Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File: WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier: CIY3bS7Z7ScHgBP9C/ckPaQxZK8Le4BkEyc8YSWOAAI=
Subject key identifier: B1:52:3B:1E:23:0C:9E:43:06:7B:7D:9F:C1:D3:D5:01:27:76:45:1A
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 01961A357FF1545872DC69682ED22D00CF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number: 3F
Signing time: Wed 09 Apr 2025 11:00:35 +0000
Manifest this update: Wed 09 Apr 2025 11:00:35 +0000
Manifest next update: Thu 10 Apr 2025 11:00:35 +0000
Files and hashes: 1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: JF4INJU1WgD4pD0ATCSPpWAIkPed0FVObm1ETwLVyOY=)
2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:35:7f:f1:54:58:72:dc:69:68:2e:d2:2d:00:cf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Apr 9 11:00:35 2025 GMT
Not After : Apr 10 11:00:35 2025 GMT
Subject: CN=b1523b1e230c9e43067b7d9fc1d3d5012776451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:d4:cc:73:23:19:31:cc:73:88:79:04:4f:
0c:da:cb:f4:91:e5:9d:ce:30:41:cd:1a:62:3d:26:
38:73:ec:fc:f4:22:ae:2b:3c:c4:73:83:3b:ad:c9:
e1:02:75:43:2d:e6:58:57:81:b4:1b:9e:4d:76:38:
c4:ab:84:a1:e0:20:33:0a:70:70:e0:67:62:52:b7:
e9:c1:58:b9:ec:e4:16:76:b5:cc:a7:1d:91:2c:70:
2c:ba:1e:7c:b1:e3:be:3e:a6:13:21:88:72:5b:8a:
a7:0d:01:76:06:46:ea:db:9e:9b:47:45:30:67:22:
6e:97:85:b2:eb:98:a8:11:68:31:72:80:d3:c0:3b:
a2:bd:73:e7:91:75:ad:c3:50:a2:66:a5:79:0c:c1:
aa:84:d1:4e:86:0f:ef:70:6e:51:f9:d4:8f:95:07:
ca:66:1f:d8:f4:84:62:19:c0:d5:de:a1:37:3d:f0:
63:40:c1:97:ee:b6:88:6b:bb:7b:2e:3f:7b:87:a2:
67:6c:84:15:cd:ea:34:a1:b6:86:52:82:54:39:f7:
13:a5:ec:06:1f:29:b6:15:ad:38:da:57:5c:e3:11:
05:12:bc:69:0b:a2:b8:2e:4c:ba:fe:cc:67:56:41:
68:5d:88:54:5b:eb:68:29:ce:e0:8f:01:65:8f:74:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:3B:1E:23:0C:9E:43:06:7B:7D:9F:C1:D3:D5:01:27:76:45:1A
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8a:35:4a:1a:96:5e:33:14:9c:75:a4:99:a9:ef:3c:d8:05:
99:5d:b8:7d:41:0f:8f:a7:7a:98:cd:a5:12:a1:ed:15:a8:e1:
82:83:22:33:65:0e:55:96:8e:1a:d2:f4:4e:ab:81:c5:ea:3e:
0e:e5:a2:9a:36:8d:a4:95:84:58:f1:10:e0:8d:fa:52:c6:46:
fe:ba:5d:d4:5d:eb:47:ab:9a:5b:9c:46:a0:68:3e:1f:4c:da:
0d:51:aa:c6:18:92:49:04:a6:d0:4c:1d:0a:87:6c:07:17:23:
8a:3f:c9:e4:98:01:f2:a7:b8:78:d9:22:10:f9:45:86:e0:a4:
b0:f8:7a:0d:a0:23:72:77:97:f1:dc:92:67:f5:b2:16:0a:7f:
7c:31:eb:a9:56:d1:8b:21:e9:84:d1:23:a8:cb:46:dc:b2:a0:
ff:b0:36:03:1b:dd:95:51:73:97:b0:38:47:29:64:4b:ca:24:
67:11:3f:79:6f:3d:66:29:77:0f:de:bf:89:00:b4:3a:24:4b:
b6:d0:7a:e7:d0:25:66:b5:6b:d8:a6:58:52:69:07:12:d4:a2:
21:af:e3:43:ba:60:0f:78:fd:1c:ad:e1:35:a9:cb:63:cf:25:
97:49:11:ae:4c:74:b9:ce:66:ff:90:9e:4b:4e:3f:db:65:a2:
1e:04:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:23 2025 by rpki-client