Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier: 1XghWYtou2Q34/yQU6KfD2WE04mAGEx/i77pg4AO2PE=
Subject key identifier: 3F:70:26:8A:17:2E:5A:E7:71:22:BA:03:0A:3B:6C:EF:94:8B:77:28
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial: 01963F8B55467326696FF92E3DC1CC0F663E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number: 01D6
Signing time: Wed 16 Apr 2025 17:00:17 +0000
Manifest this update: Wed 16 Apr 2025 17:00:17 +0000
Manifest next update: Thu 17 Apr 2025 17:00:17 +0000
Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=)
2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: nK7/Zg234B73y1ET0Qm95XtN9YJHKPBDMqEf8aB3Fck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:55:46:73:26:69:6f:f9:2e:3d:c1:cc:0f:66:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Validity
Not Before: Apr 16 17:00:17 2025 GMT
Not After : Apr 17 17:00:17 2025 GMT
Subject: CN=3f70268a172e5ae77122ba030a3b6cef948b7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:7f:42:9d:39:7d:ad:e3:b3:c0:a6:86:19:
ae:97:a6:4c:ba:0a:c5:9d:49:ef:71:a7:26:cb:6e:
c4:d3:ec:86:27:e6:bc:ea:10:b0:d0:2b:d6:48:e9:
19:e3:18:c8:17:bb:3f:1e:50:18:49:91:e7:00:3f:
d6:7c:18:6a:ae:68:ab:a7:cb:f3:ae:a0:30:db:89:
51:c3:c0:9f:6d:43:2e:1e:18:00:39:8c:5c:48:5f:
3a:0a:68:95:4d:4e:04:9f:b7:53:a7:86:cf:01:f1:
b5:d0:b5:41:a4:48:a2:e2:08:58:d4:45:d4:8e:ba:
62:ae:62:f1:47:21:a9:43:24:f0:8e:d9:b6:eb:83:
6d:5d:c3:eb:6b:38:01:8a:87:97:15:1f:ad:f1:0d:
96:22:e8:d0:5e:7e:07:13:c7:e6:51:dc:45:ef:67:
2f:a9:c3:e7:02:7f:47:77:21:0f:8e:c6:fc:c5:23:
92:8b:bd:3b:a2:22:18:f9:b3:26:01:05:39:5d:eb:
ae:d2:b2:a9:6c:99:b2:0b:bc:e6:97:d2:50:c2:ab:
42:a9:f2:1c:58:f6:4d:a1:5a:b9:ee:92:88:fb:be:
c7:34:01:2a:91:02:57:7f:b0:fe:0d:51:83:cf:3e:
90:0a:a2:f7:65:8d:3c:60:05:d7:ac:bf:b1:bb:85:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:26:8A:17:2E:5A:E7:71:22:BA:03:0A:3B:6C:EF:94:8B:77:28
X509v3 Authority Key Identifier:
keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:14:49:b6:45:75:ea:79:cf:9b:ee:ba:cf:c8:76:1c:5f:ee:
92:5b:99:1b:0b:b7:d1:7d:6a:0c:dc:77:cf:8d:73:f8:76:73:
7f:ac:18:3a:df:eb:fc:c2:b8:83:83:18:91:2d:b1:95:e0:b3:
d9:fe:d2:bf:e8:6b:c4:d1:68:5c:09:11:9a:3f:2a:b2:f8:ae:
38:0a:ea:b7:d5:fd:75:20:a5:67:be:d3:1a:2f:7e:5e:5c:df:
b3:c4:75:a1:05:e4:48:4e:5c:2c:63:ba:84:a2:4d:e2:41:cd:
57:ba:9e:2c:63:9b:43:45:56:29:5e:5e:63:cb:a4:9d:56:77:
9e:f7:6e:0f:84:f4:9e:12:f7:27:ce:21:e4:8b:35:f4:fc:6d:
91:8f:b4:78:e6:04:88:59:f5:74:35:e9:be:09:36:12:f5:3e:
b4:17:61:45:f9:3d:4c:db:53:f1:29:08:0b:2b:e2:c2:fd:82:
f0:a5:c6:b9:70:96:74:34:60:fc:5f:ba:10:cd:5e:56:08:19:
5a:96:7a:f2:ac:1e:73:ef:cb:44:99:7e:56:9e:2a:c3:1c:7a:
ce:3c:90:cf:a5:d5:3f:48:76:e9:3d:c2:67:fd:a0:7a:69:4e:
4b:a1:40:f2:df:93:be:bb:71:ae:32:90:80:87:c9:29:5e:9a:
9e:7e:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:03:53 2025 by rpki-client