Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json)
Hash identifier: KJkERvT9CtCAzAsm2jC4IZKNhsJxtXfnDnG0jpZ5okM=
Subject key identifier: 2B:9B:E8:AE:DB:CD:8A:79:0C:C3:E3:53:5C:18:7A:A7:CB:06:D7:C1
Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Certificate serial: 01964F35B2808133C8ED163CB5D6A51788C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 18:00:41 +0000
Manifest this update: Sat 19 Apr 2025 18:00:41 +0000
Manifest next update: Sun 20 Apr 2025 18:00:41 +0000
Files and hashes: 1: KyLINVTTqdvXuj7Fj90bgruawzY.roa (hash: cok5H5wGuOmXEJz7bKUxFi+mFBkwx9emz6VKC+7X5HQ=)
2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: lf6yDMeBrtJdQ+pGhAChKJ09+zXP47hfpklVSHflRN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:b2:80:81:33:c8:ed:16:3c:b5:d6:a5:17:88:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882
Validity
Not Before: Apr 19 18:00:41 2025 GMT
Not After : Apr 20 18:00:41 2025 GMT
Subject: CN=2b9be8aedbcd8a790cc3e3535c187aa7cb06d7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:f4:0f:db:e3:66:ea:e1:7d:4e:bc:47:07:
c4:b4:e2:92:ab:02:93:79:24:26:a1:1e:1d:0b:e5:
6c:9b:41:e2:58:aa:1e:eb:cf:a9:f4:f0:a0:ce:23:
3b:1f:d8:6d:d8:2d:99:f3:45:3f:a5:ae:fc:d9:ea:
fe:e4:90:53:8d:74:ed:9d:d7:39:1d:de:e6:9d:7a:
59:97:6b:d9:0c:23:e8:08:2c:c4:4e:97:ca:cb:ed:
c9:a3:8b:8c:81:ea:bf:a4:7a:2f:4b:4c:27:2e:50:
c9:dd:85:e0:2e:5a:de:8e:2c:1c:11:06:02:ef:b1:
3d:4c:2c:9a:4e:92:41:1c:39:fe:18:b1:c2:7d:a9:
39:13:99:dc:a5:f1:06:5a:9b:1e:a2:06:11:13:00:
7c:66:fb:5d:3c:4d:51:7d:7f:a9:82:b9:63:30:10:
b9:1b:93:5e:d4:8f:85:77:9f:8e:fb:9b:10:d5:a0:
2f:ca:1a:d0:4e:12:bc:37:8d:1e:fe:9b:5f:4c:47:
07:c4:91:c9:31:ec:84:c2:92:74:0f:31:6b:bc:6c:
6e:a9:28:a6:1e:af:47:0d:79:c6:09:b3:0f:47:f7:
0f:93:83:ca:31:d1:73:8f:8d:cd:82:c6:b4:76:4f:
98:30:7d:f4:22:e8:b9:d0:9b:65:03:c9:9b:98:1d:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:E8:AE:DB:CD:8A:79:0C:C3:E3:53:5C:18:7A:A7:CB:06:D7:C1
X509v3 Authority Key Identifier:
keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:94:f0:51:32:54:25:f3:b6:1e:03:53:6a:53:d6:c0:d9:2a:
6e:a5:47:61:d3:da:18:13:13:95:5a:9e:c0:1c:8f:3b:bb:10:
26:b6:b2:74:5a:71:28:07:33:4b:f5:ee:67:cc:90:4b:5c:70:
36:2e:34:4b:22:b8:63:a4:26:9e:f3:77:8c:84:ea:a5:02:06:
80:f9:8a:e5:49:24:d6:09:77:14:94:d9:71:5a:a4:d1:4c:97:
9b:60:fb:94:ea:a2:70:a5:b9:8c:b4:40:c9:d0:2d:22:ce:9f:
c7:3e:de:55:c5:39:9a:bd:d7:75:ae:8b:38:c4:df:e5:eb:10:
6c:92:bb:63:8b:8b:cc:7a:d9:06:58:33:52:80:5c:87:b2:24:
06:f9:12:c1:70:87:4a:bf:27:8d:61:b5:eb:7f:68:8c:df:09:
1a:10:71:3b:6b:89:5e:97:4f:31:47:91:01:5d:31:1b:2d:5e:
97:50:40:96:7f:cc:a6:68:fd:b5:9b:11:e9:a2:38:17:47:5b:
f0:9f:11:e7:ba:37:58:94:40:40:bc:f3:70:f3:2c:44:1f:b3:
82:cf:8c:b5:af:f7:5f:6c:c3:b1:4a:44:a6:b9:13:aa:92:77:
89:de:9a:f3:db:79:9d:87:66:b0:40:7a:c7:1b:d8:39:42:54:
15:fe:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:58:04 2025 by rpki-client