Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: lS9tMpwM0VbvWBnyVomuWYA3x1i+pSbTIo2P0vn3U74=
Subject key identifier: 5A:48:F8:9F:77:73:69:5F:D3:21:7D:03:70:42:3F:74:80:73:CF:68
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 0196778D0E5A9DC3259B00CC8377879300B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 14:00:54 +0000
Manifest this update: Sun 27 Apr 2025 14:00:54 +0000
Manifest next update: Mon 28 Apr 2025 14:00:54 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: QFtMqOA6IkzztpIHIXpkbg5wBZ8JYkHjlirXmFcJB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:0e:5a:9d:c3:25:9b:00:cc:83:77:87:93:00:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Apr 27 14:00:54 2025 GMT
Not After : Apr 28 14:00:54 2025 GMT
Subject: CN=5a48f89f7773695fd3217d0370423f748073cf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:2c:e6:ad:7c:11:fc:ee:23:15:c9:ad:39:
f3:bb:a3:dc:56:ef:9c:38:d3:5b:82:52:ca:34:62:
9d:07:2f:54:8c:07:3b:48:b6:8c:a6:bb:e7:d7:c5:
11:2a:d7:bb:0b:cf:64:5d:18:f2:63:2f:47:ea:63:
b7:8c:7a:12:ad:44:29:f2:8a:df:6a:f6:ec:e3:03:
2c:79:4e:72:50:fe:79:31:96:70:5a:7b:6f:8e:ed:
19:a0:a5:f1:78:6b:0d:b6:c6:62:38:dd:18:6c:95:
d2:a7:0f:07:f7:f2:cc:b3:91:b2:71:6b:22:20:1e:
e7:2a:98:59:4b:44:15:14:5b:a3:66:54:ea:d7:82:
de:83:b3:99:c4:78:1a:f1:24:ef:4b:e4:73:04:41:
39:80:33:f7:d4:fe:bd:e4:61:b4:61:99:3f:b8:9e:
e8:f4:74:da:92:03:9b:1d:9e:5d:25:0f:c3:b6:04:
9e:f7:00:c9:65:54:aa:cd:c3:03:cb:0b:12:36:21:
ac:74:7a:fa:31:60:d7:8d:97:fd:78:e4:d1:31:1c:
ec:ec:e7:d1:26:98:1d:20:7a:14:c4:0c:07:e7:83:
7b:ee:48:ef:57:b1:88:d1:6e:bf:53:fb:60:80:34:
da:23:1b:bb:94:f7:b8:db:bc:c3:29:e1:53:61:c0:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:F8:9F:77:73:69:5F:D3:21:7D:03:70:42:3F:74:80:73:CF:68
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:eb:61:3d:23:5a:27:5b:f8:fa:be:76:16:ba:22:7b:92:
e4:b9:cf:d4:51:4e:3c:62:a6:72:9e:ae:f7:f0:3c:7f:b1:2c:
ad:bf:00:b4:e0:79:3d:20:25:cc:5a:89:fa:63:42:c3:97:6c:
7f:ed:14:70:27:67:31:b9:ea:24:92:b6:a7:9f:35:02:b2:6d:
fc:ca:c8:02:0e:98:f2:d0:77:b9:c0:88:09:3b:52:f0:cc:4d:
b3:e7:b3:7a:10:52:56:b5:2a:e0:59:f2:7d:cd:49:53:38:77:
dd:90:11:8b:d3:56:db:33:3d:71:b5:6b:91:55:6b:cc:5a:2b:
4f:ea:4b:79:97:75:02:b9:54:93:1b:4b:e0:9a:ae:cb:27:9b:
26:22:2e:ea:a3:60:34:d8:90:04:38:09:21:d3:b7:ad:67:c8:
9d:e1:d6:c3:8f:43:79:a2:a8:8a:61:8d:49:d8:7f:67:14:bf:
98:f6:aa:1a:5b:64:24:ce:f1:c1:ff:00:2b:a5:3e:f0:e7:95:
41:e9:66:b8:01:ec:2d:4c:fe:2b:a2:0f:f2:d2:59:0f:dd:68:
c8:a5:4b:e5:d1:e6:76:bf:d0:79:25:24:53:15:9e:9d:85:8a:
11:45:d1:78:40:85:23:47:5b:44:b3:b3:6e:ba:ff:2f:fc:b4:
b1:16:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:04:02 2025 by rpki-client