Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
File: WnVplLspLknsxjN7f5XWnuKvYeE.mft (raw, json)
Hash identifier: XcWBuE++dotMFYtH3tixjerqi3jlMgb3ep+yJSxg/4U=
Subject key identifier: 8D:13:1A:B7:53:39:B1:BA:8C:20:F9:1A:1D:8A:A5:43:04:E6:65:CC
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 01964A7D685914DF3ED6799383AC23853A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
Manifest number: 14FE
Signing time: Fri 18 Apr 2025 20:00:54 +0000
Manifest this update: Fri 18 Apr 2025 20:00:54 +0000
Manifest next update: Sat 19 Apr 2025 20:00:54 +0000
Files and hashes: 1: 2GHxfiOPwbVOTy5G53i5QmAAwSg.roa (hash: iadwsn+4MKu/mlQdggoj9cx+xrbMZwAE31ck5bH3Eho=)
2: WnVplLspLknsxjN7f5XWnuKvYeE.crl (hash: cNQbR9LRwuAUi1OzZ710gqaXlAFcFiDwTO/DQw+Wb+c=)
3: bWzRkWCt3v3bm-IZIROioFCJ8mo.roa (hash: Gh5JxyL071JSfkk/OFs2Jh7lq9MVbiHj6edZCvfMErQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:68:59:14:df:3e:d6:79:93:83:ac:23:85:3a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Apr 18 20:00:54 2025 GMT
Not After : Apr 19 20:00:54 2025 GMT
Subject: CN=8d131ab75339b1ba8c20f91a1d8aa54304e665cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:f9:ec:9b:d1:5c:fd:dc:51:e9:d8:1e:38:
81:e0:c5:64:23:2d:6f:39:43:a3:b7:3f:65:e5:3f:
f8:b7:cc:f6:99:61:b6:f6:a8:dc:6c:88:2c:57:8b:
74:f7:2c:ed:45:d5:36:42:87:e6:72:a5:1b:49:ef:
87:ad:c2:2a:94:8c:0c:ce:ba:d6:2c:96:d1:ed:0a:
10:f7:4b:68:ea:a1:b4:7b:a4:5e:aa:f4:0a:a1:1d:
f4:2d:03:ea:a2:8f:51:a9:30:3f:f2:c3:39:2d:d8:
99:cf:a3:ce:71:9b:f7:21:7b:01:6f:52:61:ca:f1:
be:4a:33:aa:87:ab:fc:c7:b3:0b:32:bd:05:9b:d7:
02:7b:6e:97:0b:0a:97:76:c5:44:48:7a:78:9d:48:
09:94:29:fa:75:ed:69:79:f0:40:b6:33:81:65:98:
3e:d0:63:ac:85:d5:5c:b2:72:75:86:71:8e:c4:79:
c4:9e:c3:ef:9c:12:9d:2d:61:f4:21:b0:f0:9f:5d:
93:5f:2e:e1:14:09:de:6a:d4:fe:c0:8e:ce:16:6b:
0a:b5:25:89:14:fb:38:99:16:bf:a6:47:47:54:39:
f9:15:a6:7a:f4:18:ef:0e:40:8a:d7:ad:32:b1:c5:
c5:cc:e7:1c:74:87:e1:e2:28:e1:fa:dd:d1:8a:b4:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:1A:B7:53:39:B1:BA:8C:20:F9:1A:1D:8A:A5:43:04:E6:65:CC
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:de:27:67:7b:88:a6:e7:e4:a1:23:72:59:b9:34:49:19:79:
ea:42:fd:5e:2c:f7:4c:0b:66:9e:df:6a:de:a0:42:32:e3:d6:
5a:36:ba:40:01:cf:a5:3a:77:82:14:91:eb:1b:97:b4:10:06:
af:3b:30:97:41:7d:41:3d:78:21:95:74:87:d5:f5:ab:3f:c7:
a7:1e:bd:60:e3:64:a8:27:49:79:ab:3b:dd:7a:49:c5:33:44:
ee:57:e8:08:47:a8:8b:61:41:d7:e5:b9:0d:93:45:6c:f0:77:
f6:ae:de:52:d1:32:48:60:88:e9:65:8e:51:2d:68:9e:1a:74:
1e:a4:72:84:a1:a9:79:85:b5:ee:b9:97:4c:36:cd:b7:5b:be:
d8:a2:84:b0:77:1f:85:3b:3e:77:61:cc:9e:b6:55:48:3b:33:
e9:00:f5:4d:88:10:ee:92:b3:c2:f6:8f:1f:24:9a:a8:6d:8a:
5b:1e:57:57:36:72:05:2d:9a:03:9c:c1:0c:9e:67:ae:d8:64:
0f:b0:60:79:22:4b:54:50:3a:8e:42:d0:fd:60:81:05:7e:b8:
cf:98:af:ca:0e:7a:e1:e6:44:2f:9e:39:d4:ad:e1:af:7c:e7:
bc:7d:88:2e:9e:6d:6e:5b:d8:2d:4c:c8:8c:67:28:0c:2e:04:
94:09:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:09:42 2025 by rpki-client