
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: sWK7acEarbRpPBu799cW6Q+TnuA/2FyCzGTTHQi87FM=
Subject key identifier: 10:E1:DB:48:9A:F8:E6:C4:01:E5:47:E5:11:7B:DD:FE:2D:9E:1B:2F
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 01962C05930F3512A7CA0933192FBC192163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 1493
Signing time: Sat 12 Apr 2025 22:01:24 +0000
Manifest this update: Sat 12 Apr 2025 22:01:24 +0000
Manifest next update: Sun 13 Apr 2025 22:01:24 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: nhs8L+fTaMqbFN2fDI/LIZcFLtkV/fRTxx4dhjEKNAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:93:0f:35:12:a7:ca:09:33:19:2f:bc:19:21:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Apr 12 22:01:24 2025 GMT
Not After : Apr 13 22:01:24 2025 GMT
Subject: CN=10e1db489af8e6c401e547e5117bddfe2d9e1b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c4:36:d3:9f:79:ea:14:f4:df:ab:b0:f8:2d:
c0:1f:e2:cd:fa:14:0a:7a:0c:76:f9:36:d0:9b:58:
4d:bb:26:a9:9a:b9:72:ee:ce:3d:c7:56:a3:99:24:
ef:cc:e8:e2:cc:89:02:01:1e:3b:e4:4b:35:87:d3:
9d:d9:c2:d4:76:be:2a:9e:cc:ce:b5:59:74:fe:fd:
58:14:58:a5:a7:50:86:33:b6:93:ff:52:88:3e:dc:
b4:d5:7c:72:fd:a1:8a:10:8a:1e:5f:7c:4d:a8:eb:
f2:f2:c9:df:7a:7f:4e:a7:2c:f2:c1:67:87:e4:66:
96:2a:da:3c:84:cc:4e:5e:db:54:c3:38:e2:e4:dd:
96:54:f8:05:7f:91:50:b2:6d:68:45:e9:20:b2:52:
6c:99:28:5b:78:94:0c:97:f8:3c:01:d9:74:3f:60:
73:da:a7:22:c1:72:e2:09:6d:20:e1:de:a8:51:d7:
d1:0a:08:11:d5:03:6e:3c:96:a2:09:be:8c:f5:b1:
ef:c4:67:9d:18:c2:45:da:1b:e7:20:60:13:d5:23:
d2:cb:15:36:45:0d:90:88:69:f8:d2:7e:93:d9:51:
f0:68:c7:8d:e3:13:c1:f2:3b:84:c1:78:a1:02:b1:
07:0e:38:88:b6:7e:30:7c:96:9b:21:d6:0d:b5:35:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E1:DB:48:9A:F8:E6:C4:01:E5:47:E5:11:7B:DD:FE:2D:9E:1B:2F
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:57:b3:49:fc:5e:55:ed:f4:0b:58:69:77:b7:81:6f:00:
bf:4e:91:88:82:ce:cb:f1:80:fe:19:69:e5:01:83:ac:a6:0a:
78:aa:bb:b6:81:cd:08:12:9f:6d:e6:5e:b2:6c:6b:b8:89:22:
e5:98:24:5d:5d:76:5e:2b:a4:85:9d:b9:1b:6b:c2:18:5e:dc:
e9:8e:d1:3c:08:26:8c:e2:98:7f:2c:b4:ad:34:b7:29:f0:51:
81:4c:17:a7:95:00:5e:8b:b9:c9:7a:16:aa:51:e7:37:ab:b6:
38:98:53:a5:91:27:5e:dd:e8:4f:e8:63:4b:60:9f:1b:7f:f9:
01:1f:a3:06:a1:5f:4f:91:18:e9:cc:43:24:e1:2a:02:9a:85:
1f:f0:a6:57:2f:29:54:25:90:56:5a:f4:71:4b:5d:19:70:d5:
3f:29:d9:28:d6:d1:36:d1:21:41:48:c5:58:80:d8:cd:68:ce:
fc:b8:ec:57:85:37:a9:b9:63:ab:03:f4:c0:c0:ac:35:47:bf:
46:a7:48:2c:c1:98:6d:9f:2d:38:3b:31:fb:80:58:fe:7a:aa:
a4:2c:cb:f9:1d:5d:ff:16:6a:6c:1c:d1:78:9a:28:b1:2b:5e:
8d:b6:06:d4:b0:8f:d3:77:75:b2:a9:fb:ca:9d:67:3a:e7:d6:
77:4f:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:50:52 2025 by rpki-client