Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: fw+tQVVFnwkUAptSzN7u0Fm2SyqNW68hc8rPl+wUzE4=
Subject key identifier: BC:28:B7:28:C1:49:33:80:0B:28:6D:6B:0A:52:F5:B1:14:2D:19:00
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 01967F0F6D729C0314DDD7B4D51B55DDB2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 0451
Signing time: Tue 29 Apr 2025 01:00:39 +0000
Manifest this update: Tue 29 Apr 2025 01:00:39 +0000
Manifest next update: Wed 30 Apr 2025 01:00:39 +0000
Files and hashes: 1: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: RL2MSkApF3JXHvjWr2fe2lIsMHjQYkr7JsmE0neERvs=)
2: a6Ca0db6IRWqpeQUf-mkPOP5Y6E.roa (hash: +wI+O0cNbhPu/Y/iWm666e3mQkbcXkl04FBEwBpeXro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:6d:72:9c:03:14:dd:d7:b4:d5:1b:55:dd:b2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Apr 29 01:00:39 2025 GMT
Not After : Apr 30 01:00:39 2025 GMT
Subject: CN=bc28b728c14933800b286d6b0a52f5b1142d1900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a6:03:22:b7:dc:05:e3:c2:9d:4e:eb:b1:0c:
ed:5f:99:4e:0f:ab:c6:94:dd:7c:64:b2:e8:cd:2d:
92:8d:58:90:db:49:e0:26:ff:f6:8e:f2:ca:bc:78:
27:37:2e:27:ad:31:55:b4:56:1c:9b:c1:eb:a9:3f:
8c:20:f4:73:8e:ba:31:da:4c:86:34:4b:7c:d2:cd:
2e:9e:a7:04:14:36:f1:15:6c:b9:52:f4:d3:b5:91:
ce:44:c1:e6:df:9a:7c:f6:6b:fd:c7:ed:81:92:0a:
1b:68:e8:5a:59:e2:5b:28:ab:1b:08:7c:90:1a:8c:
5b:0c:cc:a9:c0:73:37:c8:ef:5c:11:f6:e6:33:88:
8e:f7:25:51:52:9a:cd:af:49:fe:03:58:1c:cc:51:
69:b4:86:ca:1b:cf:73:c8:f1:08:56:83:c3:4f:21:
26:a1:3d:77:26:02:a2:29:73:34:a4:4e:8c:53:a1:
e4:ca:83:10:d6:77:5b:1b:59:0e:14:27:4b:9d:09:
e4:71:fe:97:69:8e:c5:e2:d5:42:69:3b:1b:20:e1:
3d:ea:0e:f4:69:50:75:6c:28:24:be:22:7d:7d:5e:
f1:d2:55:c9:60:10:a5:1c:b1:bd:ce:44:e0:41:e3:
20:2e:78:75:ac:35:92:94:5e:c4:66:68:da:62:e6:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:B7:28:C1:49:33:80:0B:28:6D:6B:0A:52:F5:B1:14:2D:19:00
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fb:e4:88:c7:30:2f:ef:fe:31:2b:7e:c5:32:47:8d:c8:6c:
50:ea:5b:b7:dd:f4:e6:3a:ec:f2:61:6f:04:6f:3f:b5:dd:a4:
d8:0c:97:7e:2e:6c:2e:4e:f0:39:29:89:10:28:d8:91:b4:23:
6f:2b:7f:6b:a8:c0:7a:5e:21:3e:e2:1a:1c:87:e5:b8:a0:96:
f9:21:cc:d7:fb:0f:f4:f7:03:57:76:68:d0:e8:ff:e7:c2:e8:
4c:25:93:07:f2:3d:3d:81:48:d1:25:6b:95:b5:3f:be:24:2d:
58:d8:03:04:50:92:b8:75:cd:86:b7:b0:f0:b3:3d:15:6e:d4:
b9:41:3c:5d:f2:86:e8:89:74:74:6f:a3:ba:05:d6:11:a7:16:
82:3f:21:d7:f2:e7:a9:40:35:be:d2:4a:5f:5b:bd:1e:16:24:
3e:46:de:a7:1b:ab:d4:e6:97:75:b5:99:10:3e:aa:d8:4b:45:
dc:fb:9f:f6:14:1d:04:35:54:ca:cc:a5:cd:53:77:4f:9e:de:
d2:ea:8f:db:c2:e5:ae:b5:fc:ce:4c:9d:a5:fc:54:a5:da:9f:
c8:8f:28:be:69:ef:4e:cb:f4:89:4a:25:8e:4e:f1:38:30:38:
7a:4e:9b:f7:de:9f:fa:5c:e5:19:d8:bc:b7:f5:46:56:48:da:
b5:13:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:06 2025 by rpki-client