Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: afptmequ4L8gpS9CauuoA/5nKOQrjk82dtulWF4R28c=
Subject key identifier: 43:56:3C:3E:DF:1E:D7:5E:7F:3F:71:4F:49:87:7D:89:4A:90:FD:AD
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 01958BF2912397813C7C677D4003DDF6B819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 0F00
Signing time: Wed 12 Mar 2025 20:01:24 +0000
Manifest this update: Wed 12 Mar 2025 20:01:24 +0000
Manifest next update: Thu 13 Mar 2025 20:01:24 +0000
Files and hashes: 1: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: bOzZ5HmbmLCG2QV4lox/47TGODar/GFQJiqpo2qOw3o=)
2: pYvKtWHjQL1axAyemHXasjizsXI.roa (hash: +saRg/F7RlIOLGe+6CACF+gl/0HmxqxN1SsKDNk6n+M=)
3: qBYlovJkfJHkvUcB5hy59ysLvBI.roa (hash: rhUQ7eemuasO/N/vCeryMqfVlnZzFbMH9k0Lde5p9sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:91:23:97:81:3c:7c:67:7d:40:03:dd:f6:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Mar 12 20:01:24 2025 GMT
Not After : Mar 13 20:01:24 2025 GMT
Subject: CN=43563c3edf1ed75e7f3f714f49877d894a90fdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:ba:19:a3:b2:f6:41:92:7d:ca:4d:4f:11:
6a:54:95:5d:cf:f8:f5:90:fa:a2:4e:e8:b9:34:c8:
84:a0:a8:63:10:06:f6:94:68:c9:df:e8:46:40:e9:
57:38:43:c8:b9:63:0d:05:40:66:dc:e7:75:90:64:
df:db:62:e1:63:ea:ab:d7:08:b0:bc:a6:c2:35:46:
52:e8:cf:48:60:ef:65:3f:a0:da:44:4e:e4:f3:39:
e0:6e:00:6f:d7:95:cb:5f:ec:7b:05:09:8f:49:70:
d6:4f:16:5b:d8:08:1b:da:08:71:05:e8:68:b4:03:
99:66:c5:85:e8:7c:e8:ea:a0:4d:b7:41:5f:d7:2d:
21:1c:f6:f5:fa:fd:00:29:67:a6:8f:43:d6:a5:89:
66:6a:fd:67:29:f5:3a:63:03:4f:84:a3:e4:db:31:
ba:1d:a9:a2:7c:38:90:b5:80:2e:91:27:df:7c:6c:
45:c7:36:ed:5e:ea:a8:12:1c:1e:5d:48:ea:e2:a6:
ea:e7:05:2e:00:52:62:ce:62:32:b9:11:70:9e:54:
b2:af:f6:c9:8d:09:88:13:2e:8b:a7:3d:ad:3a:ea:
8e:65:37:73:66:76:47:de:f9:6a:71:5f:1b:b3:11:
31:3c:1a:b5:ba:50:69:87:4a:39:22:40:73:7a:56:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:56:3C:3E:DF:1E:D7:5E:7F:3F:71:4F:49:87:7D:89:4A:90:FD:AD
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:10:ec:83:1d:da:91:d6:50:2a:b0:67:d3:f0:f1:9d:45:1e:
fb:57:28:f3:57:82:66:be:12:42:d4:19:81:59:14:d2:8b:61:
1e:a7:9b:ed:7b:55:99:a2:87:a5:b3:45:b9:87:65:f3:f0:34:
0e:f7:eb:c1:cc:a0:ef:d6:9f:10:12:23:48:f3:cd:02:f4:fa:
22:52:d6:0e:a8:50:4d:72:37:f9:f9:1d:a7:0d:8c:02:5c:41:
86:fe:d0:aa:94:51:fb:ae:4a:5d:83:77:62:8c:bc:41:7a:0f:
1f:c8:f0:0e:43:18:4d:f9:74:50:6e:8c:e8:b0:0b:a0:59:1e:
04:90:66:19:60:b9:e0:ef:86:95:a8:ea:d0:d0:f9:e6:33:fc:
68:5f:aa:bd:c8:93:04:6e:d4:e6:7a:d0:74:42:ef:8c:64:b2:
61:b0:01:38:3c:ec:35:d8:fc:32:e3:d3:e1:fb:6d:d5:0d:44:
98:b6:e2:97:1d:72:71:44:da:14:40:92:ed:5d:0a:87:b7:a9:
52:95:35:cf:93:19:ae:21:24:ba:c4:15:0e:0d:4e:66:a5:0c:
25:43:2a:b4:a9:fc:16:09:70:ed:b7:8f:26:a5:83:3d:1f:2a:
f6:fd:f9:82:14:d4:39:fd:1b:1d:dc:34:14:12:11:83:a1:02:
11:67:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:12 2025 by rpki-client