Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier: UhBnjgA0if0TS+u7R/yt5gkgOQPsOd5YxXNpChxciUw=
Subject key identifier: 75:5D:DD:5C:7F:5F:41:27:ED:7F:D3:1A:90:C6:29:91:7C:A2:E7:90
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 019680FDD31337CAF240612063FF4DDB17F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number: 0C49
Signing time: Tue 29 Apr 2025 10:00:40 +0000
Manifest this update: Tue 29 Apr 2025 10:00:40 +0000
Manifest next update: Wed 30 Apr 2025 10:00:40 +0000
Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: F8sbf1jdca4XajRpb5cn3oa5uYTNJBEYJBneBJc5BWM=)
2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:d3:13:37:ca:f2:40:61:20:63:ff:4d:db:17:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Apr 29 10:00:40 2025 GMT
Not After : Apr 30 10:00:40 2025 GMT
Subject: CN=755ddd5c7f5f4127ed7fd31a90c629917ca2e790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:9a:f9:1c:67:3c:99:83:66:e5:3d:3e:fc:
ea:91:e7:e3:a7:dc:9c:88:76:67:73:03:74:7d:f6:
aa:5f:0d:30:67:b5:e1:82:1f:cf:6d:94:07:9e:8d:
93:8c:51:ce:f2:70:0b:98:c6:f9:a6:5d:80:37:66:
90:e8:eb:c0:d7:53:e7:28:48:79:b3:99:32:00:d4:
8d:73:e0:88:de:28:a2:f7:8f:ea:44:89:8f:04:92:
59:ee:87:1c:1c:d8:38:fc:1c:5f:d3:6a:8c:f0:37:
a1:7d:ce:60:69:d8:58:b0:39:f1:8b:ba:3a:1d:39:
9c:6d:82:94:b4:4a:d4:37:9d:50:83:00:1d:07:82:
10:af:70:e8:f9:2b:57:25:21:87:7c:d5:00:5e:8e:
74:ac:56:ee:3e:52:a2:27:89:f0:26:64:b2:f8:cf:
94:95:d8:db:40:03:9a:d5:2e:fd:10:97:fe:32:c8:
ae:f7:ce:7c:f7:02:e4:98:d5:4b:df:47:19:b3:53:
de:de:35:fa:ef:82:de:fc:d4:cc:f5:8f:e4:ff:05:
ca:59:c0:9b:9b:67:c1:fe:39:cf:4f:90:02:f8:93:
06:ab:b5:86:e3:45:52:e8:02:98:b1:19:bb:14:97:
fa:90:ca:a2:aa:4e:f6:7d:a9:ba:a4:de:4e:f7:07:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5D:DD:5C:7F:5F:41:27:ED:7F:D3:1A:90:C6:29:91:7C:A2:E7:90
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3f:84:28:a3:bc:0d:ec:8b:ad:fa:e1:67:94:c9:c5:eb:87:
bb:11:e1:42:35:ed:9e:77:dd:2a:d6:51:4a:14:13:92:f3:1c:
fe:c3:fa:a2:55:eb:11:be:1c:41:8d:30:41:18:5a:b5:08:1c:
45:36:25:0d:47:14:7c:ba:c7:5e:ba:1b:d3:a3:5e:1d:db:f5:
cf:fc:03:7d:cf:48:a6:93:eb:69:98:de:99:84:50:66:1c:a9:
88:ea:e4:cb:9e:e2:77:f5:6b:bd:48:b0:7d:c7:a7:bc:c2:58:
13:db:d0:ae:f3:8a:41:56:ac:eb:e2:87:92:4f:d5:37:b1:60:
ec:93:21:75:fb:51:0a:50:98:f6:20:57:46:84:cf:78:03:93:
89:fb:70:4c:0e:ee:36:04:88:01:12:83:10:c9:ef:3e:a8:96:
38:af:ec:bb:a2:bc:eb:12:6a:7d:e4:36:37:85:12:92:cf:8a:
cf:29:3a:26:4e:43:b5:91:95:ca:e7:71:82:b1:d6:dc:54:67:
db:5c:e1:4e:1a:69:06:39:bb:d0:12:2c:5e:db:ce:16:1f:f5:
9e:c5:5c:97:35:9a:b4:ab:2b:75:f4:54:54:46:39:80:57:12:
35:22:2a:42:b0:1a:06:95:a7:26:8d:94:58:64:75:e0:12:20:
58:00:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:06:06 2025 by rpki-client