Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File: Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier: CV5TSBQkBWRKLvSVuuXPLXtlKK+1U5ROp3hHSkR0UEw=
Subject key identifier: AD:12:ED:5F:DC:5E:50:E5:98:2F:9E:D4:D1:16:28:A4:EA:DB:87:90
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0197711AA42A6EA8B0DDB8D519B2DE13448B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number: 0988
Signing time: Sun 15 Jun 2025 01:01:00 +0000
Manifest this update: Sun 15 Jun 2025 01:01:00 +0000
Manifest next update: Mon 16 Jun 2025 01:01:00 +0000
Files and hashes: 1: HGSRqlNYcI2T93P2gU900Qk3Dek.roa (hash: i02OHuqf6h/6q/dwtdwLhLZepe+elqJK3FHBGeLBHEE=)
2: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: T+NuZEuN3dYNeyC1Z1BfGQdl2GgEG4922zfZ/7itG88=)
3: bQXvZTDMEPb1Z1Yz0iKNwTJnSuE.roa (hash: hjvCIFIfV6QqgEX4RwfG7HblsHoidBW7RJECyS+GMK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:a4:2a:6e:a8:b0:dd:b8:d5:19:b2:de:13:44:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Jun 15 01:01:00 2025 GMT
Not After : Jun 16 01:01:00 2025 GMT
Subject: CN=ad12ed5fdc5e50e5982f9ed4d11628a4eadb8790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:39:ad:16:d0:bf:51:75:25:7a:be:53:36:
c2:7e:52:c6:2d:61:28:7d:19:29:a1:ea:05:36:7a:
17:15:95:4d:5c:79:a6:a7:37:03:c7:b5:3a:8c:d9:
82:a8:30:6b:49:e8:e8:3a:7b:35:50:e4:30:e9:31:
b7:2b:fc:9c:09:8c:32:ea:45:2f:f6:fd:10:66:ee:
3d:cb:af:c9:18:81:c4:8d:9d:bc:d9:95:ae:b0:ce:
b3:f0:af:e9:74:e9:51:84:c0:34:de:9c:18:2c:2d:
18:24:9c:38:a7:be:34:10:6e:57:a0:24:15:c7:45:
ff:b3:84:ba:a0:85:1f:31:45:a0:40:1f:7a:1c:25:
47:90:4c:8d:d3:88:dc:b5:df:7f:e6:7e:83:ab:91:
d7:20:b9:5f:2a:36:47:3e:a5:34:61:1c:f3:5a:18:
49:a6:e3:a2:f8:d7:c9:0b:6f:89:5c:2a:6e:36:3b:
e3:07:df:46:72:b8:cb:bb:0c:c5:82:bd:08:48:0a:
92:ba:6e:d9:79:b4:29:33:0a:fe:e8:1e:a2:10:d7:
6e:1f:ef:7d:03:4e:05:eb:f2:dd:f0:c9:7c:b2:94:
39:e0:73:08:08:ec:d8:ea:62:1c:7a:15:dc:28:9c:
03:40:c7:e9:0a:3c:b6:ce:0e:4f:b5:ee:64:dd:4a:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:ED:5F:DC:5E:50:E5:98:2F:9E:D4:D1:16:28:A4:EA:DB:87:90
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b1:dd:11:1f:b8:15:0c:e7:17:e5:5d:05:e8:67:40:f3:41:
2f:b1:42:6b:0a:49:ab:a1:70:9f:81:98:55:1f:ea:0c:00:a5:
83:ba:36:bc:22:43:12:4b:3f:77:77:f7:42:58:eb:df:6f:01:
45:15:bb:2c:d3:e2:cd:2b:3d:19:51:4d:70:01:05:9b:8e:0f:
54:82:a0:46:9d:e2:77:94:78:da:17:b3:a8:03:05:b4:97:a5:
99:80:96:91:f9:70:22:5a:0d:87:5a:93:f6:8f:a2:08:ff:7c:
2c:76:11:d0:b2:27:cc:98:a7:bc:54:3e:9a:d7:e3:2e:4d:c1:
fa:4f:98:f4:ad:42:23:7b:61:e0:74:96:e5:ad:00:c2:af:1a:
09:a7:3c:bd:13:77:a7:13:0c:c9:a7:e5:36:72:67:f2:35:6e:
70:69:cd:1e:db:69:33:81:2a:1f:ea:20:55:db:c1:b3:a0:da:
b1:41:22:98:3c:a0:eb:4c:2e:fa:f9:41:7a:79:1f:f5:0c:7f:
84:2b:46:23:f2:08:da:4c:b2:01:a3:05:f1:37:be:d5:94:d7:
a7:85:d8:53:ae:8d:39:d0:e1:0e:0e:06:12:94:33:71:96:aa:
ba:03:9b:f0:16:fd:64:3c:a7:bf:a8:74:2b:c2:24:c7:af:9f:
f8:1b:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:22 2025 by rpki-client