Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: 6ai+OMDdOCyzk7elnwPJp4vFzUf6xALB7VS4u52hiXk=
Subject key identifier: 3B:08:65:81:DA:7C:8C:7B:6F:06:8E:EC:31:67:EE:EE:E9:C5:6A:33
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 01964CA2976A89E6B9505CAEF62195C639C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 1502
Signing time: Sat 19 Apr 2025 06:00:46 +0000
Manifest this update: Sat 19 Apr 2025 06:00:46 +0000
Manifest next update: Sun 20 Apr 2025 06:00:46 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: X0FJsUshUP395fOhxaZ/zdCBDeBATBUDBPULW+QjUTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:97:6a:89:e6:b9:50:5c:ae:f6:21:95:c6:39:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Apr 19 06:00:46 2025 GMT
Not After : Apr 20 06:00:46 2025 GMT
Subject: CN=3b086581da7c8c7b6f068eec3167eeeee9c56a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:57:93:2b:6e:64:d9:3a:ee:6e:2d:15:89:
c9:bb:c6:87:cc:b7:8e:36:e6:f3:79:39:17:07:1c:
d9:7f:3b:1c:7c:93:85:9c:f0:6c:e9:2a:f5:69:19:
86:e6:68:37:e5:67:45:20:80:e5:b4:c7:c5:68:75:
d4:f5:14:54:89:00:1f:ca:e0:39:c4:8c:b6:8f:a0:
cb:9b:df:dc:e8:68:00:19:d1:99:43:d9:f0:9e:a7:
d6:a6:63:70:e0:12:85:9b:bd:98:a8:4c:43:9e:f0:
c8:44:a3:02:03:72:fb:e0:cd:70:16:ee:98:10:21:
f9:63:88:4d:db:43:6a:cc:6f:44:1a:cc:c5:4c:70:
5e:56:26:ce:91:2f:c9:c0:57:66:bb:da:a3:54:e7:
43:b5:a8:ee:07:95:de:d0:67:4e:b2:38:8e:e6:1b:
54:49:6e:1e:18:1f:e3:22:ab:cb:fe:f8:27:d6:f2:
83:f2:fd:7c:15:9d:40:95:87:07:a6:16:d1:93:fe:
4c:e3:54:a9:62:48:98:11:5e:09:42:e5:41:43:c0:
28:3b:9b:34:92:53:2c:3f:be:aa:c4:05:62:5b:94:
1c:46:13:8a:38:ba:10:85:6a:19:77:06:2d:f6:f6:
61:15:57:46:c2:38:c4:25:22:e0:2b:e5:06:e9:44:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:65:81:DA:7C:8C:7B:6F:06:8E:EC:31:67:EE:EE:E9:C5:6A:33
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:e2:f2:84:89:1d:d8:5c:74:d1:3f:15:f8:5c:59:a4:d7:
28:6b:e1:7f:6c:d8:e8:1f:33:a5:1d:20:ce:2b:42:de:ec:92:
5c:0a:d1:b4:40:f6:d3:46:ac:91:0f:f1:74:aa:62:28:99:3e:
21:bb:58:c4:3c:f0:91:c0:5e:09:b0:81:58:d6:92:1c:b4:6a:
70:72:3c:5a:19:60:fe:21:ea:52:88:fb:ba:ea:66:83:5d:5a:
d8:cf:45:e8:62:27:4f:50:6d:7d:6b:4f:85:37:5b:dd:99:0c:
26:cf:09:d5:57:43:52:28:b1:d4:2c:a8:3e:8b:d8:0f:4b:94:
0e:d6:84:de:6f:39:07:a8:1c:2d:c3:e0:d7:3d:0d:74:67:49:
f4:c1:00:19:44:88:00:45:21:f1:ed:a6:bf:f4:c8:0d:cb:66:
6d:81:08:59:e2:17:b0:aa:83:42:1f:e3:6f:9f:04:32:7a:10:
bb:3e:8e:53:55:d3:c4:49:33:9a:0e:55:be:59:7a:65:bb:22:
01:0c:f5:27:fd:0e:4b:fd:e4:b0:27:59:f0:32:74:d9:0a:07:
47:78:5c:05:2c:85:0d:e9:45:ba:6b:0c:e0:13:84:10:be:ae:
88:67:6f:d7:37:c6:ce:93:b0:37:f3:4a:6e:d7:04:85:a4:a0:
8f:3a:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:27 2025 by rpki-client