Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: R5QBOIQvlT4/jIuTuU/akz3SEG2sWfMgaTZcD13ykKk=
Subject key identifier: F1:3A:23:CD:A2:38:28:C5:28:6C:0E:2C:A7:A0:DD:84:B1:8E:93:0E
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 019649335D4B5C31CE8CD39EE626B9CC7F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 02DE
Signing time: Fri 18 Apr 2025 14:00:25 +0000
Manifest this update: Fri 18 Apr 2025 14:00:25 +0000
Manifest next update: Sat 19 Apr 2025 14:00:25 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: GcqxQEg3oqwfGfYxDIanTYm2DfxEX5OyjE9PWEHmk/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:5d:4b:5c:31:ce:8c:d3:9e:e6:26:b9:cc:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Apr 18 14:00:25 2025 GMT
Not After : Apr 19 14:00:25 2025 GMT
Subject: CN=f13a23cda23828c5286c0e2ca7a0dd84b18e930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:c6:11:6e:b2:6e:7c:1c:b3:ef:b5:5d:b0:
6f:84:e6:17:b1:5c:bb:f8:34:ab:63:ca:76:f2:ef:
c0:40:97:da:17:52:9b:8b:45:48:4a:0d:44:44:19:
a7:7a:c2:2b:e1:5c:35:e2:61:8a:ea:84:39:ab:48:
61:18:1c:b5:2e:5b:76:15:3f:42:9f:d6:6d:34:7b:
6f:3e:7b:32:43:50:4d:62:06:74:92:2c:55:32:f6:
9c:31:8d:08:24:60:44:d1:ec:a6:a9:b0:fe:de:0a:
db:2a:db:c4:e5:64:66:0c:6f:f9:a7:3a:4f:44:a5:
7b:d8:21:cd:f6:7f:bb:a4:c9:f3:f1:3c:ad:db:00:
2f:17:68:91:a5:14:af:44:f4:3b:3e:7e:74:ef:78:
14:1e:81:f2:de:ab:c5:d9:3a:7e:7e:4e:84:0e:4c:
97:87:72:87:c3:f6:c2:c7:bb:44:d2:ad:56:7e:f7:
d1:a6:74:40:c0:85:af:21:c7:51:2a:6d:ca:fa:da:
34:3c:0d:86:1b:34:bb:e2:27:a6:80:a6:92:5f:f9:
81:fe:49:50:1f:b5:81:dc:fc:22:8c:8f:ce:8d:1d:
b5:93:44:02:c8:84:f8:e8:14:04:04:f0:a2:1a:eb:
8b:b0:68:07:91:ab:96:3d:fc:6a:66:43:91:e3:94:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:23:CD:A2:38:28:C5:28:6C:0E:2C:A7:A0:DD:84:B1:8E:93:0E
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d6:f5:95:e8:88:e2:bd:11:72:93:60:f7:6d:30:c1:9d:f4:
6f:bb:ae:61:0b:eb:bb:38:a9:fc:5b:d8:85:13:f0:24:78:49:
09:be:d9:7b:3c:90:e9:d1:2c:6f:6a:5e:9e:66:80:d0:b7:a9:
da:92:99:b8:1c:c5:a1:88:fa:6e:fb:0c:72:a0:ce:a2:05:a7:
c7:cf:40:75:12:a5:c4:6b:34:8e:11:13:20:85:c8:20:c8:a9:
48:5a:87:cd:e6:b2:be:e9:89:9b:25:12:be:43:5f:a1:50:83:
18:55:1a:61:25:e4:37:8a:c6:58:56:32:ba:f0:41:c2:8e:51:
8b:90:01:b7:fc:71:67:4a:20:20:71:23:39:9a:4e:fc:1d:8f:
f0:02:94:7d:c8:4b:40:d1:48:b4:c5:d1:0b:05:af:55:ea:99:
62:fe:a5:b1:1c:97:da:39:10:a3:ec:72:2b:f9:8d:c4:6e:62:
49:f8:02:af:27:88:b3:61:85:e8:13:cb:28:d5:f3:82:2c:af:
33:5b:99:df:82:14:52:38:80:47:91:70:1e:b3:fa:f3:54:ac:
26:04:81:4f:a7:cd:26:e7:5a:c3:f3:0d:9c:4c:13:db:5f:7b:
09:6e:11:0f:d9:2e:f4:23:ff:ea:f1:66:83:86:50:ab:e0:ff:
eb:5c:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:26:44 2025 by rpki-client