Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
File: WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json)
Hash identifier: Yos3/WZsJGJAuwDoLaPxReLuFQIJLEfh0+h5NKLcklk=
Subject key identifier: 0B:F5:A1:87:17:89:6A:03:78:CE:F5:38:C2:95:FC:90:49:94:86:05
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Certificate issuer: /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial: 01967EA172C90D4E2438413DBE5546E28265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
Manifest number: 0FBD
Signing time: Mon 28 Apr 2025 23:00:31 +0000
Manifest this update: Mon 28 Apr 2025 23:00:31 +0000
Manifest next update: Tue 29 Apr 2025 23:00:31 +0000
Files and hashes: 1: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: u5mQ6KQraYhYHRinqw67Wk+MXmqO0SJMO2t9c40je/w=)
2: whcvZpTpzvlbrJt7O3nmd0nRfXA.roa (hash: uHBrfBFZVuPLEmFMxJBXGMMbHMabPdSiEixhmy3o8Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:72:c9:0d:4e:24:38:41:3d:be:55:46:e2:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
Validity
Not Before: Apr 28 23:00:31 2025 GMT
Not After : Apr 29 23:00:31 2025 GMT
Subject: CN=0bf5a18717896a0378cef538c295fc9049948605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:53:8a:9a:52:4c:fe:be:55:47:2e:fa:b9:
70:84:22:3d:40:1b:97:2d:22:d7:cd:15:b2:fc:c9:
79:db:95:1d:0e:b4:37:de:e4:18:49:ff:cb:4b:45:
08:7f:d2:3c:9c:da:01:73:8b:0a:e0:10:cf:18:48:
40:dc:67:29:9d:12:6b:d6:22:a2:db:ef:a7:39:bb:
2a:b2:4b:6a:98:64:7d:74:cd:fb:56:58:a4:43:dd:
2e:9f:c1:28:40:ad:69:5e:1c:99:0b:9b:d9:1e:a1:
39:d1:26:b6:db:3a:24:d9:ba:40:55:2a:2a:21:af:
71:68:b0:fb:d1:1e:87:48:1f:ea:e4:71:26:db:e5:
51:9d:05:08:13:fa:42:c3:34:32:4e:ce:c7:db:a9:
e7:05:43:7a:cb:ed:33:44:47:b5:d5:a1:69:64:01:
c2:72:1b:4d:a3:b4:cc:de:3d:6e:4d:72:b8:3e:47:
61:2b:ab:6b:19:08:38:2c:a5:cc:25:10:51:bc:65:
c1:df:cf:ba:e6:86:18:b8:0d:51:30:0e:18:63:e9:
c8:a4:76:fc:6d:26:58:6e:0a:28:4f:e9:9e:29:8d:
0b:f5:f3:5d:93:d3:f5:23:4f:6c:11:60:a0:4a:9b:
41:91:99:8c:db:22:4c:54:f7:4d:b8:e5:8d:49:96:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F5:A1:87:17:89:6A:03:78:CE:F5:38:C2:95:FC:90:49:94:86:05
X509v3 Authority Key Identifier:
keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0d:5e:f1:28:11:74:2e:30:41:f2:23:f5:74:d9:77:91:a7:
9c:23:a1:18:5e:42:96:7f:a7:3f:30:5b:19:f3:d5:28:26:49:
c5:18:b1:96:a2:52:70:d7:69:90:69:ce:8d:5d:39:b2:c7:b3:
32:f5:32:76:ba:c5:d6:1d:17:40:a4:ce:6c:23:e6:87:1c:3b:
73:3d:87:39:22:e2:9f:6a:a6:a6:fc:b9:9e:c7:50:3f:7c:1b:
f9:12:a0:f6:09:ae:31:ab:ec:e5:ab:66:47:4f:19:70:b7:f8:
77:24:0a:64:a3:0a:b9:1f:60:d3:6a:22:81:46:65:e1:cc:b4:
8e:98:8a:fc:b1:c0:0e:4d:14:4c:d2:a9:47:2b:fa:be:0b:6d:
8c:3d:5b:13:aa:cd:1d:a8:4c:5b:79:9c:2c:67:52:49:87:6a:
7b:7d:58:00:da:55:e6:da:2e:a7:d5:a7:8d:8d:57:fe:06:10:
6a:8a:2d:6b:b7:a1:84:58:a4:9a:16:3d:43:49:32:2c:06:22:
7c:2b:28:cd:e2:bf:b4:a3:ad:16:23:ab:db:84:de:d7:61:b5:
0f:e1:fa:73:ee:35:e4:a9:db:5d:05:f2:f6:62:47:c4:07:e9:
3e:6c:cc:99:10:29:c7:24:3d:41:8e:3e:d8:ca:9b:7e:98:36:
e1:d4:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:57:23 2025 by rpki-client