Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File: Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier: ZrPZGgVKSCPojrRkFuH+W6W447dusDJcHeHZB9NvUJ4=
Subject key identifier: F0:EE:A5:F6:75:DC:CB:BD:8B:BF:A2:A6:2D:4D:EE:84:56:D5:1C:2E
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer: /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial: 0196556E417EBEFF469E7DD8B6D71138A109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number: 02C2
Signing time: Sun 20 Apr 2025 23:00:11 +0000
Manifest this update: Sun 20 Apr 2025 23:00:11 +0000
Manifest next update: Mon 21 Apr 2025 23:00:11 +0000
Files and hashes: 1: HZBz5MrqBdAGlLzttgW8k7z_g5Y.roa (hash: vKALeCSvoIMsQY1cUM7A8I/fEETWOT998Li6zTAWX7w=)
2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: I1DOa+kMaAesn4KwptsxFqWSZ9rLXo3BIP99RKZ6IBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:41:7e:be:ff:46:9e:7d:d8:b6:d7:11:38:a1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Validity
Not Before: Apr 20 23:00:11 2025 GMT
Not After : Apr 21 23:00:11 2025 GMT
Subject: CN=f0eea5f675dccbbd8bbfa2a62d4dee8456d51c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:bb:c7:9c:fd:f5:e8:57:db:26:4c:58:7e:
ad:c6:ae:ac:43:49:ef:af:b0:71:1d:6c:7f:94:f8:
d4:5f:29:f1:8f:3e:3d:aa:c5:bd:3f:20:9e:06:23:
8f:ab:c5:f0:40:e5:41:42:60:1f:a4:52:e9:5d:70:
ec:a7:25:15:4f:ed:09:43:38:e3:9b:fa:e4:07:01:
be:d0:6d:06:15:23:fa:bd:f3:cf:cb:1d:b6:dd:02:
d4:fc:2a:59:c6:8c:06:05:25:f8:0c:25:1d:7c:68:
fb:fa:43:10:e6:6e:a1:74:75:8c:e4:38:99:87:43:
bf:d8:85:5d:aa:aa:f4:14:18:2e:05:87:28:15:05:
30:0b:12:11:1c:18:67:80:47:da:38:18:1a:f8:67:
28:5e:56:b1:e1:cc:df:75:0b:be:a1:ce:6e:2b:ab:
b9:2f:cf:4e:fa:35:3d:40:fb:b5:c1:25:7b:27:34:
72:92:e2:9f:79:04:5c:a6:f9:87:7c:5f:ea:52:c8:
fe:71:9b:2f:0a:5f:01:da:a0:37:00:65:5a:8c:b7:
f1:02:2c:a7:65:2a:3a:84:a2:76:e6:b5:05:58:69:
c1:49:7a:cd:c8:be:cc:6d:17:df:82:88:39:d1:bf:
c9:54:64:83:23:15:5a:01:04:f1:6a:0b:33:eb:60:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:A5:F6:75:DC:CB:BD:8B:BF:A2:A6:2D:4D:EE:84:56:D5:1C:2E
X509v3 Authority Key Identifier:
keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:16:82:ee:92:e8:44:b8:53:59:25:b8:35:71:64:dd:37:
bb:65:23:49:e3:b4:ae:76:b9:f9:23:b0:49:07:00:d1:eb:41:
44:cd:8f:94:79:0b:78:4e:aa:67:03:f4:27:23:d2:cf:72:f4:
02:ef:33:cc:ba:bf:c5:7f:f5:7b:4a:0b:63:57:90:fc:0c:8a:
07:8d:99:2c:44:bd:6b:1e:0e:fd:88:06:80:0d:b9:72:63:20:
66:78:d5:9c:90:e2:f9:0b:81:f3:b4:23:6c:93:e2:cf:18:1e:
8e:18:e7:ae:1c:b8:6c:22:b9:00:8a:df:e5:9c:e2:b9:47:e4:
4f:b3:18:3f:c5:0a:22:2d:99:e1:0c:fc:58:4c:ec:83:7f:26:
47:71:fe:1c:9b:f6:d6:7e:d5:f6:2e:d7:63:b7:14:00:33:8b:
c1:8d:c5:b8:bc:66:43:f2:5e:93:4f:e8:bb:46:3e:b8:49:20:
f9:22:61:5d:b1:53:7f:45:c2:9b:c8:b5:48:7a:93:08:ca:91:
79:8b:03:cd:cd:8c:0d:42:f1:c1:c7:9c:ed:85:da:b1:03:f2:
32:91:14:2e:66:88:8f:7c:72:29:71:c5:08:a2:d3:31:0c:5b:
5c:3c:b4:f9:10:75:f9:4b:59:8c:76:94:1b:83:36:f8:2d:33:
65:0c:e8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:09 2025 by rpki-client