Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File: WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier: xGKfIYERDKkxX+uT+rCyE4j3MxQhPbyvkaeg/dEuCtk=
Subject key identifier: 25:02:9E:62:67:F3:B2:AB:ED:3A:20:6F:53:29:D7:ED:EB:C5:7C:47
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 019650B64E18657746C7B93AF1F8DF7E9FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 01:00:46 +0000
Manifest this update: Sun 20 Apr 2025 01:00:46 +0000
Manifest next update: Mon 21 Apr 2025 01:00:46 +0000
Files and hashes: 1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: XJajmuGKFrtJfKZUMsHCbTmTalJHfX8agHdclaZWPlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:4e:18:65:77:46:c7:b9:3a:f1:f8:df:7e:9f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Apr 20 01:00:46 2025 GMT
Not After : Apr 21 01:00:46 2025 GMT
Subject: CN=25029e6267f3b2abed3a206f5329d7edebc57c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:c3:d6:f4:6d:76:b8:90:2e:e1:33:5c:d4:
4f:13:05:29:d7:fd:ec:7b:1e:5e:95:32:19:e4:b6:
a3:6b:66:6d:27:06:d3:fd:a3:a3:b2:6d:76:a2:1c:
38:9b:73:45:44:d2:09:4f:9d:87:5c:1a:aa:2f:38:
da:78:f4:0b:0b:d7:8b:b6:42:e0:87:69:11:58:71:
ec:75:08:3a:1e:2b:45:5d:d9:07:58:4c:6e:92:ba:
d2:3c:02:ee:9f:4d:cf:6a:ce:10:4a:ea:5e:0f:a4:
ff:69:d1:85:95:0d:b8:c9:e5:1a:b7:b4:7e:95:af:
76:2b:e0:3d:8a:31:42:df:a6:77:6f:e2:13:46:4a:
e5:52:dd:81:0b:df:33:24:79:57:df:d6:f3:68:77:
a4:d0:fb:59:8c:da:a5:c9:b6:b3:15:8e:bc:b7:1b:
df:e5:bb:69:36:36:d5:ad:5d:e6:b4:ee:9a:b0:ae:
29:15:45:6d:a5:9b:4c:7c:19:49:02:a4:2c:20:9d:
58:c8:29:98:32:75:97:d8:0b:cd:20:e2:3c:d7:8f:
e8:a0:e8:81:af:f9:a4:f3:80:09:e2:58:07:5c:c2:
c6:44:ff:79:70:77:3b:85:e5:a9:84:c1:f7:d1:ff:
07:9a:3e:32:11:9d:61:6c:2c:82:e9:f9:8e:01:07:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:9E:62:67:F3:B2:AB:ED:3A:20:6F:53:29:D7:ED:EB:C5:7C:47
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:83:d1:df:1c:70:31:17:37:d7:ab:48:5c:7c:89:39:2e:e4:
ba:d3:0f:7f:8b:5f:74:f8:ff:07:09:2f:8f:27:8d:98:db:b6:
3a:2e:4a:62:13:77:8f:86:a9:d1:a9:69:bc:fa:ae:fc:47:ab:
bb:d3:81:8e:f7:7d:91:62:fe:a9:7f:7d:0f:58:a9:f7:0f:9b:
98:ee:37:52:a3:eb:fc:e0:0c:6f:e2:91:9c:10:de:58:da:a6:
1f:00:14:04:d1:e3:9a:fe:c1:4b:77:54:7b:2e:0d:f9:44:ab:
5f:c7:4d:ff:47:99:49:d9:a6:37:cc:2b:3f:2e:ec:79:c5:9d:
2d:e3:ff:8e:5c:30:a9:eb:76:76:f7:de:d5:3a:73:17:5f:30:
1e:42:22:3d:93:b5:ad:31:0d:a4:62:c2:6e:da:6e:7f:2d:7a:
48:a6:ee:54:79:82:a5:e3:f3:7e:79:ba:83:de:8f:6f:63:92:
a1:df:f9:c6:34:93:bf:38:31:fb:26:e9:36:25:ce:e0:94:89:
11:1c:81:7a:9c:c7:e0:a6:69:53:a9:3b:ca:74:96:72:bc:89:
bc:e6:11:8e:7c:4e:9f:0e:c4:2c:8c:f6:a0:b1:0a:5a:eb:3c:
c3:d3:a6:2b:3a:ad:52:a4:e7:c8:2f:5c:ba:dd:c7:af:a7:12:
08:e8:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:53:22 2025 by rpki-client