Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
File: WMTqejhe-jZyQZa0NDlguqR8vrc.mft (raw, json)
Hash identifier: EP6JGy+05CBb8CWhTZGdG+A9Pdzr1oWO3n+h3IEvSxQ=
Subject key identifier: 2F:CC:5D:4E:6C:96:FA:5B:60:7B:08:61:F4:AA:DE:61:EC:31:AF:F1
Authority key identifier: 58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
Certificate issuer: /CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Certificate serial: 01958CCE03D3D6313F69D3A183B5B121141A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
Manifest number: 0D71
Signing time: Thu 13 Mar 2025 00:01:06 +0000
Manifest this update: Thu 13 Mar 2025 00:01:06 +0000
Manifest next update: Fri 14 Mar 2025 00:01:06 +0000
Files and hashes: 1: WMTqejhe-jZyQZa0NDlguqR8vrc.crl (hash: JV9O7fHHIyR+liyMRJDdq1vXXf+t19tUbkw8AQlEW44=)
2: mFnUZao6jHrrA3z87rGBpSOdTUg.roa (hash: 1fZ4TbgHvorfr9usJsO+SOpspxtknAWHwxdZ49h/ILc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:03:d3:d6:31:3f:69:d3:a1:83:b5:b1:21:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c4ea7a385efa36724196b4343960baa47cbeb7
Validity
Not Before: Mar 13 00:01:06 2025 GMT
Not After : Mar 14 00:01:06 2025 GMT
Subject: CN=2fcc5d4e6c96fa5b607b0861f4aade61ec31aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:f7:fb:76:6a:5f:ef:dc:ef:60:81:70:43:
21:d8:03:c3:8e:9d:6d:4e:76:b1:79:0a:8d:df:52:
e0:ab:7f:c4:d1:94:e3:7f:08:74:74:b3:af:a4:38:
a7:95:96:7b:33:bb:79:29:d9:88:e2:58:02:5d:54:
df:28:f5:b5:98:2b:4d:8b:5e:6b:d1:7f:19:18:58:
46:ca:99:e4:37:11:4a:51:31:c5:94:70:96:55:2d:
88:42:46:98:c5:0c:c0:cc:6c:e9:75:a8:35:c8:51:
08:94:c9:df:63:d3:e2:9a:5d:22:59:b2:25:7a:fc:
fa:09:ab:7c:19:c4:6f:23:e3:bd:ba:29:85:7e:3a:
a4:4e:81:67:39:d2:4d:34:4f:e8:c3:91:71:5a:ac:
69:73:de:97:be:75:c9:61:2b:e1:f2:e5:5d:98:d5:
ec:b8:e8:2e:d9:0b:b3:12:f8:21:58:84:d8:5a:73:
71:7c:c8:10:95:5f:f8:17:9e:d4:1d:43:f7:e1:e5:
d1:50:2a:ce:fc:36:73:4e:c0:4b:e6:b3:73:6e:56:
d1:d3:3d:8b:53:e2:2b:37:45:4d:be:e5:2b:d0:b2:
d1:8c:c8:a8:3c:5e:0b:94:75:3e:b9:a4:25:67:95:
69:cf:4a:87:cb:18:f6:b3:5a:7a:d8:1a:f1:f9:3a:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:5D:4E:6C:96:FA:5B:60:7B:08:61:F4:AA:DE:61:EC:31:AF:F1
X509v3 Authority Key Identifier:
keyid:58:C4:EA:7A:38:5E:FA:36:72:41:96:B4:34:39:60:BA:A4:7C:BE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMTqejhe-jZyQZa0NDlguqR8vrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bfa007-29e9-4fc7-956d-b0e8c33040fa/1/WMTqejhe-jZyQZa0NDlguqR8vrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:da:b8:04:11:98:91:bf:a7:83:83:95:d7:94:cc:11:8b:e6:
75:23:50:d2:77:42:d4:dc:3f:71:62:85:6a:11:20:a6:18:a5:
70:0f:8a:21:a8:44:0e:99:82:a7:db:6c:17:a9:f3:fe:61:f0:
f0:21:69:56:74:8e:8c:27:8d:8b:8e:b3:f9:aa:7b:47:c3:4c:
e3:98:b3:5f:69:57:12:90:b3:93:b2:15:04:d5:d2:10:3b:6b:
43:f7:ae:b0:55:f7:6c:5b:16:12:9c:d8:13:f9:51:46:54:ff:
39:bf:0c:85:57:f1:cf:2d:8b:1a:22:eb:42:3e:38:25:7e:49:
09:9e:9f:87:17:cc:ca:c3:62:6b:c8:32:f6:f2:c5:15:ca:fa:
b4:3c:44:0a:06:ae:2f:ad:ea:06:a9:43:7c:50:0a:a9:d3:29:
5b:c9:ae:b3:bd:2a:a1:a3:d1:0e:c2:8a:22:a3:a1:ba:b7:9b:
3c:4c:50:fc:2e:25:7f:cb:04:90:ea:66:f3:b0:42:06:4f:4b:
23:1f:01:4a:c2:74:24:5f:da:88:90:a5:ed:4c:ae:27:93:64:
ac:61:55:c1:c9:dd:c8:71:d1:8a:49:ff:d8:ff:ac:5b:37:f6:
78:cc:24:7b:ff:6b:49:25:51:ec:ca:cf:5c:d7:07:7c:4e:66:
ab:86:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:43 2025 by rpki-client