Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier: 8796OkoQSuKaDWJ/Cd0vm3LpcHusdleX9D4qzg4OJuA=
Subject key identifier: 74:35:96:BE:FF:FC:91:41:53:67:EC:FD:BB:6E:59:07:A8:25:E3:A0
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial: 01967869195D68B49F12B9EB4B7272BFDFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number: 1477
Signing time: Sun 27 Apr 2025 18:01:15 +0000
Manifest this update: Sun 27 Apr 2025 18:01:15 +0000
Manifest next update: Mon 28 Apr 2025 18:01:15 +0000
Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: aDqW/T4FG4N7yy4GloxGwhnLuEMEmtyC7REY7ViP1pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:19:5d:68:b4:9f:12:b9:eb:4b:72:72:bf:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Validity
Not Before: Apr 27 18:01:15 2025 GMT
Not After : Apr 28 18:01:15 2025 GMT
Subject: CN=743596befffc91415367ecfdbb6e5907a825e3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:2a:06:2d:52:7a:d2:e8:51:10:22:b8:9e:
73:0f:b6:11:c3:0f:12:fd:26:7c:29:17:60:a0:5a:
00:0a:83:62:51:3c:92:96:a6:86:18:19:b1:21:5f:
43:2b:12:90:f7:83:14:5d:93:1e:28:63:9a:d7:03:
7b:14:99:30:36:d1:c9:67:5d:ee:f2:f6:49:10:40:
34:7c:7d:c0:08:fb:8f:b8:76:aa:4e:15:b9:d8:42:
48:ba:f1:78:39:c0:92:d5:cc:7e:6c:d0:16:99:a5:
b5:6b:92:06:b8:88:b4:4b:d7:61:71:4d:b9:d6:af:
4e:e6:6f:ca:70:fd:40:55:be:dd:61:32:a5:fc:4c:
b7:81:e9:7b:80:71:6d:d3:37:fa:0c:59:71:6e:e7:
39:54:f7:b4:3a:e4:88:2f:df:d5:4f:5c:1b:1a:75:
7b:ff:35:fc:22:4b:09:b8:11:4e:27:3c:ed:f9:67:
6a:c3:53:9f:43:06:a7:11:fa:b7:eb:6b:68:4f:e5:
c3:ba:62:a9:ec:7a:e4:87:33:40:14:56:9e:5a:20:
bd:5d:45:e9:91:b3:0f:3f:97:65:5a:a4:4c:d6:64:
62:d2:1a:f6:73:e7:95:78:99:08:ce:e5:56:89:2c:
ce:3b:64:48:40:a5:2a:be:6e:b9:6e:f5:43:1c:2e:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:96:BE:FF:FC:91:41:53:67:EC:FD:BB:6E:59:07:A8:25:E3:A0
X509v3 Authority Key Identifier:
keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:ff:ba:5a:85:21:37:50:08:2b:e7:85:aa:f5:04:1a:5f:
07:72:b2:06:68:86:af:00:98:a7:65:79:9b:61:c8:d8:bc:0b:
26:09:fe:d0:89:c7:e7:14:77:1b:64:5a:e1:ca:96:fa:dd:18:
04:f4:9d:e3:80:18:6f:0c:f0:96:aa:1b:75:50:82:aa:8c:1e:
85:ff:59:0d:50:9e:f2:82:57:f8:72:35:ee:b2:96:28:dc:fb:
e2:8c:f3:02:6c:84:cf:d4:96:82:d6:23:e1:9d:f8:bd:55:90:
e6:4e:c3:4e:5c:e3:cc:b7:a2:e5:c8:8b:9e:6f:97:fc:98:47:
50:24:f1:53:d1:52:ea:5b:df:ed:88:0c:fb:dc:09:98:a9:0c:
15:49:22:8b:7b:5b:89:66:f7:1c:d7:58:bf:7d:c6:da:bf:2f:
be:bb:0c:55:45:cd:2d:c4:63:b0:0d:42:f9:4a:6e:2d:2a:78:
f9:2c:61:5e:4e:e9:b2:8d:b7:06:a4:72:9c:67:d3:b1:d9:29:
79:6f:e4:3d:f3:a7:9d:16:6d:f7:52:ba:be:fd:7f:97:38:39:
aa:cd:28:a7:a5:7b:59:a4:0b:f3:59:49:b0:19:37:e3:de:31:
1c:ce:18:14:bb:c9:20:74:3c:9e:26:79:79:7c:47:08:49:f1:
f5:8b:60:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:02:25 2025 by rpki-client