Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: we5M/JzDT9wROKhxenTjEflYJ1RSDZiNTAWDI6RgUIw=
Subject key identifier: B4:1E:3C:6D:C3:A2:12:CD:40:64:3E:85:10:AA:29:E7:A1:A6:58:46
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 01958CCE7BC6A0578006A5A2D3E289E5ACB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 14A0
Signing time: Thu 13 Mar 2025 00:01:37 +0000
Manifest this update: Thu 13 Mar 2025 00:01:37 +0000
Manifest next update: Fri 14 Mar 2025 00:01:37 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: 1koFALLHlrbgAQAdi3XYOsrdYvmdgyQPEyfoJYNRARk=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:7b:c6:a0:57:80:06:a5:a2:d3:e2:89:e5:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Mar 13 00:01:37 2025 GMT
Not After : Mar 14 00:01:37 2025 GMT
Subject: CN=b41e3c6dc3a212cd40643e8510aa29e7a1a65846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:52:e5:c0:52:3d:e7:33:35:15:b0:9c:31:
cd:2d:3d:96:e7:99:c1:79:b1:2e:e6:dc:90:c1:cb:
fa:90:78:e5:c5:fc:e9:a2:0e:c8:8b:3c:3a:6d:e1:
04:88:35:46:0c:79:db:03:05:a9:82:30:56:76:ff:
ec:cf:b4:4d:81:74:89:44:52:b6:32:6c:af:18:86:
21:fe:90:de:30:fb:85:b0:8a:e6:66:73:16:ae:db:
95:60:e7:20:88:6c:99:74:bf:60:be:c7:d9:3f:2d:
7e:ce:8f:91:bd:47:e8:1e:99:bc:62:56:a9:e2:82:
27:a1:e5:aa:95:ca:26:8e:fb:63:0b:93:8c:37:53:
e8:d5:88:49:a9:8c:dd:a0:6f:ad:3f:63:50:3f:11:
74:48:9b:58:37:03:41:d8:95:e9:5c:26:e9:d0:25:
5f:9a:bd:4a:fc:fc:a8:d3:e1:46:5a:2e:96:72:45:
76:4f:af:ea:a5:2a:15:7e:68:ac:93:79:16:fc:13:
41:71:59:98:82:af:c4:2a:f8:bb:36:1e:ca:7e:c5:
2b:60:c2:da:98:ac:41:9f:1a:63:6f:11:97:80:7b:
91:34:43:1e:44:a6:5b:e0:60:10:11:26:66:06:dc:
06:97:87:ec:96:36:29:9a:c5:a2:f5:c7:dc:73:2c:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1E:3C:6D:C3:A2:12:CD:40:64:3E:85:10:AA:29:E7:A1:A6:58:46
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:25:89:0c:7c:64:19:36:1e:fc:0c:13:f2:ec:1f:06:d6:77:
25:0f:2a:3c:c0:a9:c1:72:04:1a:5f:c2:d8:dd:55:89:23:06:
1e:b6:7e:95:4c:d3:70:d1:8d:e9:e9:7a:8a:ef:22:aa:c3:ca:
e1:aa:a5:8d:a2:12:30:68:9b:a2:e9:1d:20:72:bd:de:59:c6:
dd:7a:f6:6b:6b:03:0f:38:82:f1:97:27:61:0f:48:f3:15:5a:
13:b6:12:4e:92:a2:00:92:2f:c3:cf:99:50:86:b5:e3:63:79:
29:2c:ea:81:ef:29:bd:55:a5:92:32:53:0f:72:a6:0d:69:62:
e0:9a:7d:62:0c:0c:ff:0c:ae:74:6d:a1:23:fc:70:d1:5d:33:
eb:eb:b3:e9:e0:91:67:c4:24:a6:17:7b:dc:4d:07:6e:55:58:
0b:32:a9:a1:d6:5f:2b:74:d4:de:f6:7d:f1:3b:7f:70:6e:84:
29:3d:62:7e:36:a4:a9:b7:c3:b7:21:ea:09:d4:d7:85:d3:80:
7d:53:28:b5:af:ec:2b:4e:54:50:36:67:40:57:c4:8b:90:ad:
9e:8e:e3:dd:3c:c0:71:68:cd:cf:6d:3d:42:31:45:b2:15:53:
21:cd:94:cf:9e:7c:4d:23:02:9d:1a:12:cb:64:a1:13:a7:8d:
33:d1:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:24 2025 by rpki-client