Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: HEDthmzDVFeUQh+6wbyP0WE8DvubKpjFh8Dt0sq8d6w=
Subject key identifier: 1C:A4:F8:39:5C:DA:B2:67:F6:C0:10:68:74:0E:3A:01:C6:B6:97:49
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 019659F0533D8714398AE587C28CC587C726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 0178
Signing time: Mon 21 Apr 2025 20:00:44 +0000
Manifest this update: Mon 21 Apr 2025 20:00:44 +0000
Manifest next update: Tue 22 Apr 2025 20:00:44 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: 0FVBfHiIFOidWvttXKXkY88hL+j4ZeGi4Em32duOOMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:53:3d:87:14:39:8a:e5:87:c2:8c:c5:87:c7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: Apr 21 20:00:44 2025 GMT
Not After : Apr 22 20:00:44 2025 GMT
Subject: CN=1ca4f8395cdab267f6c01068740e3a01c6b69749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:f9:d1:29:0a:96:c9:d9:69:32:62:0f:9e:
d4:b3:c6:f6:18:85:b1:a8:23:19:5a:b7:61:47:6c:
f7:a7:0c:69:d6:44:f5:c3:92:ca:97:f9:b4:5a:e6:
47:b1:b0:a0:23:82:5d:12:e4:cf:7e:e5:08:da:3b:
69:d8:88:10:ef:37:27:56:5d:1b:0e:91:af:d0:5b:
b8:cf:e5:f3:c1:5b:db:03:74:86:54:99:a0:dd:88:
82:e7:30:7d:ec:26:f5:7d:54:09:72:7f:57:72:e4:
ae:df:78:30:06:9f:39:b5:a3:e5:b3:6b:d0:b0:54:
47:d9:3b:0b:4d:45:ba:70:7a:74:6e:90:4a:4a:58:
da:8d:ef:7d:e0:02:79:a6:dd:6b:04:93:7c:62:10:
13:33:93:17:84:73:f7:99:d4:39:87:05:f5:5d:84:
bb:cc:21:6e:71:31:20:a0:af:eb:d2:f2:a9:03:91:
97:e1:11:ea:a4:55:ac:2d:1a:f4:76:15:94:4f:69:
6d:cd:d5:55:08:f2:b9:15:a0:ea:69:ec:68:2a:da:
a0:29:b8:26:20:73:29:ee:76:74:0c:fd:6d:31:e0:
9b:4b:9d:f3:b7:0f:cb:6e:0e:71:49:7e:ee:b6:ab:
3d:91:1b:74:fc:4e:6d:05:ed:7a:39:7a:89:6c:a2:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A4:F8:39:5C:DA:B2:67:F6:C0:10:68:74:0E:3A:01:C6:B6:97:49
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:64:b3:69:49:1e:4d:15:25:71:26:88:b6:43:71:8f:b2:65:
98:78:ef:89:e7:a4:3d:8d:ca:db:b1:66:84:74:15:65:aa:67:
d5:4e:bc:31:68:94:c5:31:66:c6:71:9e:ea:bd:87:76:6a:f4:
91:63:44:c3:ad:33:2c:ee:e2:ae:75:dc:d2:ec:4e:9b:cd:b6:
dc:42:2e:4d:e9:3e:53:ca:f3:c6:b6:42:65:e9:cc:7f:5f:0f:
51:b2:ff:e9:b4:a0:9c:1f:f9:e4:33:ac:3d:28:2e:9a:aa:75:
e7:97:71:76:0f:a7:63:d3:08:f5:a9:5f:54:cf:dd:e2:c8:68:
78:e9:ae:85:12:b0:1e:85:80:7a:dc:e3:84:f5:06:7c:65:30:
39:dd:4b:4e:7b:42:e2:c4:3a:44:ad:8f:3c:cd:35:3e:90:2a:
26:bd:c3:9d:6e:b4:ac:4e:b2:84:d5:21:96:29:7a:12:99:89:
00:d5:80:b4:d7:4f:09:f7:f9:de:32:69:a1:2c:a7:01:aa:f1:
b4:82:11:a1:91:f8:2c:be:5c:1d:60:f5:80:7e:e6:9c:82:3e:
57:56:8e:07:fd:41:75:42:4d:e5:58:af:e2:7f:fc:69:94:e0:
c5:de:e2:f1:0b:ac:87:83:a3:9a:bd:e4:dc:2d:54:b8:45:70:
1e:d8:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:47:57 2025 by rpki-client