Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier: fE5a+GnyhfT4UOCO5URNVGzFQkiIpU6dnuKmF3ntnPI=
Subject key identifier: 44:B8:5D:E4:8F:82:92:DF:AB:D3:54:6F:45:02:6D:D3:00:AA:34:4D
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 01958BBBC7F4B54871B38F2C832D5B752CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number: 03AE
Signing time: Wed 12 Mar 2025 19:01:34 +0000
Manifest this update: Wed 12 Mar 2025 19:01:34 +0000
Manifest next update: Thu 13 Mar 2025 19:01:34 +0000
Files and hashes: 1: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: wW3aZk9CXIGpCmBvp4PO2ZSAEUP4giPObpyyEB9J7B8=)
2: kaNw-FHXt38Mw3A3i3ZxTrdgH0U.roa (hash: ED9csh7TrZ7bmaYOf//aESLX76NQ2OO78tAxi9fibZE=)
3: zTtBYZjfsC0VO3m1kQopjfHbzCI.roa (hash: 1RfpmUJ+OhBzj8PIsZiJ3NArFEOu01QxVGauoTNckNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:c7:f4:b5:48:71:b3:8f:2c:83:2d:5b:75:2c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Mar 12 19:01:34 2025 GMT
Not After : Mar 13 19:01:34 2025 GMT
Subject: CN=44b85de48f8292dfabd3546f45026dd300aa344d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:67:c6:18:fc:5f:3a:16:72:ad:43:d3:f8:
58:00:04:f9:75:fc:18:63:67:8f:1a:cf:cc:00:ba:
d4:29:d3:e7:da:99:5b:d0:9e:74:ca:c6:26:be:84:
43:0f:bc:df:de:4f:83:67:5f:44:7b:03:56:cc:e3:
27:65:a4:df:f6:8b:da:2f:e4:37:86:ed:8a:bf:04:
4a:f0:31:6c:56:e6:42:3d:a8:9f:7b:bd:1c:4c:32:
a1:c4:a2:fa:5f:e8:4a:d9:31:de:17:20:02:03:bb:
18:44:6a:a4:9f:43:f8:96:14:aa:1b:6c:75:58:48:
9c:ef:c3:7f:cf:d4:6b:56:55:33:ec:cf:c5:65:41:
49:4f:33:20:cf:99:a5:8e:cf:87:d9:9d:f3:6e:4f:
51:6e:37:b0:23:7d:a0:19:bf:05:56:b0:c4:33:6f:
37:98:07:30:75:63:0b:59:5a:b0:1c:f3:a7:4e:93:
98:b2:ba:13:da:1c:0b:75:d4:6d:20:65:97:6e:48:
09:4f:17:87:a5:28:de:3b:4c:e4:cc:73:fd:d7:d1:
99:64:9c:9c:4f:61:3f:ca:f9:85:7c:9d:45:86:60:
18:84:d1:14:c0:e4:0d:14:5a:89:92:77:62:e2:3e:
03:65:d6:a8:b7:05:0d:21:e3:8a:75:c0:ab:d2:4f:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:5D:E4:8F:82:92:DF:AB:D3:54:6F:45:02:6D:D3:00:AA:34:4D
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:7f:22:d8:6e:0d:e6:6e:c8:e1:36:f6:96:ca:db:76:38:
16:03:3f:fa:fa:75:c1:7d:e8:c8:a3:de:b9:e6:66:4d:11:17:
af:b1:3d:69:ae:87:a7:4d:7b:6b:96:dc:43:96:44:78:11:75:
9a:ca:ee:b0:53:ba:92:09:5b:68:aa:a6:b7:d0:5d:d7:f9:ba:
43:f6:61:4d:92:ea:e1:ab:d4:e8:9d:ba:68:22:5d:2c:fe:f5:
0d:63:92:d9:6a:f8:f0:c8:c6:a0:4b:fd:f7:dd:ee:d0:80:8d:
eb:73:d9:af:72:62:24:0f:d3:1c:59:1b:81:a1:0f:c2:d7:83:
e9:86:0d:8d:47:79:84:9f:dd:bb:3c:6e:44:7d:c7:14:6b:5d:
a6:b4:ee:8e:3a:f7:bf:30:04:5e:8c:11:c8:f2:61:09:92:f3:
91:14:d0:68:79:7c:56:26:e0:19:64:96:c4:73:09:a4:aa:1c:
bc:db:37:00:d3:d6:e9:f3:eb:1f:4a:dd:a1:8d:9f:b5:78:70:
58:bf:d5:9e:13:1d:43:b9:5e:97:8f:2b:38:ff:26:35:6c:13:
ae:06:a0:54:32:73:7b:80:10:cc:03:e1:93:20:56:e9:54:3a:
f2:a0:3c:30:ed:74:3b:ac:c9:42:4d:fa:58:7e:6c:4b:61:dd:
b2:9e:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:28 2025 by rpki-client