Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
File: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json)
Hash identifier: HZgLF557QW4RiIedx9tXj3Pt8fOr2YxEcE3CVRVpEvw=
Subject key identifier: 6F:EC:45:8F:89:98:21:38:4A:1A:D8:77:CF:7E:84:96:59:7F:36:81
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial: 0196591555EAAAC00654F282DF6FDDD1836B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 16:01:32 +0000
Manifest this update: Mon 21 Apr 2025 16:01:32 +0000
Manifest next update: Tue 22 Apr 2025 16:01:32 +0000
Files and hashes: 1: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (hash: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=)
2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: Q2/hRTcNMlArY7wFtYi/LwO40GUS10pBaZa3swwy9BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:55:ea:aa:c0:06:54:f2:82:df:6f:dd:d1:83:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Validity
Not Before: Apr 21 16:01:32 2025 GMT
Not After : Apr 22 16:01:32 2025 GMT
Subject: CN=6fec458f899821384a1ad877cf7e8496597f3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:23:fa:f1:73:de:3f:1b:22:0e:fd:14:8a:
15:74:dd:c3:f6:0e:df:ca:81:30:41:cb:ca:1d:9a:
9c:20:de:0c:4b:2d:ed:98:b7:53:01:13:cb:d9:be:
83:df:f9:e6:bf:ec:fe:b2:41:45:3b:19:11:32:b5:
34:4d:76:5d:27:12:3c:1a:8b:23:f7:80:61:9d:af:
6b:1d:6a:3e:0c:50:9f:9b:21:7e:bb:40:c9:56:32:
9d:4f:08:42:fa:39:10:a4:af:4b:a2:79:e5:f6:c1:
54:cb:cc:4e:5a:26:84:2a:e3:3f:19:5d:c3:5f:7e:
45:ea:6c:2d:f0:84:13:b7:4d:56:8a:c8:f2:8e:e7:
cc:73:81:99:9c:b5:76:d8:a1:51:d3:22:38:0c:b8:
b3:e7:77:19:ca:65:47:93:b6:be:cb:b0:28:4c:49:
59:8a:b9:c1:1b:39:4c:13:45:aa:c7:df:ca:e4:60:
45:ab:3b:15:ef:63:00:53:32:f8:ab:6b:c4:ab:28:
45:b3:31:9e:fa:f0:41:21:9b:ab:27:ef:c7:e3:24:
81:d8:6f:56:77:fb:45:03:7e:98:4c:3b:72:13:79:
b1:9e:74:bf:ba:cb:7e:af:55:91:94:2b:5f:16:82:
77:1f:9f:f3:03:fe:6b:12:67:85:43:9f:dd:29:4c:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:45:8F:89:98:21:38:4A:1A:D8:77:CF:7E:84:96:59:7F:36:81
X509v3 Authority Key Identifier:
keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:48:5d:cc:b5:2d:ba:02:58:d5:ac:00:d4:4c:12:3b:de:bf:
81:48:ec:42:2b:a3:a0:76:8c:d9:e6:53:38:1d:1d:40:7c:85:
02:9d:4b:e2:9f:ba:4c:a0:63:3f:a3:9e:5f:7a:14:c1:2b:28:
db:09:28:eb:55:4b:ac:64:70:d8:82:a9:6d:f1:29:a6:c0:0b:
66:72:77:b5:d4:fc:2f:0b:a3:1f:49:be:e2:28:5a:5e:de:64:
7b:b2:40:2e:4f:1c:85:a0:68:17:1a:20:46:12:cd:74:6b:b4:
cf:45:48:2c:9e:db:66:b3:c9:d6:3a:06:cc:42:3a:71:cd:5b:
db:74:7a:7c:ee:c1:8a:f5:77:5a:37:e9:13:18:1a:e3:01:4d:
48:b9:fb:99:a6:b3:cd:88:c8:37:35:97:52:89:3f:c5:ac:4b:
11:7c:c2:41:13:b5:68:ea:21:11:30:5f:ed:93:fd:87:4f:0d:
8f:70:a4:3d:a5:dd:c7:ee:c0:5f:ad:de:0e:bc:d6:84:bb:1e:
3b:18:81:4a:8b:d0:8c:a9:03:fc:df:32:58:7c:ad:f9:64:73:
3f:48:f6:f7:33:f8:88:5c:af:86:64:b4:27:f3:07:20:77:ee:
21:50:39:c9:4a:4e:37:64:0f:c2:bb:d7:54:49:29:30:a8:c8:
68:9f:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:10 2025 by rpki-client