Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: pQT4zdHYEv1L7HywJhkakfwbjmkqThTrppnPA93k6EQ=
Subject key identifier: 69:FB:78:4E:0E:76:1B:B5:96:7F:D4:15:2D:39:B7:0B:01:F2:FF:BD
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 01960F0D898888F5228AEA5738973C52BE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 0714
Signing time: Mon 07 Apr 2025 07:01:07 +0000
Manifest this update: Mon 07 Apr 2025 07:01:07 +0000
Manifest next update: Tue 08 Apr 2025 07:01:07 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: WD+rX5YRTp/Ju1NT2kMBKre3QO4bqg2OPpMh+8nHg7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:89:88:88:f5:22:8a:ea:57:38:97:3c:52:be:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Apr 7 07:01:07 2025 GMT
Not After : Apr 8 07:01:07 2025 GMT
Subject: CN=69fb784e0e761bb5967fd4152d39b70b01f2ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:be:5e:1f:b0:68:66:fb:43:a6:f9:ce:05:
92:d2:ab:f4:80:8b:c7:9b:c6:3d:57:43:bf:9d:55:
0e:f2:2f:2e:59:66:d2:da:b8:d6:9d:b0:e6:19:76:
b8:b2:67:14:0b:0c:ae:02:42:56:02:0b:05:42:43:
4e:46:65:a6:e4:ea:85:61:d8:b9:6a:f7:d4:fb:60:
b6:ba:6c:0c:2b:6d:4f:43:1f:74:b7:ae:95:d0:cb:
b8:ca:19:f6:f7:d5:08:11:60:ec:db:ac:6b:07:a4:
ff:f5:5b:89:43:97:31:db:e2:f9:93:4c:47:38:ff:
24:6c:e2:7f:49:c5:3c:bc:d3:88:65:c4:ce:25:75:
8e:b7:11:d7:84:47:b4:23:09:b3:ba:f8:7d:58:5d:
dc:ea:0e:ed:65:4c:96:89:a4:f4:7f:c2:4c:27:db:
9d:bd:02:53:48:b2:0c:79:d8:60:b2:65:c5:94:ef:
e8:a8:28:d6:a8:73:52:dd:39:61:13:24:cb:89:23:
21:62:10:92:79:3b:5e:c1:fc:51:03:75:72:56:ad:
90:b5:1b:61:da:9f:0b:c6:e2:b1:81:be:59:62:c5:
b9:c8:60:7a:90:82:68:86:8b:b8:9f:64:3e:12:50:
d2:95:2d:f1:ac:b9:06:88:66:47:97:b8:24:ea:cf:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FB:78:4E:0E:76:1B:B5:96:7F:D4:15:2D:39:B7:0B:01:F2:FF:BD
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:44:db:aa:bd:25:6b:24:e6:ea:7c:7d:55:17:c6:48:bf:
04:04:0d:0f:05:7d:63:24:55:4a:5b:bf:02:f9:00:15:2c:ce:
6a:2f:84:73:60:00:cc:27:44:15:e5:1a:a7:ef:39:3b:a7:cb:
c6:22:97:4b:eb:de:5a:24:d9:86:25:16:f8:4c:66:9c:75:0f:
fe:c6:4b:dd:4f:37:a4:d4:f0:4b:69:37:de:6c:4e:ed:de:8f:
a1:b4:b3:d3:c3:60:53:a3:e0:48:9e:d4:87:c1:bf:ed:28:2b:
a0:73:be:a4:cf:dd:a1:34:31:d4:24:b8:ad:4f:9e:87:86:bd:
66:93:d8:36:f2:09:36:9d:60:4e:7e:a8:e5:1c:27:56:0c:24:
37:b6:1d:be:ee:f7:3d:dc:39:bf:4e:ae:60:65:59:ce:52:cb:
50:ba:4b:fb:c8:9a:23:6f:4f:67:eb:12:65:b6:76:a8:c0:83:
dc:d7:06:0a:7f:60:12:16:3d:e1:16:f8:e7:33:84:8c:bf:88:
d3:4d:44:7c:27:3e:27:cd:54:9c:d0:1e:3b:45:44:f4:a7:b7:
a5:e8:a8:54:7b:2a:b7:8b:b2:7a:98:20:c3:be:13:cd:90:a4:
fc:41:b8:77:16:3e:04:b6:48:7b:54:84:2b:f4:5d:dc:70:c5:
62:64:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:33 2025 by rpki-client