Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier: /jEelRKRHKrhoAGRIgy1Nx2EzgE13t91n+8/PvmlRPE=
Subject key identifier: 3D:42:A1:0C:DC:10:DE:26:8C:2A:7D:91:F7:27:8A:E5:10:DF:06:01
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 01964AEB0A8F0BC69D5301BC49FCCACEB51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number: 0411
Signing time: Fri 18 Apr 2025 22:00:39 +0000
Manifest this update: Fri 18 Apr 2025 22:00:39 +0000
Manifest next update: Sat 19 Apr 2025 22:00:39 +0000
Files and hashes: 1: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: 3fJyQDDgAnoblQOpucr28sYuJMlxLsmP5h2QKP4Lg+I=)
2: kaNw-FHXt38Mw3A3i3ZxTrdgH0U.roa (hash: ED9csh7TrZ7bmaYOf//aESLX76NQ2OO78tAxi9fibZE=)
3: zTtBYZjfsC0VO3m1kQopjfHbzCI.roa (hash: 1RfpmUJ+OhBzj8PIsZiJ3NArFEOu01QxVGauoTNckNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:0a:8f:0b:c6:9d:53:01:bc:49:fc:ca:ce:b5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Apr 18 22:00:39 2025 GMT
Not After : Apr 19 22:00:39 2025 GMT
Subject: CN=3d42a10cdc10de268c2a7d91f7278ae510df0601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:b5:ba:e4:92:fe:22:fb:fd:3f:41:5b:13:
3c:90:34:45:b8:39:cd:43:20:74:7a:cf:0b:ae:88:
08:05:42:bc:2d:16:a1:aa:a3:af:23:48:25:ca:5c:
ec:cf:17:2a:fc:ed:e3:4d:31:f4:47:f2:f1:b3:cb:
c2:7c:7a:dc:00:84:ba:19:81:10:ba:bd:29:3e:08:
62:02:f4:05:62:4e:fa:9f:22:b3:91:d5:f1:b6:56:
f0:da:1b:91:b6:8f:2c:80:cb:de:c5:67:66:23:d5:
f4:aa:48:e0:5f:96:a2:1b:d5:70:57:88:e3:94:4d:
89:53:d1:5f:ca:98:c0:0a:18:fc:58:fb:44:28:cf:
97:1f:be:13:db:15:34:24:a9:c9:b1:3b:f4:be:e9:
60:00:a9:23:1b:de:a0:23:76:a4:3e:72:50:60:0e:
7c:8e:2a:81:24:51:05:75:a7:9b:44:ca:e7:02:d0:
9d:da:99:64:fa:f9:71:d1:42:b5:2d:7b:11:d0:24:
e1:4d:03:0a:d3:58:ee:dc:f6:e4:33:07:6d:2c:ae:
79:c8:1d:65:87:a0:e7:d3:00:02:86:18:94:c9:8a:
ac:37:7f:da:ab:b1:b3:6e:63:62:6b:9e:85:76:88:
ec:da:d9:9d:99:c7:ae:07:8c:d3:54:c9:da:1c:de:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:42:A1:0C:DC:10:DE:26:8C:2A:7D:91:F7:27:8A:E5:10:DF:06:01
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:53:89:61:9a:96:ed:90:2b:22:ff:1a:31:b2:4e:65:8e:
93:13:05:90:ad:f2:a3:23:81:3f:e3:47:f5:e5:97:5f:96:d4:
33:97:10:4b:bb:31:9e:49:ed:36:ff:bf:1e:45:d9:9c:04:d1:
a7:13:65:12:42:83:4b:3b:0a:4d:34:84:54:4c:7e:64:af:55:
8a:3c:72:16:f6:f1:0b:46:b5:9a:09:9b:53:d0:a8:f7:26:b7:
a0:78:47:64:84:ad:c7:5a:80:bb:71:e0:58:0d:88:ab:ad:0e:
b2:9a:ec:63:f6:52:f8:dd:47:a5:d9:34:db:a8:39:75:26:b1:
96:03:1a:3c:55:4a:74:11:39:3e:92:70:ac:f3:53:45:fb:d1:
de:e3:3d:85:73:40:0f:56:d5:5a:69:4c:0b:0a:09:80:b7:b2:
33:c4:89:84:5b:01:9b:c9:46:d7:82:ea:e2:69:ad:c7:5a:c6:
55:14:16:76:7a:c7:43:88:90:f0:c9:64:47:a7:c7:46:1f:da:
58:e0:99:f9:21:55:6f:54:15:06:19:bf:0d:be:ce:55:b3:ba:
48:bd:3c:da:92:83:09:cf:50:c1:c4:dc:68:83:a4:bd:d5:0c:
ef:2a:a9:38:2e:74:e8:62:fa:90:86:15:ca:2c:38:16:0f:60:
6f:85:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:07 2025 by rpki-client