Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File: WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier: stiIIH8ezhyV/ECobfjv+y5lG34WwPUc5kaMSKX02vc=
Subject key identifier: 90:1B:5D:34:28:63:4C:9D:40:35:E4:B2:7B:BB:DE:80:E8:FB:19:AE
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 0196741DEDD6870EE5416383E26F556E34AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 22:00:40 +0000
Manifest this update: Sat 26 Apr 2025 22:00:40 +0000
Manifest next update: Sun 27 Apr 2025 22:00:40 +0000
Files and hashes: 1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: /g6gBTQlzJwyKiGQ+JjxYzee+8Oq2mSqoaVspBb6Kkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:ed:d6:87:0e:e5:41:63:83:e2:6f:55:6e:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Apr 26 22:00:40 2025 GMT
Not After : Apr 27 22:00:40 2025 GMT
Subject: CN=901b5d3428634c9d4035e4b27bbbde80e8fb19ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:e2:27:43:04:64:b3:64:c6:24:ed:f1:09:
13:1a:4e:39:4f:3f:54:3a:73:a3:4b:59:05:85:66:
a9:0c:af:88:01:0e:9b:ac:ac:24:d6:66:ac:c5:4f:
17:5a:09:eb:29:ac:d2:83:68:36:96:3e:4d:f5:22:
d3:50:cb:4f:bd:d5:b1:ee:ef:de:55:bc:88:1e:2a:
d3:9d:9e:28:1a:60:16:01:ed:7c:7b:fb:b2:a4:57:
ed:71:13:9d:8e:7b:1f:00:5c:99:d7:3b:bc:e8:3e:
f7:23:75:5f:a6:c8:be:fe:e5:51:6c:11:ea:a3:21:
96:e7:13:31:95:02:f8:6e:1c:f1:46:db:ae:58:8e:
7b:a4:b2:76:cc:37:14:71:00:87:af:eb:1b:55:69:
4d:6c:aa:2f:e9:14:24:70:5b:5a:b5:3a:f1:4a:2e:
59:3f:d9:0e:f2:fa:26:c5:9c:12:b3:08:d8:5c:73:
24:cd:e9:79:43:73:78:ec:80:e7:d5:61:4a:b6:aa:
ba:5e:af:94:9f:c7:25:a0:11:bf:4f:d1:a0:bc:41:
f8:bf:bf:4a:d6:2d:08:11:27:51:60:b8:5e:37:21:
d1:d5:b3:c2:ef:fa:4e:1c:2d:bf:44:78:81:ba:f2:
aa:c0:89:17:0f:d8:c7:43:1c:cc:a3:5f:84:dc:42:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:5D:34:28:63:4C:9D:40:35:E4:B2:7B:BB:DE:80:E8:FB:19:AE
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c4:23:63:1c:85:6a:0c:52:df:e8:03:b5:7c:02:aa:68:7b:
6c:dc:23:b1:f8:eb:ba:70:37:36:1f:a6:57:d5:ed:47:3a:ae:
a5:5f:21:01:8a:79:a1:98:fc:f4:ed:9b:63:94:a2:48:53:3d:
33:cb:ed:d7:04:ff:81:18:fd:b5:ae:53:fe:59:31:73:04:ef:
ad:70:02:f4:d7:de:91:d0:05:46:1d:b8:49:a2:e3:c4:71:bb:
a8:8a:9a:b6:69:1d:0b:e4:5f:48:a7:a3:f2:2e:4d:8d:62:74:
9a:cc:a3:59:9a:57:75:9e:25:1a:8c:b2:fd:56:d6:d6:6d:98:
21:ad:f2:12:6d:70:4a:db:62:3c:2f:c1:0e:be:d4:9f:41:ba:
aa:07:19:6a:b3:6c:6f:05:60:54:a4:07:03:4e:e9:99:23:81:
bd:77:28:1c:63:51:b8:57:c1:f2:69:82:76:08:e3:67:b8:20:
9e:f0:54:6d:08:8d:bf:0f:7d:c0:3d:6a:42:a4:87:ec:b8:19:
7b:9c:80:56:02:63:56:9e:ae:19:23:27:3a:c7:4d:a6:1d:db:
98:02:93:8f:1d:2e:42:0b:a8:b8:9a:3d:67:65:f9:be:97:db:
06:da:be:16:09:36:81:da:c8:c3:da:8d:0a:57:ba:fd:c6:3c:
6f:c1:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:25:41 2025 by rpki-client