Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
File: WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft (raw, json)
Hash identifier: reOaQJ1QtkN/o9GmkzscdQpziT3k1ody5bGeFEbrsdA=
Subject key identifier: BD:3F:2A:99:8F:7A:53:98:74:D6:3B:9C:79:95:79:91:E0:38:A6:F9
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Certificate issuer: /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial: 019652DB1FC8B7D7457D98341CC15B44F3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
Manifest number: 082C
Signing time: Sun 20 Apr 2025 11:00:14 +0000
Manifest this update: Sun 20 Apr 2025 11:00:14 +0000
Manifest next update: Mon 21 Apr 2025 11:00:14 +0000
Files and hashes: 1: 13RrS0RVMNZjnoNzLeY0leATSKM.roa (hash: 5Kd668wao4EqEPYlsHp9hU5bq0vk1PZWy+Au8TDKmnI=)
2: WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl (hash: C9HOyvWrw6ADida9y+MRL91SFm2eWv+4+l6n9v3HWJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:1f:c8:b7:d7:45:7d:98:34:1c:c1:5b:44:f3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Validity
Not Before: Apr 20 11:00:14 2025 GMT
Not After : Apr 21 11:00:14 2025 GMT
Subject: CN=bd3f2a998f7a539874d63b9c79957991e038a6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:2c:e7:e0:96:83:5d:b3:aa:a7:50:aa:62:
7a:1f:8a:94:6a:30:7d:43:49:75:33:21:5c:74:8c:
f1:38:2a:9c:33:d5:29:c1:90:71:5a:4e:0c:61:7a:
2f:df:90:ea:38:f4:85:63:e2:17:ab:ed:2f:15:af:
58:cd:8e:3f:33:ee:47:ef:0a:1c:a8:8c:99:e5:68:
84:ce:4a:41:c8:c3:ea:a4:0a:6b:e4:cb:5a:83:2e:
43:b3:16:9d:c1:92:c7:68:10:d3:77:a1:6a:ab:dd:
6d:ce:67:ce:85:f0:cf:8e:82:b7:ac:63:cc:d3:1b:
93:1d:f5:10:e9:d8:4d:11:3f:cc:b3:fa:65:28:97:
47:c7:6b:c5:9e:8c:06:fc:69:b2:22:ed:f7:fc:2d:
d8:d5:80:a6:dc:3c:c6:bf:a9:cb:c5:ef:60:58:fd:
14:a7:f2:62:77:ac:32:7e:36:44:97:83:33:34:53:
f4:aa:6c:2b:12:01:91:fd:fa:04:8c:b8:85:51:06:
22:12:a9:0d:e9:c5:47:d6:44:70:30:ce:57:ea:53:
23:82:ca:95:02:63:a3:fb:a4:84:b3:16:99:ff:6e:
bc:82:b8:12:b6:f3:61:20:a2:17:1b:5d:6f:8a:07:
64:b3:d3:e3:a0:ad:2f:31:b3:39:a7:56:8d:1d:97:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:2A:99:8F:7A:53:98:74:D6:3B:9C:79:95:79:91:E0:38:A6:F9
X509v3 Authority Key Identifier:
keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:97:e7:84:ac:51:bf:e5:95:2f:84:00:6a:14:fd:6b:87:b5:
f1:09:e4:be:78:9a:b4:7a:f3:e6:d9:74:87:c7:64:94:1b:ad:
d1:41:78:f1:9a:02:fe:fa:30:2e:a0:90:e2:d3:7f:80:34:2e:
d8:55:27:ff:cc:2d:03:6d:02:43:e8:08:ef:15:fc:70:9e:97:
ab:02:03:5e:fc:b2:b5:77:ce:1d:ec:a9:2e:b1:fb:4b:a6:1e:
82:07:0b:3c:fe:65:eb:28:19:8c:98:95:f9:a5:cc:a6:4f:93:
d4:14:06:bb:4d:27:66:9a:b4:d1:2e:6f:f5:46:cf:93:4a:06:
6f:b9:fe:97:9a:bb:99:21:3b:d6:2d:59:7b:9c:c8:f7:8d:f4:
a8:28:6f:50:a8:24:cf:f0:1e:9f:be:b6:60:ee:43:37:f8:5a:
0c:62:b7:18:af:ab:7b:c5:a4:3d:84:72:c8:21:8c:a3:62:e0:
86:18:a4:68:ac:ff:da:92:e5:cc:51:9d:28:31:90:9c:35:2c:
f4:24:47:e1:a8:3b:04:81:23:2a:c9:06:39:71:67:c9:b3:69:
ba:c6:dd:d5:6e:6a:94:fe:da:75:d4:1f:21:4a:7b:91:33:c5:
34:69:6e:19:46:d9:54:f8:2b:79:1e:75:e4:16:31:b3:94:fc:
5a:a3:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:59 2025 by rpki-client