Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier: UeL3UpPSbv+FkLqcsKDPMQ9HY3pQErGDodlzX0etNF0=
Subject key identifier: 53:E5:6D:35:20:33:3D:9D:0F:77:E1:4D:FC:7A:CC:09:87:66:D5:74
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial: 01965BA7F5595FB42515271E6DC4EC212103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 04:00:56 +0000
Manifest this update: Tue 22 Apr 2025 04:00:56 +0000
Manifest next update: Wed 23 Apr 2025 04:00:56 +0000
Files and hashes: 1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=)
2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: k1ung5H/ihLb7GoVIf6SthE2MRszS26UjSR2B8H1uvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:f5:59:5f:b4:25:15:27:1e:6d:c4:ec:21:21:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Validity
Not Before: Apr 22 04:00:56 2025 GMT
Not After : Apr 23 04:00:56 2025 GMT
Subject: CN=53e56d3520333d9d0f77e14dfc7acc098766d574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:c7:d5:5b:88:1d:12:4e:cc:2a:8d:38:b1:
01:8c:6b:ee:f1:13:16:a4:0b:17:23:18:da:16:9c:
9b:63:3a:04:b9:33:e1:9f:e6:fc:fa:a1:fa:31:02:
e2:0a:af:d7:f5:bf:6d:8b:90:1b:e1:16:73:d5:1e:
db:79:cb:5c:9a:9c:03:6d:c7:53:00:1d:24:ca:1c:
e8:43:92:5c:cf:82:5e:1b:17:dc:f6:14:36:86:93:
8a:9c:8f:81:f7:16:1d:34:1a:5d:fe:c1:cb:25:e3:
31:4f:ec:0c:44:9c:62:c4:35:cd:89:bc:a8:c1:4f:
d8:38:01:37:5c:bb:fa:94:d8:87:18:c6:50:0f:90:
7d:a8:4d:cd:34:2f:57:74:2a:35:48:4a:c0:d8:1e:
20:b3:54:d7:d8:ef:a4:04:e2:1e:84:a5:5d:38:dd:
c5:1e:d8:81:e7:d2:7a:f0:71:be:a7:b8:da:44:5b:
9f:34:cd:0e:a5:50:4e:8e:66:21:2b:18:63:58:40:
cc:e1:cc:f8:c2:f7:93:d9:d6:46:09:e2:d1:a1:bf:
88:c5:65:2c:c6:09:23:f3:3f:6d:d2:ed:52:cf:02:
61:8f:c7:b4:f7:d4:ab:f7:4b:69:b9:aa:f0:e4:ad:
94:7b:8c:65:1d:c9:9d:57:46:84:4f:e1:4a:58:b0:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E5:6D:35:20:33:3D:9D:0F:77:E1:4D:FC:7A:CC:09:87:66:D5:74
X509v3 Authority Key Identifier:
keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ba:32:cf:be:3b:8a:ce:b6:35:4c:72:ea:20:dd:bf:2a:b8:
96:98:1c:cb:78:0b:df:3c:6d:fb:69:53:5c:2e:65:18:55:35:
1b:dc:ef:2b:b1:54:46:67:c1:80:c4:e7:ea:70:62:72:cc:94:
b0:64:95:3d:9a:09:08:30:74:84:f9:68:48:63:7f:ac:03:3d:
90:be:0b:28:cd:c9:67:d0:76:37:b4:0a:e7:31:49:53:1a:6c:
c7:a7:4d:fd:ca:5b:e4:fd:75:08:51:26:45:50:78:80:f9:b8:
2f:cd:8d:76:14:5f:f9:11:ef:0e:79:7f:68:4c:3f:78:af:10:
29:43:3d:9c:46:5f:24:40:e9:b6:10:e8:fd:af:7f:16:58:f5:
9c:3d:8d:5f:52:fd:0e:0f:ba:b5:6d:23:f7:df:68:56:57:b7:
18:16:3a:39:d5:b9:01:6a:c4:4f:49:e7:c6:8e:dc:e8:be:d4:
ef:81:70:75:89:06:86:96:b3:e7:a2:44:91:bc:c5:a5:87:96:
69:19:39:e7:40:57:c9:a8:b6:4d:aa:d0:89:5b:8d:17:63:98:
2e:82:c3:ce:5c:0d:f5:ed:cf:d5:7d:2d:f6:bb:fc:86:83:67:
95:bc:a2:7e:2b:d4:e8:b2:26:af:1a:1c:80:a1:f4:4c:49:ef:
10:bd:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:09 2025 by rpki-client