Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: RRb4FkN4B5fxxkPXVCba0YiULOdlWw0hIpQ/QMIyoHE=
Subject key identifier: D4:52:7A:22:8A:8F:FE:68:84:E3:FD:57:76:1D:A0:D1:05:F9:7A:B5
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 01963FC29D2F65969830DEEFB3B8BA7131E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 0259
Signing time: Wed 16 Apr 2025 18:00:40 +0000
Manifest this update: Wed 16 Apr 2025 18:00:40 +0000
Manifest next update: Thu 17 Apr 2025 18:00:40 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: 41JJ2qKYIOmrnvhx+kizbXd1pcnKpyhUtbK3CxYBSZ0=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:9d:2f:65:96:98:30:de:ef:b3:b8:ba:71:31:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Apr 16 18:00:40 2025 GMT
Not After : Apr 17 18:00:40 2025 GMT
Subject: CN=d4527a228a8ffe6884e3fd57761da0d105f97ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:23:da:3a:14:8a:f4:71:52:2f:85:32:fa:
fb:50:7e:34:a8:52:35:a7:c9:8b:89:48:a6:41:b7:
fc:4b:5b:8f:37:3f:39:22:9f:08:53:b8:27:d9:d7:
46:39:a2:f8:13:87:76:4e:e9:87:13:42:9a:f1:c6:
d1:c8:b1:48:15:c4:f3:14:eb:53:2e:c2:0a:a1:43:
8a:27:ef:7f:99:af:15:8f:a0:09:f7:29:69:84:00:
b1:3d:52:ff:86:1d:d5:01:34:f9:b0:5d:d2:42:ed:
86:80:f2:c8:b5:ca:ed:c0:5c:d3:61:39:24:e9:6f:
f1:71:58:33:d7:5c:5c:5c:e3:d3:3e:61:eb:d9:e8:
b6:96:2a:c9:71:ea:af:fa:7d:66:7a:45:0d:4d:95:
c4:4f:0a:35:d8:12:21:6d:b6:c6:4c:8e:c2:bf:a2:
6d:9d:3a:6d:4a:7e:59:f2:f9:16:9f:88:5d:85:0e:
60:af:70:c5:19:ff:60:e6:e0:d6:e8:15:c3:b2:93:
ca:c4:4d:5e:6e:8b:cf:15:e1:95:fc:5f:dd:b1:df:
79:28:87:f9:a9:39:ca:e4:20:61:37:53:ff:a8:9a:
b4:4b:5e:0d:62:f4:cd:09:c2:0f:32:a4:8b:2f:15:
e9:6f:d6:d3:41:80:45:4b:01:e2:d5:a5:7f:72:ff:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:7A:22:8A:8F:FE:68:84:E3:FD:57:76:1D:A0:D1:05:F9:7A:B5
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f7:f1:d2:71:60:ed:a8:49:d6:02:ae:9c:b5:26:ee:3d:ea:
66:07:8d:f5:32:a1:5b:89:b3:8e:d8:b4:20:b8:c7:7d:2e:78:
51:36:1c:38:7c:70:a4:aa:40:98:5d:5d:83:4e:23:69:97:70:
db:d9:3f:74:8b:84:89:9c:e0:85:bc:66:9b:a0:35:46:4b:36:
34:c4:82:c8:cc:05:0f:a4:b1:4e:b8:0b:41:a7:f9:78:56:27:
a7:23:28:00:3d:5f:fc:5d:1b:08:20:14:d1:05:3d:72:6a:cf:
57:71:7e:f1:11:17:43:d6:c6:00:f2:ea:e8:49:f0:96:70:0b:
65:ef:93:04:82:fd:44:a3:ff:a8:33:d0:8d:ff:0c:51:cc:a5:
6f:c9:8b:4b:32:53:e8:9b:e9:21:c8:af:45:93:b8:87:94:52:
a3:7f:a3:3b:20:96:73:13:db:97:d9:e5:a4:dd:f5:12:7f:fc:
bc:fa:a5:eb:c3:61:7c:93:2a:ae:ee:e8:a8:c0:b8:ca:de:b5:
fa:12:49:49:19:3e:01:12:d9:01:a3:46:eb:3e:c9:73:bc:a0:
b1:23:7a:a9:be:62:0f:a0:b1:65:27:da:a6:88:bb:be:25:d3:
35:f5:d6:b8:66:9d:4e:28:5d:24:97:f0:44:91:f1:33:65:76:
98:18:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:24:03 2025 by rpki-client