Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: UjC/YRrX2+e/Uuze7F/QydFZ5vjHuG6TuJlPFcNGZRE=
Subject key identifier: C4:27:60:9E:FF:EF:44:9B:EF:A7:C2:48:68:70:B7:58:6F:AE:3B:0E
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 01965A27523052887FD0FBBE8E74FF56B31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 08AC
Signing time: Mon 21 Apr 2025 21:00:48 +0000
Manifest this update: Mon 21 Apr 2025 21:00:48 +0000
Manifest next update: Tue 22 Apr 2025 21:00:48 +0000
Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: fA0Zj3M/qssIpDvogkEPT2SQBOSeYfgmwalU0ncNZyY=)
2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:52:30:52:88:7f:d0:fb:be:8e:74:ff:56:b3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Apr 21 21:00:48 2025 GMT
Not After : Apr 22 21:00:48 2025 GMT
Subject: CN=c427609effef449befa7c2486870b7586fae3b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:ab:8f:94:76:7b:50:77:7f:1f:f6:ce:df:
ed:da:6f:4b:9b:0e:96:03:15:e8:de:3d:70:8a:1b:
b2:85:f8:d6:82:ba:55:fc:e6:6d:c1:77:04:d8:b2:
41:44:a1:8c:bb:c2:a9:da:63:4d:f2:00:22:55:33:
18:b1:09:ca:e7:17:fd:58:d5:24:3a:4d:34:04:34:
9a:a7:4c:6f:0f:16:3f:23:08:30:b5:c5:93:ca:b5:
04:10:9e:74:41:6e:87:98:34:17:e9:da:9e:62:08:
52:73:1b:cb:83:e6:56:29:12:35:f5:0c:9c:ca:43:
aa:2b:78:84:21:5d:df:fd:53:f0:ad:bc:a6:06:6e:
93:2b:cb:f4:78:ea:f0:c5:f6:64:72:00:b3:b2:52:
7a:6a:26:94:65:fd:71:11:e5:cb:d8:8a:2b:7c:dd:
e6:f5:52:61:6c:ca:1c:fa:b9:d7:10:f5:80:da:6e:
73:56:f9:f4:8b:3e:00:95:f2:5e:d5:b5:e9:ec:0c:
d9:22:4c:0f:ed:b4:5e:5b:b3:43:d2:ba:ad:ef:61:
28:62:d5:5d:2d:5a:aa:56:90:57:01:6f:7b:54:0e:
2d:5b:f1:59:b2:94:4d:ee:fd:0e:e4:ca:c4:de:65:
dc:21:2a:2e:e7:67:39:4b:7a:ce:08:1f:77:9a:1c:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:60:9E:FF:EF:44:9B:EF:A7:C2:48:68:70:B7:58:6F:AE:3B:0E
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cd:48:1c:4e:8f:ed:85:f8:67:07:70:e3:7c:31:1d:4d:e6:
76:e1:15:01:49:8f:b5:c5:89:39:74:01:72:33:3f:af:c2:81:
7e:bd:fb:c3:f1:08:e6:62:eb:c4:a0:46:d3:55:29:e1:e0:87:
a0:7d:d6:88:c0:ab:0e:d4:dc:60:38:ca:32:2d:2d:12:12:42:
8d:50:16:e0:7a:6f:0d:74:01:f1:14:df:54:ca:38:22:bc:d6:
fb:12:10:21:98:fa:e8:e0:88:72:a6:00:36:e2:d2:a7:74:9d:
4a:b9:6f:77:07:55:bf:b8:cf:e9:42:a1:df:b5:6b:9f:cb:4c:
81:f7:89:8d:6a:74:3b:98:ed:5a:0d:be:a6:29:a3:d5:c3:93:
d5:bb:23:a2:1b:39:2c:63:f9:ec:af:21:07:5e:12:4d:09:18:
77:e8:55:96:a8:ab:d2:87:72:b8:3b:05:62:1e:9a:9e:3d:ee:
eb:d2:cd:f4:8f:24:6b:a4:34:36:0e:bb:b3:50:af:4b:c9:73:
66:7c:58:34:f0:4d:7d:7f:9d:49:a3:9a:ae:41:67:c2:08:43:
b3:14:ac:15:c0:31:7a:e8:89:23:a3:07:14:bb:5b:ba:fe:88:
5e:7f:2a:bf:6e:b1:68:3c:0a:8d:86:0d:d0:96:f4:ad:84:89:
cf:7f:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:54 2025 by rpki-client