Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: ZYHxANTdPyBt+XEPjuQ0V6iEXi65giKlT9zgA5HTUUc=
Subject key identifier: BE:21:DA:D0:D2:9A:07:31:D2:34:0B:C5:5F:5D:94:77:DB:1A:1D:DD
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 0196428CCB484F2BA6350A43938537DAF1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0602
Signing time: Thu 17 Apr 2025 07:00:45 +0000
Manifest this update: Thu 17 Apr 2025 07:00:45 +0000
Manifest next update: Fri 18 Apr 2025 07:00:45 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: wk9E4doDMBAr3koCq/QyY1zwov5KhauPljlqQ6bwsy8=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8c:cb:48:4f:2b:a6:35:0a:43:93:85:37:da:f1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Apr 17 07:00:45 2025 GMT
Not After : Apr 18 07:00:45 2025 GMT
Subject: CN=be21dad0d29a0731d2340bc55f5d9477db1a1ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:e2:f6:a5:29:d6:f2:89:7b:87:a5:d9:fc:
c2:4d:4e:2c:70:5d:a2:56:f8:6b:bb:a7:86:24:1f:
ba:4d:67:86:d9:10:68:16:56:e6:e6:91:16:dd:53:
9e:36:b1:f2:15:ad:a4:0b:b9:b5:1d:56:ed:0f:b2:
21:0f:9e:44:3b:e9:7d:6a:62:94:a7:aa:de:9a:50:
89:e4:b9:91:8f:cf:8e:c4:c0:f4:68:a2:6e:26:4c:
eb:5b:61:87:c1:2e:91:20:c1:65:f3:f5:b6:fc:b1:
82:1a:b6:8b:0f:b3:73:e1:7c:17:c7:cb:b1:ec:4d:
b0:0d:16:ad:7b:7a:6d:73:c3:3f:ef:37:7d:a0:26:
f0:20:21:45:b9:9c:d4:5c:78:07:33:d4:30:5a:a1:
54:9e:ae:f6:3b:3b:f5:d5:ee:8a:f8:6f:15:bb:6c:
23:d9:ad:ea:da:7a:bc:e4:9b:79:cd:1c:e3:fe:bc:
93:7e:bf:77:ae:85:3f:32:7d:3c:c2:0d:03:62:40:
3b:b4:e8:22:a0:c6:d2:86:51:b5:a3:2d:d6:09:68:
ac:cc:36:02:60:04:41:b5:ec:a1:c8:e3:33:0e:0f:
1e:26:35:69:73:ff:1a:87:35:e0:b7:15:be:7e:49:
f0:4f:61:c2:af:3f:66:3c:d9:fe:4e:33:75:fe:76:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:DA:D0:D2:9A:07:31:D2:34:0B:C5:5F:5D:94:77:DB:1A:1D:DD
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c0:3e:cf:a9:46:0e:48:f7:75:45:80:e4:ba:8e:45:4b:e5:
92:99:8f:7b:3e:98:d7:71:c9:b6:77:1a:fa:5e:09:bf:ad:8c:
30:97:90:b3:5c:ce:be:96:b2:37:d5:bb:b5:c6:52:f6:80:05:
cb:e2:94:d8:73:86:98:1d:4a:de:60:5d:1b:21:c7:29:85:e6:
40:72:02:04:b4:cb:88:8d:63:37:8d:d7:00:95:28:e4:b4:ab:
10:4a:87:88:03:6b:04:27:b7:1f:11:af:da:5b:00:46:ed:d8:
e5:f6:b2:54:4b:28:a2:ff:d7:28:5f:2b:0f:0c:bd:98:f1:31:
86:8f:2e:de:68:07:4e:63:15:61:9e:61:48:4b:5c:fe:77:c2:
d7:87:ae:64:66:b3:0b:cf:c6:de:7d:cc:e9:b3:c0:8d:50:27:
20:87:3f:8d:92:1b:67:4a:9e:4e:7c:a9:64:4a:a6:40:cd:d8:
c4:5c:26:19:f1:e1:e1:b4:5a:23:05:19:d4:7b:7b:d8:b5:35:
a3:24:d7:32:98:c5:be:88:4e:6c:18:5a:2a:f1:30:df:60:9d:
db:94:1e:47:27:07:d2:cb:81:94:75:83:a6:b4:0a:d4:b9:46:
46:a4:71:38:1c:5f:9f:4c:29:89:16:f3:af:c4:4a:8a:61:94:
97:65:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:00:33 2025 by rpki-client