
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File: wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier: 0cZ8No54Zgnt+xvLTJ8Gu+qoKibG9zri9+24kgzVI7s=
Subject key identifier: 52:B8:B0:FD:A3:30:E8:06:8C:59:1A:A6:06:F1:EB:2F:C2:7C:1E:77
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 01963808D5CAB2F1E6F8EF1464A2F7C9EADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number: 14F9
Signing time: Tue 15 Apr 2025 06:00:25 +0000
Manifest this update: Tue 15 Apr 2025 06:00:25 +0000
Manifest next update: Wed 16 Apr 2025 06:00:25 +0000
Files and hashes: 1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
5: aQ15-5dar1aqgdmTJxXJsHa1LDw.roa (hash: 1rVI43V3MOJKO7UAkMxeh1LlYc7UXyA9BgVQnSxTc5I=)
6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: DfnUZPTfNEeroycnZxd94dLb0K3JfKZ2KxKarm9xzOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:08:d5:ca:b2:f1:e6:f8:ef:14:64:a2:f7:c9:ea:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Apr 15 06:00:25 2025 GMT
Not After : Apr 16 06:00:25 2025 GMT
Subject: CN=52b8b0fda330e8068c591aa606f1eb2fc27c1e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:50:2e:f6:7a:52:5d:de:2c:18:1b:8a:e0:
eb:df:02:ed:f7:12:91:f0:20:f8:8a:c9:78:d1:4e:
07:d2:d3:cb:63:39:2c:23:fa:87:a5:a6:81:12:5c:
31:98:ed:da:69:a1:8c:d6:4c:8b:b3:59:9f:66:ec:
ad:0b:91:7d:b9:0a:61:31:5d:42:36:4b:f2:8a:9b:
68:9f:84:8a:6a:1c:12:1d:b2:92:1b:ea:10:0a:42:
1a:8d:34:a7:a7:e9:e2:25:64:ac:b5:07:d0:57:a8:
de:7c:82:ca:5c:b7:75:a7:c9:44:50:86:f0:f3:07:
bc:cf:a6:65:4b:cc:67:3d:37:d5:8c:d2:98:22:aa:
ff:ab:b1:20:a3:26:c2:ae:39:79:96:4b:90:c1:1c:
1b:56:4d:ed:a1:b1:5d:e1:3d:09:5a:ce:da:db:63:
85:0b:9d:da:25:2e:5f:ed:84:53:9c:4f:22:a5:0c:
c9:b6:29:eb:a9:1c:87:ad:22:f8:1e:ca:54:0b:7b:
24:67:18:63:76:ad:27:93:e7:13:26:43:35:50:29:
07:50:c5:3e:7a:94:81:cd:2c:79:0d:3b:78:24:72:
d6:6d:9e:80:f0:f8:98:e2:46:90:83:99:d1:6f:65:
63:db:97:62:54:a3:81:c4:be:ec:99:ae:6e:90:03:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B8:B0:FD:A3:30:E8:06:8C:59:1A:A6:06:F1:EB:2F:C2:7C:1E:77
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:70:23:27:f9:75:0c:ca:04:22:58:85:cd:b1:0c:dd:99:3b:
af:0c:df:84:13:1a:58:25:10:15:2a:81:a7:d5:9a:50:c6:a5:
53:2e:9d:89:62:15:0f:d3:1b:e8:3b:fb:3e:4c:18:b5:7d:98:
8a:1f:4d:aa:5f:0c:14:f6:82:e2:6c:a8:d4:ea:b9:80:3c:bb:
2f:da:f9:f5:af:bd:22:04:c8:8f:13:57:1c:21:6f:82:9e:62:
78:93:c0:fd:5e:2e:49:ce:31:b9:74:35:2c:fb:37:82:ef:10:
24:7b:53:1a:fb:ba:73:02:eb:76:3c:56:4a:39:95:95:a7:ca:
8c:17:be:e2:2e:d3:a3:8b:92:0d:f2:b5:68:db:a8:b9:3b:af:
79:3d:a2:44:5b:5c:75:43:34:75:a3:cb:d0:1b:e5:c7:8d:6d:
42:af:8e:0a:d3:31:dd:d5:5a:25:8e:43:bd:9c:60:b9:d4:ae:
1c:97:f5:9a:2e:16:ee:f3:78:b3:a2:6b:68:17:64:29:66:76:
07:71:97:64:0b:61:d2:5a:33:13:f1:49:03:a3:9f:f8:f6:2f:
43:0c:ce:ac:b7:7b:18:39:4e:cd:d6:d2:d3:3a:f9:ef:8e:28:
bd:c7:a1:5d:e5:ba:21:3b:66:39:71:99:d9:2c:63:0f:ad:fb:
e4:6a:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:34:20 2025 by rpki-client