Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: iYOWygoRUJGrwZHZ+5jHsx4iLahg42vgYeF4ZHhRjjM=
Subject key identifier: CE:84:01:AC:09:D8:72:64:49:AE:D5:37:3C:91:EC:E6:EC:31:20:BB
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 01966EF7A41CFE60A288AA6EC8353E222929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 0477
Signing time: Fri 25 Apr 2025 22:00:45 +0000
Manifest this update: Fri 25 Apr 2025 22:00:45 +0000
Manifest next update: Sat 26 Apr 2025 22:00:45 +0000
Files and hashes: 1: O4itYS8sI_ap1aiE_UeLniEPcvk.roa (hash: yXxFYAIoEwoD51Grvt0xf+Jd5ULkmINTn0EV/SJ5fbw=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: Qim2z0zKz6tLf+UTPDki0jMYVP0qhhlMi79Mag+um8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Apr 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6e:f7:a4:1c:fe:60:a2:88:aa:6e:c8:35:3e:22:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Apr 25 22:00:45 2025 GMT
Not After : Apr 26 22:00:45 2025 GMT
Subject: CN=ce8401ac09d8726449aed5373c91ece6ec3120bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:53:70:b8:e6:e7:5a:b1:27:d6:e9:4f:46:68:
50:7e:ce:33:54:96:15:23:db:c7:cb:d5:11:29:56:
21:52:51:8b:cb:31:9c:6c:7e:a2:b9:b5:be:90:6d:
26:72:45:d5:35:32:3b:d9:63:cf:43:81:15:03:9a:
de:70:e1:35:d1:41:29:18:98:5a:ce:04:44:9e:60:
5d:31:c2:87:09:b7:63:f9:64:59:d5:da:66:00:eb:
c2:77:ca:c6:a8:62:27:98:4f:3c:d6:03:f1:78:4a:
b4:0e:57:75:0c:68:84:e9:e7:25:ba:89:2a:33:f6:
82:0e:fc:93:82:52:ab:c3:79:fd:f9:20:90:aa:5f:
85:5a:01:09:53:f6:e7:80:c8:48:54:6f:95:34:1d:
ea:ab:2e:d9:46:fe:1f:90:22:d2:8c:79:8b:b6:5e:
61:1b:9a:f8:de:1f:96:a5:5f:5e:fd:42:b9:20:a9:
15:d2:29:27:88:71:8c:89:34:92:04:01:7f:e4:86:
e3:93:b8:26:af:f6:08:cf:d8:c0:94:62:ed:93:21:
3e:dc:55:00:87:c8:a3:17:17:5c:d8:b7:cb:af:d2:
7a:bc:84:43:81:22:50:47:69:0c:eb:ee:c3:79:e8:
7f:27:f0:ed:7e:e7:3b:aa:e0:cb:af:2f:5f:c0:9e:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:01:AC:09:D8:72:64:49:AE:D5:37:3C:91:EC:E6:EC:31:20:BB
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:21:fc:4c:99:d0:cc:8f:68:fa:72:9d:b1:3c:a8:cd:e7:04:
6b:ae:c4:38:68:97:60:fa:28:c2:0c:66:b5:0c:ac:22:28:11:
00:cf:b5:dc:9f:e9:e2:c3:e6:e8:e3:0d:31:7d:c4:05:dd:3d:
be:1d:63:76:d4:7f:bb:ce:59:c9:c6:f7:4f:77:94:8a:dc:b5:
06:e4:e2:22:91:5b:79:80:e9:55:e7:d3:b8:5d:0d:ad:aa:09:
4b:41:ad:79:3f:9f:50:5a:b3:46:4e:f0:83:a7:96:54:73:fe:
e7:4a:b6:0e:12:80:85:53:60:4c:e2:7e:ca:f0:01:45:a7:1b:
46:8f:bc:f4:0a:14:0d:5c:a5:57:2a:ca:a8:45:76:a1:f9:51:
d6:3a:9d:76:d2:d4:0b:81:2d:ca:ad:0d:4e:21:51:68:d6:a8:
15:95:aa:74:67:a6:00:e3:f5:41:b6:0c:f8:ac:95:fc:53:74:
4a:48:1e:3d:09:55:2f:c4:35:dc:eb:5f:58:34:ab:6b:d4:2c:
63:98:ae:78:69:72:80:b9:85:9b:86:fd:de:a1:cf:d7:07:2b:
00:53:f9:ea:d2:27:af:6b:92:2c:df:74:5d:f5:60:7a:83:b8:
35:7a:da:37:22:1f:01:ed:2a:5c:40:39:3e:26:85:9b:6f:20:
cd:94:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:03:27 2025 by rpki-client