Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: 2c0xXQfW7h8TofExc1lwtPdLnpJ7P6c4w3TQ0WXxang=
Subject key identifier: 20:D3:74:6C:77:60:0C:3D:90:69:F1:31:32:E0:A3:5F:5B:4F:D2:41
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 01963CC19D5BA5232A8D74EFAAA731E9B7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0A66
Signing time: Wed 16 Apr 2025 04:00:43 +0000
Manifest this update: Wed 16 Apr 2025 04:00:43 +0000
Manifest next update: Thu 17 Apr 2025 04:00:43 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: +fYrS/ZtyVm/uV5J0edRq3PWB+IOOjETIgopcctycrg=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:9d:5b:a5:23:2a:8d:74:ef:aa:a7:31:e9:b7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Apr 16 04:00:43 2025 GMT
Not After : Apr 17 04:00:43 2025 GMT
Subject: CN=20d3746c77600c3d9069f13132e0a35f5b4fd241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:87:63:45:80:84:1e:9c:79:6b:64:96:ae:
28:6b:06:5e:84:1f:b2:a1:58:90:f9:e5:fe:77:7a:
02:8b:d3:77:d3:83:5d:d0:c2:7f:1b:55:43:cd:eb:
61:80:81:bf:c6:2a:0e:70:2d:c7:00:a8:0d:ef:00:
b6:3c:4b:d8:79:eb:40:20:01:29:c4:58:f8:f2:ad:
52:3b:3a:de:ed:7d:37:2b:aa:1e:99:30:f7:9b:57:
b7:8f:55:58:1a:3b:0c:e5:9d:0a:45:c7:69:84:4f:
26:b7:07:11:63:9c:db:41:5e:04:61:e0:e5:a0:0d:
71:2f:26:69:18:cc:d2:5c:56:4b:14:44:f2:f8:01:
d3:10:56:b6:2f:0e:fc:d4:fb:48:7c:d5:6e:aa:ff:
0a:78:31:54:ec:6f:93:ea:f1:13:24:98:63:07:01:
27:52:cc:11:9b:3d:fa:d8:bb:2b:c1:bb:64:b2:88:
24:29:2d:6a:b4:0b:72:6f:58:31:22:b3:ef:55:5c:
16:23:64:ab:9c:2b:6c:a3:a7:fe:47:a0:6d:84:08:
7d:b7:47:3a:d6:48:61:6c:da:b1:70:4a:bf:37:85:
22:2b:76:ff:39:6f:ba:77:73:5c:c0:14:44:1e:78:
09:81:1f:aa:4f:aa:5a:1c:f9:7b:c1:47:3a:7e:b1:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D3:74:6C:77:60:0C:3D:90:69:F1:31:32:E0:A3:5F:5B:4F:D2:41
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:1c:9f:64:9b:cb:87:4a:31:d7:14:16:51:63:75:ff:1a:
eb:e9:2a:40:f9:90:9a:65:f2:bb:13:eb:5d:2b:88:dc:dd:9f:
97:1d:ca:31:31:77:bc:23:c0:62:55:09:66:7c:0c:40:1c:af:
08:66:78:18:b3:76:25:08:b4:3f:a8:11:49:d7:66:38:e4:13:
7b:6d:c8:8d:5c:37:b7:90:90:f5:99:d7:df:29:43:fc:d7:7e:
9d:02:1e:08:46:ac:fb:ce:10:70:cc:c4:de:d5:45:85:96:1c:
82:8d:61:d5:e7:3f:0e:26:d1:d2:91:30:07:0f:b5:b4:f4:89:
e0:27:42:c1:db:79:40:9e:61:8c:16:83:49:41:db:ae:18:05:
9b:a4:f2:10:c4:28:0e:23:d4:ee:67:a5:32:ad:55:22:76:2b:
db:26:a9:ae:65:a6:04:a6:38:7e:75:94:c1:85:9e:1e:14:ed:
87:a6:1a:86:31:73:3c:4a:9b:1b:4d:13:2c:ef:61:78:0d:46:
71:db:89:93:91:03:10:59:46:00:da:a8:d4:27:2e:ee:17:cd:
33:78:8c:d8:69:e3:69:c1:cb:1b:7c:0b:c3:9d:ad:e2:5e:61:
c4:82:c2:59:f3:96:d2:37:0b:6c:46:1b:de:b4:7e:36:e9:af:
c1:41:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:06:56 2025 by rpki-client