Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: tU0ifMA7OLnLwKoummyjoSyOG5W/e3oHSDwhzW5aaZk=
Subject key identifier: 07:DA:62:52:99:76:75:60:87:95:AE:F0:01:8A:04:14:EF:D5:D8:F3
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 019652DB28E0A43614CB6A5B95FA94216937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 0F67
Signing time: Sun 20 Apr 2025 11:00:16 +0000
Manifest this update: Sun 20 Apr 2025 11:00:16 +0000
Manifest next update: Mon 21 Apr 2025 11:00:16 +0000
Files and hashes: 1: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: FokUFHVo1OHPVuqzzaWRqDA/RjNWh+yJVDg1Dxe7W/A=)
2: pYvKtWHjQL1axAyemHXasjizsXI.roa (hash: +saRg/F7RlIOLGe+6CACF+gl/0HmxqxN1SsKDNk6n+M=)
3: qBYlovJkfJHkvUcB5hy59ysLvBI.roa (hash: rhUQ7eemuasO/N/vCeryMqfVlnZzFbMH9k0Lde5p9sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:28:e0:a4:36:14:cb:6a:5b:95:fa:94:21:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Apr 20 11:00:16 2025 GMT
Not After : Apr 21 11:00:16 2025 GMT
Subject: CN=07da6252997675608795aef0018a0414efd5d8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:56:e1:cf:a6:b3:89:e2:01:d8:d7:46:ad:
05:f8:1e:9f:93:62:e7:e5:f4:e0:3e:cf:ec:8a:40:
95:85:e2:b5:26:0c:c8:69:2b:38:83:d4:a0:ed:c1:
eb:55:64:6c:24:a4:cd:c4:0f:56:ca:df:a2:4d:0e:
65:13:2e:bd:eb:46:7d:59:5a:8e:b8:4d:71:0b:94:
ad:31:0c:34:91:53:2d:b3:71:11:83:9e:bf:14:e4:
86:6b:a5:c1:14:89:7e:fd:e2:bb:fc:29:ae:06:fb:
52:97:23:77:c9:00:c6:ff:ed:40:b0:bc:36:ca:b7:
b5:d5:33:dd:57:44:69:a5:66:59:8d:d8:e1:86:dd:
e2:ad:05:c2:c6:ce:0f:af:0f:b3:69:9f:f8:3c:0b:
9b:34:2d:00:61:58:15:29:5c:6f:6e:3d:f8:63:ca:
84:92:22:d9:f1:53:ed:e5:d5:ad:f7:7e:9e:8c:a1:
75:a2:55:03:73:4f:c9:4d:d6:55:51:f1:53:74:15:
44:08:92:b8:e0:31:b1:e6:95:2f:09:38:d7:e1:35:
de:cb:5c:0b:eb:4e:88:d5:15:62:ec:2b:e4:45:67:
0c:f3:8a:a4:e5:c2:cd:14:9b:9f:2f:a5:ff:d2:67:
20:e7:54:98:27:b9:47:95:3b:37:ed:8a:22:02:40:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DA:62:52:99:76:75:60:87:95:AE:F0:01:8A:04:14:EF:D5:D8:F3
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1b:34:31:7e:1f:d8:5f:bb:86:ef:33:a6:04:7e:5f:de:3e:
8a:1c:37:96:6b:f8:0a:07:e6:15:69:2a:b0:cf:8a:09:42:d9:
69:f6:91:d7:9c:63:75:0a:4c:b9:a7:f9:5b:24:81:c1:02:8b:
cb:5f:fa:1a:e4:54:3b:11:9f:ff:aa:5e:7c:89:92:3b:21:a9:
ff:d3:14:af:1b:5f:3f:6e:d6:f2:ff:a3:b3:7a:5b:0c:8f:30:
27:ed:25:44:bf:7e:32:dc:6e:45:78:e4:b0:47:75:20:76:af:
00:ea:4e:7c:e2:fe:67:84:ea:60:4d:1a:35:09:27:17:2a:da:
62:58:ca:7c:45:a9:59:cd:f5:26:bc:1a:cf:ce:5d:99:e7:ae:
a4:1d:d3:1e:79:55:ab:17:08:87:a0:17:73:89:5f:2c:88:03:
c0:6d:d4:a0:d6:16:ee:d6:90:13:79:a3:6f:92:07:41:57:fd:
5f:d6:27:6d:14:e2:f6:e6:1b:6f:79:c4:09:53:52:7e:1e:cb:
a2:49:7f:65:b5:76:1e:d7:d1:87:1d:76:15:9b:2d:c7:ed:fd:
d0:2d:ae:0d:f2:f7:b9:a4:2d:5a:cd:42:91:81:6f:3b:bf:ca:
65:25:b1:74:f5:5d:14:03:11:9a:19:87:4c:87:e8:ea:a1:20:
88:96:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:40:19 2025 by rpki-client