Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
File: Wki138AUKmjDC9qsVQYD6eRdEIo.mft (raw, json)
Hash identifier: o3CKzH/Sp16XdjyTWPSI4QbTTychksrTql0F+XjhPaU=
Subject key identifier: 4E:BB:35:B1:D9:25:3B:B4:C8:55:10:01:DD:1F:40:97:8E:57:DE:9A
Authority key identifier: 5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
Certificate issuer: /CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Certificate serial: 0196488F16D941BC837421A41B8AE51039B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
Manifest number: 0C68
Signing time: Fri 18 Apr 2025 11:00:59 +0000
Manifest this update: Fri 18 Apr 2025 11:00:59 +0000
Manifest next update: Sat 19 Apr 2025 11:00:59 +0000
Files and hashes: 1: Wki138AUKmjDC9qsVQYD6eRdEIo.crl (hash: TbXp2wdD3FQxrSexjDuHPuPjDcL7sy9S8pXYX1KHimA=)
2: qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa (hash: IfGwXhsO4LUshRhgsyNsDeEfXeX5DUDuXfY5jcbXNqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8f:16:d9:41:bc:83:74:21:a4:1b:8a:e5:10:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Validity
Not Before: Apr 18 11:00:59 2025 GMT
Not After : Apr 19 11:00:59 2025 GMT
Subject: CN=4ebb35b1d9253bb4c8551001dd1f40978e57de9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:33:5d:56:c0:0d:46:2c:8a:eb:d9:26:ec:fc:
50:78:5e:83:63:83:68:f3:dc:d6:89:7a:51:e0:3b:
ed:e5:c6:72:4c:5a:6c:0c:e6:94:d6:48:51:33:5f:
1e:3a:7d:df:83:32:e0:b4:e5:47:52:d3:15:34:69:
73:8d:19:55:7a:f2:8f:44:d2:c5:23:54:fe:7a:66:
4b:dc:a7:cd:12:2f:37:e0:7d:91:d8:69:28:1f:9d:
bf:4a:6e:7b:c2:d5:e4:b4:79:12:d0:75:fa:c0:7b:
86:0a:c7:f7:e8:05:ba:4b:87:8e:2b:14:af:a7:43:
fc:d1:93:be:3c:d4:f3:c5:58:1b:09:05:62:6e:6e:
79:23:85:a6:59:a8:95:3a:42:bd:50:9d:d3:36:73:
47:0a:d1:c0:38:da:0b:86:1e:1e:50:0a:72:58:e0:
27:89:37:1f:b0:7d:1c:f9:2c:cd:7e:fe:45:b3:57:
7b:95:bb:ba:58:8c:7d:9a:3c:2e:d7:5b:e6:6f:e1:
99:ed:8f:91:1e:f9:61:33:34:5f:7d:d2:83:f9:85:
1f:e9:19:d9:05:f5:7f:f1:5f:63:af:12:71:57:e9:
f8:61:e3:46:fd:9c:6b:f5:3f:e6:fe:44:67:49:30:
63:d0:57:42:00:fa:ab:87:4d:44:c9:bd:8a:fd:bd:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:35:B1:D9:25:3B:B4:C8:55:10:01:DD:1F:40:97:8E:57:DE:9A
X509v3 Authority Key Identifier:
keyid:5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:64:15:4f:f3:3b:dc:84:29:ac:43:7c:f2:83:31:f3:d4:3d:
75:67:97:36:89:ac:60:27:17:90:b7:26:f4:42:7e:0d:6c:78:
25:74:2f:bb:63:82:5e:e7:9c:ab:cd:0a:ba:15:fa:1a:0d:76:
7d:38:cb:f9:cf:b2:58:31:f5:ea:65:30:e5:c5:e7:3d:ed:7e:
81:53:95:04:70:6c:3c:95:04:f2:35:9d:b9:f3:8a:8e:a6:f7:
18:4d:94:1c:8e:4a:07:ce:94:ca:10:ab:0b:be:ff:8f:2f:d4:
13:9e:5f:7b:5d:31:2d:d5:58:34:bf:de:d1:ce:55:2b:f6:a5:
f5:14:6d:07:c9:01:48:02:e8:dd:d1:fa:e0:cf:18:8a:39:0e:
28:42:32:07:de:a2:22:3a:38:96:dc:23:1b:a7:76:a0:30:a1:
64:bf:a8:67:44:89:7a:25:2c:91:b7:43:4b:ce:31:b2:e7:70:
86:2b:8a:2f:09:a1:40:43:56:33:3f:19:23:39:1f:f4:82:c0:
b6:4c:d5:57:e5:6c:a0:f6:a1:12:08:f1:ca:7e:68:6d:3c:50:
b6:31:66:bb:6d:2e:29:f4:37:05:6e:6a:0c:49:cd:ce:e2:a4:
50:ae:fc:21:20:25:d7:53:4a:0c:bf:13:c6:d2:aa:ae:3e:4a:
1c:ad:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:06 2025 by rpki-client