Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: T3hAdzLCMWmxTBCphFarPO4fp4sEzWDszxqu+73CjPU=
Subject key identifier: FB:BC:D5:E1:0F:72:9B:64:4D:29:40:9C:1C:17:20:24:98:A4:06:34
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 0196523713A1A9F54CFADA4C747BB67D4222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 14AB
Signing time: Sun 20 Apr 2025 08:01:03 +0000
Manifest this update: Sun 20 Apr 2025 08:01:03 +0000
Manifest next update: Mon 21 Apr 2025 08:01:03 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: FIidC1EWNIBDPGy6hSDIL4JfWPx79v0Qz9RT4ejk4fs=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:13:a1:a9:f5:4c:fa:da:4c:74:7b:b6:7d:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Apr 20 08:01:03 2025 GMT
Not After : Apr 21 08:01:03 2025 GMT
Subject: CN=fbbcd5e10f729b644d29409c1c17202498a40634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:f9:09:f9:bb:c6:0a:b2:f3:65:f6:d4:51:
c0:93:79:09:dd:03:a3:d7:da:bb:00:a3:e5:e0:9d:
ae:02:d4:f3:b4:d2:b4:72:2f:1e:cc:c7:cd:61:5d:
65:88:fb:8f:cc:8f:0d:c0:9b:aa:90:5e:c0:02:19:
7d:e7:8b:a0:01:b7:e7:7a:e6:bc:1e:6c:e1:80:49:
40:f0:84:28:80:08:7c:e3:09:87:a9:59:d4:2a:d6:
26:de:24:e3:4d:c2:e3:33:09:fc:11:12:ff:d6:04:
50:18:a7:4d:f1:92:31:cb:e9:2a:e9:b1:db:78:2e:
3d:b3:c4:da:0b:d2:60:89:c9:a8:c0:80:62:24:19:
a0:b3:04:75:74:d2:2a:16:0c:9a:87:86:84:67:6d:
98:3f:3f:a9:0f:a4:f1:88:36:27:b6:51:b8:b8:c1:
71:01:79:f3:1f:81:63:ab:02:23:46:54:da:ae:c4:
f7:6a:88:b7:30:48:f4:aa:8a:2c:59:75:83:e0:d2:
82:14:86:9e:86:08:2c:32:f0:a1:ec:6f:73:b5:2b:
8b:6b:4b:a5:fd:a2:22:35:97:05:82:6c:fd:09:cf:
ac:c9:3a:71:43:15:d2:60:94:60:85:ff:34:dc:db:
8b:2f:ef:44:35:33:13:f1:9a:44:de:bd:17:52:27:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:D5:E1:0F:72:9B:64:4D:29:40:9C:1C:17:20:24:98:A4:06:34
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:44:d3:e1:ab:01:98:59:8f:c6:33:9b:39:39:4e:1c:cc:
56:b6:97:4e:47:02:81:dc:c3:6c:39:0c:72:b5:13:13:ec:a4:
9e:e4:91:c1:f7:8a:45:4e:61:21:7c:23:7a:22:9f:c0:e7:11:
a2:ec:f4:99:c6:4d:bf:7d:da:d0:a4:56:f4:94:de:e1:7b:b0:
97:38:d2:ff:90:05:fa:9e:78:b2:b4:02:db:5a:b0:4f:bd:3d:
b0:9d:10:40:00:e0:46:87:07:ab:36:cc:49:97:1b:a3:49:77:
1d:ae:57:9a:6e:18:da:5f:cd:d4:16:8a:cd:3b:88:b2:61:71:
1d:21:f0:68:a6:5f:36:bd:ff:74:ca:8d:fa:34:f0:75:ac:c4:
dc:59:7a:bf:f4:49:35:30:72:d5:26:ac:dd:dc:7c:40:ac:03:
bf:ca:df:aa:b3:57:90:e2:5a:f4:66:06:d0:55:e7:62:32:08:
de:dd:27:00:e6:61:fa:2c:fb:7a:00:9a:67:d1:ab:99:f0:8a:
c9:72:2b:6d:78:e6:9f:20:e2:8e:27:7a:54:d5:0a:e0:90:69:
66:75:ce:6e:7c:7b:ee:95:58:bb:55:0e:f6:31:79:e0:2b:32:
26:d7:d6:1e:02:57:6e:54:50:c0:42:cd:8f:40:67:49:d7:de:
b0:2a:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:40 2025 by rpki-client