Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: 2Ae6/nijPj2FXFxQNU3z9x2zIOrlFIOaGAzAUhzCSQE=
Subject key identifier: 65:CC:EE:81:80:AE:40:F0:7B:A4:AE:3B:BD:4B:B0:AA:E9:7B:E5:77
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 01963A9CB4D2120EE43531F49B2CA86E752A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 0E6E
Signing time: Tue 15 Apr 2025 18:01:10 +0000
Manifest this update: Tue 15 Apr 2025 18:01:10 +0000
Manifest next update: Wed 16 Apr 2025 18:01:10 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: L76ZN8RZoOi3fBR5oT9XIJ0gvAf5jh8UEd7xYvOPRQ0=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:9c:b4:d2:12:0e:e4:35:31:f4:9b:2c:a8:6e:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Apr 15 18:01:10 2025 GMT
Not After : Apr 16 18:01:10 2025 GMT
Subject: CN=65ccee8180ae40f07ba4ae3bbd4bb0aae97be577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:92:8e:fe:70:17:50:f2:fc:64:b8:04:8f:
dc:e2:f4:4f:59:3b:74:df:42:86:9d:9f:b2:bf:f9:
0f:c2:dd:69:10:a2:5d:3d:67:13:d6:9f:c4:40:1a:
df:bb:9c:f3:41:f7:8a:dd:1e:b9:4f:d8:4c:75:7b:
cf:05:48:7e:a6:85:ad:97:ef:0d:5a:85:ca:1c:ef:
a3:fd:20:2d:84:3d:d4:6a:f4:28:75:a8:f0:ba:6b:
56:05:dd:3e:2b:69:92:6c:dc:bf:e3:c6:51:ef:89:
d9:30:0c:2a:7f:8e:bd:cd:35:27:26:5d:f1:6f:53:
98:f7:2b:b6:00:9c:f2:92:f3:3b:89:75:f0:00:0e:
32:15:28:0c:b0:f6:3a:01:a7:14:d8:9f:ce:4c:f0:
49:5d:4d:1f:10:a9:39:1b:d3:4b:f9:a4:e1:1e:8c:
99:73:29:90:92:b8:50:d3:14:e9:1e:67:b4:2a:d3:
28:5c:8d:14:61:be:1d:dc:c9:b3:75:15:17:23:95:
0b:df:07:44:e0:0f:b0:46:c2:1f:ad:67:13:e4:67:
75:50:4a:83:03:6b:4f:c6:d6:7e:4e:ce:fe:03:7d:
a6:98:cc:3a:61:e9:f9:9c:81:a9:71:b1:85:4f:c9:
4b:d0:c6:db:a6:a8:15:91:6c:ff:76:da:96:aa:da:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:EE:81:80:AE:40:F0:7B:A4:AE:3B:BD:4B:B0:AA:E9:7B:E5:77
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:18:1b:98:e4:45:64:3a:3b:b2:1f:17:dc:08:1f:83:81:
b4:ae:20:3c:9e:aa:b2:01:d8:1b:01:27:e6:d0:74:5a:ab:73:
55:28:6f:6a:18:fa:25:90:c1:cc:d3:0e:fc:13:5a:86:36:21:
e5:3f:d1:f1:7c:e0:6a:0b:bd:0f:38:67:a9:97:ae:5d:8a:e9:
67:ae:6b:77:4e:ea:fc:2f:1d:29:96:46:3e:c1:1c:99:bc:02:
ba:8a:d0:36:6c:cc:2c:b6:2f:d7:50:99:26:fc:21:d4:73:07:
83:5d:0e:c5:49:91:66:7d:fc:95:21:78:f9:3a:7a:ea:8c:ce:
3d:5c:c7:1b:48:ac:5d:7f:2d:ad:61:6b:ca:b4:41:9b:03:04:
a3:6a:f4:63:72:63:db:b3:5b:d3:ca:d7:20:18:94:87:7e:09:
1f:f4:42:5e:03:93:ac:59:08:0d:d8:6e:07:0d:ae:5d:e6:a0:
50:5f:91:95:42:16:4c:02:11:53:cf:48:98:52:6c:ff:5f:f7:
3c:e7:e1:c8:a3:33:0d:b4:c1:02:67:1d:c2:fe:01:42:ec:77:
be:10:b8:3e:e6:30:13:14:e7:72:82:b5:c2:a0:5c:6e:c8:35:
08:7a:c0:49:6a:4b:fe:b4:17:92:dd:48:60:a6:8e:6a:3c:b6:
17:be:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:50:20 2025 by rpki-client