Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: tFsYs1b5Rxxo2WrihhzAvmt8/0ipHVqQf8j1UQ8o77I=
Subject key identifier: 4D:79:5E:21:0F:8B:B3:FC:F0:56:D1:46:40:F7:48:54:0F:E9:E1:E9
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 0196729DD3A66D33345BAF797B44C29F7592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 0F6D
Signing time: Sat 26 Apr 2025 15:01:08 +0000
Manifest this update: Sat 26 Apr 2025 15:01:08 +0000
Manifest next update: Sun 27 Apr 2025 15:01:08 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: x/ubn0VAwoNYAHTykXYHufxbo5AqeUmF0Bi0qA5Kw5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:d3:a6:6d:33:34:5b:af:79:7b:44:c2:9f:75:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Apr 26 15:01:08 2025 GMT
Not After : Apr 27 15:01:08 2025 GMT
Subject: CN=4d795e210f8bb3fcf056d14640f748540fe9e1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:d9:fe:0a:57:0a:2e:d4:78:7f:d6:d6:b3:
41:7d:bc:16:fa:b6:8f:f7:41:f9:9d:cb:0c:72:0f:
b6:01:11:7b:3b:c8:6d:fb:f4:5d:71:82:70:03:b6:
36:60:00:54:7d:cf:cc:75:6b:6b:28:8b:97:d5:47:
9b:22:64:c6:1e:bc:1b:b9:e4:d1:cf:16:80:10:13:
39:93:64:db:b4:3b:c1:91:77:4f:25:48:cb:92:94:
ad:65:a2:3f:a4:47:3b:2d:80:f3:2c:5c:27:54:e4:
a9:07:91:6b:00:fe:26:98:9f:46:0c:23:d0:0b:6a:
7d:12:95:01:b6:9d:77:e8:53:04:75:ea:93:6b:aa:
aa:34:aa:18:71:49:0d:ed:fd:cf:70:b1:cd:57:45:
e9:35:99:e4:e2:c6:a8:eb:b4:d8:13:36:b0:54:4d:
ce:96:9c:f3:6c:d7:96:b9:ac:58:06:ee:5f:59:54:
6c:db:10:27:31:cc:84:fa:02:f8:18:fe:6c:1b:05:
4c:30:38:fb:16:96:9c:d0:37:e1:34:a3:58:35:50:
f4:ca:13:46:5d:a8:11:9b:3a:78:3d:19:ef:79:c8:
dc:83:5d:52:de:ed:03:d6:1a:0b:8f:cb:02:4f:07:
b4:fb:3f:20:d8:44:32:ce:d4:e9:01:67:fb:a1:58:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:5E:21:0F:8B:B3:FC:F0:56:D1:46:40:F7:48:54:0F:E9:E1:E9
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:71:e5:7c:13:62:d3:a7:81:f7:be:e1:ae:9c:dd:b4:26:d5:
68:6d:b7:55:8b:8f:bb:22:ae:98:f8:0c:a6:4a:f1:54:c3:75:
05:ce:38:fb:63:c7:93:54:c5:1c:ea:58:06:7a:27:55:55:25:
f8:95:dc:bf:91:52:fe:19:4e:26:0b:9f:a8:2e:60:55:37:e8:
c0:bb:ba:e8:d7:e5:d4:7b:a0:5a:c0:a3:d8:62:26:27:e9:20:
12:e1:79:5a:8a:33:7e:03:fa:2b:3d:69:41:27:bb:4f:78:ab:
41:fb:40:96:9d:50:a0:d3:26:48:cf:f5:51:18:14:d4:4e:bb:
b7:26:4d:3b:46:92:cf:62:35:45:2d:ec:10:71:8d:90:e9:d8:
27:e2:be:e8:a5:25:34:26:ab:85:ed:81:6f:31:64:82:33:2b:
0b:1a:59:7e:a6:07:7a:08:d4:fe:83:2e:a8:93:81:7a:50:3b:
bb:87:a7:f7:d5:31:75:0a:13:ae:3a:53:21:85:e6:d1:4e:e9:
f9:7b:4a:0c:32:e0:dc:4b:cc:6f:ec:5f:9d:e5:eb:00:9e:1b:
97:88:c4:7c:78:76:02:3d:0a:04:87:ba:b5:83:38:06:a6:1f:
ee:72:8e:28:f3:cc:c6:ce:3e:c9:71:d0:03:95:36:84:33:98:
56:c6:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:47 2025 by rpki-client