Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: it6utpU9QvVCOeaMBv7g+3lvgQtegq2cEaI3SN95y+E=
Subject key identifier: 90:21:7F:B8:D2:03:21:5B:E8:08:B5:B4:B2:8D:6A:2E:5A:FE:45:BA
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 01965EDF57C3517646DC2B358322A55ACEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 141C
Signing time: Tue 22 Apr 2025 19:00:17 +0000
Manifest this update: Tue 22 Apr 2025 19:00:17 +0000
Manifest next update: Wed 23 Apr 2025 19:00:17 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: BW/1HzaH1n+OgPC+OjF6cNNEHeVXgFa9dfaom8RHKHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:57:c3:51:76:46:dc:2b:35:83:22:a5:5a:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Apr 22 19:00:17 2025 GMT
Not After : Apr 23 19:00:17 2025 GMT
Subject: CN=90217fb8d203215be808b5b4b28d6a2e5afe45ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:68:6d:90:26:eb:1c:6b:57:1f:bb:35:c3:
7b:dc:a5:63:52:bc:ba:9a:e0:77:72:9a:42:fb:79:
ec:6c:53:27:e7:30:1b:ea:3e:da:6f:bb:2d:ab:df:
7e:dc:fc:c5:98:89:eb:37:21:0d:49:d0:ba:9b:6c:
29:68:f9:0f:a0:de:54:b4:91:f3:60:63:05:52:f9:
a6:ba:8b:5c:2f:3a:61:a6:41:57:5f:5f:c0:0e:43:
33:df:89:51:53:65:bb:99:06:fa:1d:f1:78:ce:d5:
c2:46:4e:56:dd:91:57:a6:9a:a8:ba:f4:87:3d:61:
5c:77:15:9c:9d:34:dc:71:8b:49:1d:c3:4b:55:c0:
f2:8e:76:5d:61:0c:6f:15:e3:85:28:72:db:ca:39:
6b:af:92:46:21:77:de:a5:1e:61:70:20:b3:d7:3b:
e6:9d:be:56:bc:39:d2:dc:f5:0c:d7:67:4f:66:0c:
2b:43:34:ba:b4:ee:50:3d:1e:d4:9f:8e:6c:07:30:
7e:ab:9f:34:8b:48:3e:70:bf:42:a5:dc:60:b1:e5:
44:ce:81:9d:db:7d:18:ac:85:1b:aa:8b:1b:a1:92:
c5:30:54:2c:7a:e2:ca:3f:bc:75:48:13:89:b9:ba:
60:a5:ef:b1:48:7b:e1:29:56:21:35:d6:b4:8c:13:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:21:7F:B8:D2:03:21:5B:E8:08:B5:B4:B2:8D:6A:2E:5A:FE:45:BA
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:61:fc:dd:a1:41:e9:7b:38:2b:61:0a:03:b4:e3:4c:f6:d3:
b8:20:70:3e:37:b3:60:e4:44:5f:cc:7d:f7:d4:f0:13:5e:5e:
0f:c4:0b:b4:37:f1:38:f3:0d:d0:59:3e:d9:4f:8d:e1:4b:f8:
ae:2f:31:20:1b:3a:28:ca:25:6a:33:cb:5e:92:f9:b3:b3:77:
28:a2:d1:ed:60:8e:81:e1:d5:48:0b:94:d8:cc:23:a4:83:40:
eb:73:49:09:a8:22:b8:ce:54:fd:34:68:13:bc:c9:d5:24:d7:
25:8d:f1:cf:f4:e2:52:a0:7a:1d:85:48:bd:0d:77:ea:d7:22:
92:d0:18:1b:d7:57:6d:9d:9a:4e:13:28:ac:03:6a:d7:08:74:
07:7e:e9:4d:81:ea:6e:72:25:5b:20:dc:ce:1e:2c:3b:ef:6a:
96:e0:84:e6:86:86:fd:74:d8:82:15:dc:bf:38:fd:44:4a:46:
41:80:65:74:ef:79:77:f0:a7:b4:32:d3:56:be:e0:ce:f7:47:
ef:a5:60:6d:6f:bc:90:87:95:99:99:f3:08:5b:24:55:14:13:
aa:7b:9b:0e:16:6e:31:87:af:f7:89:27:91:74:29:3d:a8:e1:
b9:7c:de:58:0b:93:fb:68:a8:4f:04:b8:70:b0:71:6d:8a:77:
5c:cc:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:39 2025 by rpki-client