Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json)
Hash identifier: lHtORNNflxQ1TqSVMyPUkfaqG5nbLAN2KeYKCk3qmT0=
Subject key identifier: B9:89:48:B7:7C:E4:8F:51:0D:DB:35:1C:C4:8F:C2:66:88:A5:BF:84
Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Certificate serial: 01965E3ABE7E65BE6C8023DD3716D1012CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
Manifest number: 0D32
Signing time: Tue 22 Apr 2025 16:00:30 +0000
Manifest this update: Tue 22 Apr 2025 16:00:30 +0000
Manifest next update: Wed 23 Apr 2025 16:00:30 +0000
Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: kd5y+hZ9mCcKktBgyg6qT1rgcIneud/YB1M1V0pUfNQ=)
2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:be:7e:65:be:6c:80:23:dd:37:16:d1:01:2c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42
Validity
Not Before: Apr 22 16:00:30 2025 GMT
Not After : Apr 23 16:00:30 2025 GMT
Subject: CN=b98948b77ce48f510ddb351cc48fc26688a5bf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:b9:7b:8b:c4:88:07:31:39:11:a1:69:49:
70:4c:7b:9e:eb:09:41:96:44:9d:bd:12:94:a8:06:
66:06:c4:e8:6d:d4:65:ad:2e:bd:0c:2e:e9:cb:15:
79:a4:a1:2e:11:c1:f7:f4:d2:2b:a0:36:d0:d5:a3:
d9:c8:f7:98:e1:0e:5e:1b:5c:84:aa:6f:65:a8:79:
dc:4f:27:db:c7:4f:e6:fc:de:2b:bb:1a:13:7e:75:
73:64:b8:8e:a7:aa:f0:07:20:af:c3:db:b1:25:bb:
95:5f:46:3b:c9:68:87:ca:00:34:c7:70:f0:eb:8b:
31:26:0f:be:45:d0:c3:6f:79:9a:84:0a:8b:ac:21:
0e:48:74:da:4b:97:43:06:58:1e:c0:88:86:75:e6:
70:4a:4a:32:c0:4f:45:70:a3:f7:64:81:2d:d6:9b:
92:f7:07:2c:4a:80:e7:df:52:32:73:0c:e8:4e:95:
71:50:05:41:7f:df:fd:cb:f7:f0:75:99:ba:8b:67:
d9:8c:06:09:cf:f5:7a:91:91:e8:77:f2:02:0d:ea:
8a:d8:76:24:53:8f:0c:53:15:a8:c8:74:c8:aa:df:
02:23:8b:4b:87:a2:d0:26:06:14:67:70:6d:4e:f0:
a1:94:34:96:da:c8:23:33:15:30:79:9b:60:ad:d6:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:89:48:B7:7C:E4:8F:51:0D:DB:35:1C:C4:8F:C2:66:88:A5:BF:84
X509v3 Authority Key Identifier:
keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:51:7e:74:c4:77:a9:4a:1a:1a:f3:c9:23:49:3f:42:7d:
06:20:9d:90:05:5d:a9:3c:5f:6a:00:5c:89:2c:46:2a:0e:bc:
10:10:02:88:66:f6:1d:48:b0:12:d1:ca:01:c6:79:5d:86:28:
7c:d5:9c:b3:61:84:91:b2:96:84:6e:58:e1:37:77:04:c2:03:
02:dd:f1:54:70:14:cd:b3:72:85:bc:ee:ad:92:98:54:43:a5:
37:6c:d4:f4:95:92:6b:9d:56:63:98:93:de:8e:bd:42:e5:c4:
b4:87:c6:a0:72:67:da:e7:51:6e:8c:4f:ed:29:75:de:4c:43:
56:e7:f9:1f:28:ab:65:49:eb:d7:68:67:77:74:8f:7d:46:41:
51:cb:c3:5f:5b:fd:f0:ec:38:be:a9:6a:b5:18:cb:d4:e9:2d:
4a:3e:00:7b:54:23:d8:53:13:b5:6b:50:67:7c:ea:a5:d4:4d:
38:7f:be:2f:e5:59:89:38:a8:8d:7b:3d:29:92:db:20:07:83:
75:16:f2:ac:8c:7d:31:02:cb:1c:83:0b:f8:c7:b3:84:7b:60:
5d:47:b0:e2:fb:0a:b0:11:91:9c:65:cb:c2:64:91:6d:cf:dd:
44:36:07:fe:71:ba:45:bb:80:8a:1c:c1:11:6b:d5:87:d0:09:
91:ae:5f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:23:34 2025 by rpki-client