Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File: WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier: 8D6edr41u05FO0wkHFwg9GJtbtx3in9f5/7maBDUd6Y=
Subject key identifier: 2A:CA:07:E2:2B:77:B7:CF:92:11:E4:90:97:7E:15:9D:BB:CA:8E:51
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial: 019658389D821F038A6B94E1BAB01539AD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 12:00:27 +0000
Manifest this update: Mon 21 Apr 2025 12:00:27 +0000
Manifest next update: Tue 22 Apr 2025 12:00:27 +0000
Files and hashes: 1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: vfZ3ftDfYnqa9c+z23+ecspK1BkxBJatrOaNl2U/jIA=)
2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:9d:82:1f:03:8a:6b:94:e1:ba:b0:15:39:ad:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Validity
Not Before: Apr 21 12:00:27 2025 GMT
Not After : Apr 22 12:00:27 2025 GMT
Subject: CN=2aca07e22b77b7cf9211e490977e159dbbca8e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:4d:a9:55:af:1d:9e:a0:7c:9d:4f:5c:07:
30:dc:32:b4:db:0b:c7:fa:f7:8e:93:94:d3:2a:d7:
b6:96:7b:4b:ed:ff:3b:25:22:1c:05:ce:cf:58:83:
58:a7:b4:95:3c:ac:51:76:56:02:d8:4c:f9:02:02:
98:0b:a3:80:26:2d:d0:50:13:d8:2c:4a:c4:f7:e1:
4c:a8:18:01:5d:f1:45:19:2d:d2:20:02:8d:41:8b:
af:84:58:0e:92:b7:95:14:99:c4:57:61:00:bb:8b:
10:48:20:c9:96:6c:88:02:2c:75:c0:22:6f:a5:60:
f3:09:6f:fa:17:da:96:58:fa:b7:93:67:a5:c2:73:
1c:1a:eb:80:56:91:cf:d1:0d:65:c1:cf:24:10:73:
2a:a1:5a:f1:32:20:dd:a7:e0:9b:62:1b:8a:7d:43:
81:a2:7d:2d:53:cf:0a:23:e9:e4:10:51:69:14:01:
fb:1b:32:13:9a:56:b8:ba:00:f5:f3:55:5e:6d:6d:
13:74:be:11:6f:9d:0e:d7:aa:8e:18:32:fc:28:3b:
1f:2a:33:f0:34:ae:d8:79:90:f0:56:3c:dd:88:6d:
f1:92:12:6f:e6:46:4c:7c:a5:7e:2a:44:5c:df:f0:
5e:39:51:a8:ec:49:fd:eb:1c:fc:29:a8:40:ee:92:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:07:E2:2B:77:B7:CF:92:11:E4:90:97:7E:15:9D:BB:CA:8E:51
X509v3 Authority Key Identifier:
keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:d4:6f:7e:14:9c:c7:b3:bd:a4:e3:3a:bb:5c:3d:09:39:
6f:e9:2b:44:bb:da:49:0e:e9:c3:39:84:77:76:14:d7:89:e1:
41:4e:a1:3a:4c:23:1b:3e:59:a0:83:16:96:80:33:6d:38:9e:
a9:be:74:d3:7a:ea:46:e5:eb:51:f7:b5:b4:fd:03:43:81:16:
0e:c6:58:c8:f1:6f:a2:76:bb:62:e7:72:f5:43:61:d3:ae:70:
aa:b2:83:1a:b9:6b:4c:f9:40:84:02:17:49:b0:c2:94:32:bf:
96:c5:de:d3:07:45:01:7f:5d:38:2b:96:e7:0c:04:6d:f7:c6:
94:eb:d2:6e:3a:63:d9:37:5f:e4:f4:c8:a0:1d:8d:2f:19:a2:
03:51:81:44:5f:35:b8:4b:ee:88:b9:53:b8:f6:52:4e:81:c9:
ff:c8:1f:9a:9e:86:b0:b6:41:f7:27:8a:68:ee:84:e6:d0:2a:
01:4c:e5:40:db:b8:1c:a7:9d:74:f6:0a:3c:56:7e:4e:36:68:
ba:13:08:62:77:3c:e1:91:56:03:80:c0:19:24:00:cd:1e:1f:
8d:ca:b8:2f:25:05:db:7e:bb:04:da:36:6d:f4:2c:ce:8f:eb:
65:08:e3:29:3b:77:cb:2c:14:e4:db:a4:64:cc:c6:a9:72:e1:
f0:f8:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:17:39 2025 by rpki-client