Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
File: wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json)
Hash identifier: G+k+Y4FEB0Hq9xrQwOg2upF5Kn3R1+6IlkoxtuMTcQ8=
Subject key identifier: 61:4E:02:4B:0A:F3:7E:58:C7:0F:E3:AA:E7:71:18:67:E4:40:F5:8C
Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
Certificate issuer: /CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Certificate serial: 01964EFEA0E4EF0257B9137B34437B8B90AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 17:00:32 +0000
Manifest this update: Sat 19 Apr 2025 17:00:32 +0000
Manifest next update: Sun 20 Apr 2025 17:00:32 +0000
Files and hashes: 1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=)
2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: Qx/zLmIabGYt7yurAn9whJvBES/QjOrW+QDZD6LLC0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:a0:e4:ef:02:57:b9:13:7b:34:43:7b:8b:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Validity
Not Before: Apr 19 17:00:32 2025 GMT
Not After : Apr 20 17:00:32 2025 GMT
Subject: CN=614e024b0af37e58c70fe3aae7711867e440f58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:1c:51:f6:c9:db:62:62:7e:81:c3:54:3c:
f0:c7:1b:01:ae:d9:ef:93:ea:7f:3d:90:20:24:34:
4a:05:ae:68:25:1d:c0:78:e8:e8:1f:49:16:23:cc:
d3:be:b5:e4:1c:50:d5:6a:62:40:14:9c:5b:d7:7e:
18:a2:2f:b6:33:d4:de:d8:6f:73:cf:3d:99:a6:90:
48:f9:2a:eb:64:4f:d8:ef:8a:d1:7a:64:a7:7e:f5:
9c:c3:e2:1c:7c:c9:f8:1f:c5:5a:13:8e:56:65:22:
63:dc:35:8a:5e:b8:79:fb:e6:c3:7c:18:72:4e:7c:
b5:c6:27:07:90:0f:1f:9a:07:03:62:a9:86:88:66:
58:6a:29:14:84:c5:7a:28:a9:0f:a1:52:b9:9d:61:
9b:22:06:79:01:0c:cd:b9:1d:d1:16:a2:a7:db:0f:
aa:79:4a:71:ae:0d:a6:a9:ba:a1:e5:a8:be:69:07:
9b:c9:19:6a:18:39:cd:13:47:51:c1:f0:f8:78:32:
02:84:7f:77:3f:bf:92:c4:ad:b9:cd:fd:40:76:3a:
63:34:56:36:f4:51:cf:e1:c4:d9:e1:48:62:10:ff:
47:a9:65:ea:5d:72:83:bb:af:c5:3c:81:74:2e:3a:
ad:65:6a:e6:27:8a:52:d2:3b:e5:d1:7f:48:8d:14:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:02:4B:0A:F3:7E:58:C7:0F:E3:AA:E7:71:18:67:E4:40:F5:8C
X509v3 Authority Key Identifier:
keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c9:d0:f4:dc:6d:3b:46:d7:5b:6d:1a:ab:73:67:fc:98:53:
5f:58:89:69:f3:ca:dd:b5:d2:8b:57:9f:40:53:b8:cc:f7:60:
22:85:87:84:0b:1c:59:5a:43:aa:63:4e:0a:87:f7:5a:a4:20:
5a:4f:c1:99:03:24:e6:c0:a7:b0:e3:13:c7:c3:ab:50:88:69:
be:35:8c:d0:77:00:2a:df:0a:ec:fc:52:34:38:25:c3:d0:ac:
0b:cd:4a:fc:dc:14:23:11:28:81:36:a9:6c:a1:07:2c:04:1e:
20:5f:60:58:15:ee:49:12:b7:b4:a2:ac:ee:01:43:59:45:6b:
70:b7:02:b9:d0:a1:4f:0c:b4:dc:6a:05:b4:10:07:9c:7a:35:
29:fa:41:2c:4e:bc:8d:87:15:49:25:bf:89:b5:6e:8c:01:e6:
59:09:51:cd:5e:4d:fd:70:a6:d0:7f:a9:dc:d9:e9:9f:44:fd:
17:2a:41:d5:78:2c:dc:9b:70:62:39:c7:0b:ac:a4:d0:2d:78:
81:05:ab:fb:bc:ab:6d:a4:4f:4a:a5:bb:bb:e8:6f:e3:59:85:
0f:10:78:9a:30:5a:02:ea:0e:c4:f4:32:6c:ea:24:b4:da:2c:
8b:c9:bf:56:1a:76:4c:e9:95:37:7a:14:9f:b2:f5:fa:b7:73:
36:b3:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:29 2025 by rpki-client