Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File: wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier: +ysk3HmSqdPg/3CMyQ82LY+9LSQLxCg37f3dfK+gOls=
Subject key identifier: F5:0D:82:9F:44:39:BE:DA:D0:BB:05:26:D9:2F:F9:65:1E:6A:4B:CD
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer: /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial: 01962ABC1D1D4B708607EBEF95A6C1C51E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 16:01:33 +0000
Manifest this update: Sat 12 Apr 2025 16:01:33 +0000
Manifest next update: Sun 13 Apr 2025 16:01:33 +0000
Files and hashes: 1: hWs8BC_h3pk307welYbUg7knJ4s.roa (hash: dB9CucoPV9UQVFmYpgxFuKafR8O28SK4AMzI4d3GC5o=)
2: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: 8/8bXlhxLKQBL1TEz1ntF+FGWzhnLw5gtNGS2vZIe7U=)
3: zsnDAUQ9OWrVKsrixNM64UubPEE.roa (hash: 8s4+Ar8E4qPe68moGEzfuFe9b4Z1MTv6KsbZ2gEaOyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:1d:1d:4b:70:86:07:eb:ef:95:a6:c1:c5:1e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Validity
Not Before: Apr 12 16:01:33 2025 GMT
Not After : Apr 13 16:01:33 2025 GMT
Subject: CN=f50d829f4439bedad0bb0526d92ff9651e6a4bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:2f:9d:ee:bd:bf:7f:67:bf:32:97:83:c3:
96:e5:a5:0a:16:06:c7:51:19:20:5c:d1:1d:c3:3a:
52:74:f9:aa:8e:80:05:a8:d1:0a:36:00:08:59:f1:
92:4c:36:96:da:99:49:bb:12:39:2f:ec:ae:a0:21:
35:bb:82:cb:52:c2:ca:b8:53:e1:dc:91:dd:3c:f0:
bd:33:78:71:1b:74:5e:69:53:d9:43:d9:e7:fb:35:
d1:97:14:5b:f5:85:4c:18:e4:6b:af:eb:bc:5c:18:
99:50:78:0c:54:eb:89:0f:5b:9a:8d:ad:46:b8:52:
5e:5e:b7:99:f5:a4:29:4c:33:ab:75:e1:2e:34:b4:
aa:5c:b9:7f:65:ce:b2:87:03:c5:26:4b:3b:87:7c:
0f:b2:da:1e:5b:bd:42:eb:88:ed:42:a5:27:4e:5b:
ff:c2:0c:c3:93:66:0d:3f:7c:5a:55:9a:33:27:21:
85:a9:53:2b:40:a9:30:dc:89:38:41:4d:94:d2:8b:
60:52:00:40:5a:ed:61:db:1c:fa:b4:74:4d:83:b3:
64:52:8d:2a:62:bf:0f:9e:57:f0:32:cc:d0:2f:69:
a8:49:dd:8b:da:03:8a:fc:b0:db:e3:4e:fe:78:fd:
ea:fb:04:89:6a:a3:bf:ef:44:a8:c1:b5:fa:e8:2f:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0D:82:9F:44:39:BE:DA:D0:BB:05:26:D9:2F:F9:65:1E:6A:4B:CD
X509v3 Authority Key Identifier:
keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6f:30:7a:34:57:a6:51:b3:4b:82:45:e6:75:0a:66:27:31:
42:09:54:17:5c:06:8a:b2:1d:6c:21:84:36:da:ab:31:46:8a:
3e:c1:2a:dd:81:ae:57:d4:58:3c:77:f4:b1:54:91:ed:91:08:
e4:d9:ff:55:33:83:91:8e:cd:ff:f7:ef:27:33:5a:b3:e8:6a:
c3:43:25:4b:7a:f6:c3:fb:79:db:ea:15:a3:77:3b:ec:3a:a3:
a2:b9:02:08:59:ce:6c:b5:cf:ef:03:d4:33:bf:25:25:9c:b1:
77:5c:84:a7:93:eb:fe:86:ae:ac:f5:6d:97:b2:b9:c5:61:97:
f2:63:fa:e3:0c:fe:49:32:e4:24:8e:5a:e8:f1:46:b4:4a:b4:
9a:2c:ee:fc:9e:ab:a8:8d:62:26:6c:b3:40:5d:49:2b:bc:8f:
bb:f7:27:5e:6a:3d:7e:d5:61:27:6e:3b:a7:ed:d3:07:14:ec:
a6:ed:00:54:0b:c6:e8:84:60:90:87:64:74:93:2b:61:ec:ce:
14:50:4e:43:50:25:f1:ae:27:8d:88:a7:90:7c:3a:e6:dd:32:
99:36:93:41:42:74:6b:aa:97:e4:09:0d:3b:2f:46:d0:f4:7f:
55:7c:62:ec:ee:39:d2:d9:48:02:a0:3d:46:be:13:f8:47:f6:
50:17:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:58:07 2025 by rpki-client