91:ff:40:55:9c:
07:67:87:4c:82:14:70:69:78:b4:72:a9:7f:b6:54:
b8:8e:92:7b:7b:ae:4f:3d:9f:ed:7a:db:4b:cd:c4:
33:50:41:cd:40:63:ce:fd:78:b5:ae:ee:03:c8:98:
f7:71:ee:98:4f:b5:2d:e9:5d:52:12:2b:e2:c5:9c:
7f:70:f1:34:68:65:48:6a:b1:9b:7f:66:7a:47:be:
63:4b:86:7e:14:9c:a8:e4:16:87:0b:f9:99:41:ed:
d9:f2:36:a4:8e:cd:ed:e7:76:df:0c:63:86:59:ab:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:90:31:7F:B6:E3:1E:F4:F4:D7:1F:7C:CF:FD:0B:50:78:D9:D8
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:86:15:1d:b6:10:e2:0d:5d:08:c4:a2:82:d8:4a:79:ff:
a1:4b:0d:b8:7c:14:b2:f5:5b:1a:71:3e:53:20:64:62:97:b2:
57:e5:33:07:58:f6:8e:71:18:12:3c:9f:a7:f1:96:93:69:9f:
c1:eb:93:f5:21:09:43:d9:a2:c4:ee:cd:f3:3f:ef:6a:b0:5c:
fe:cc:06:70:04:7f:70:bf:45:02:c4:56:2c:96:85:76:ed:a3:
85:6c:da:93:36:c5:5d:58:d8:95:17:9c:e3:05:ce:13:40:68:
8c:d7:0e:43:d7:c0:c5:da:9c:13:ec:26:15:5e:f0:b6:da:27:
51:69:39:5a:8f:22:3b:6b:ba:ea:71:3d:3d:59:cb:5f:c0:08:
ef:6b:22:01:b4:79:24:92:85:99:ef:c1:a8:07:69:fe:fb:b9:
88:05:ca:15:f6:32:06:dc:85:ad:60:50:16:b8:de:80:04:7a:
a5:85:1f:74:bd:79:bd:28:42:69:fe:17:9f:2d:7b:ec:99:f9:
d6:15:69:9d:a2:d2:13:08:92:2d:03:ef:0c:eb:1b:9b:8d:c1:
6a:67:ad:47:2f:07:a1:8a:80:d2:45:80:1f:04:79:a1:60:cf:
89:f4:e6:13:70:5a:d7:ab:d4:8e:38:cc:b0:93:2a:08:2f:71:
c8:8e:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:08 2025 by rpki-client