Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: q6TMHnen/ByWPdfrax9kOoF/fK8BHpuKZxHwUnPrGJQ=
Subject key identifier: 20:69:B0:B9:24:B9:16:85:08:82:49:04:EB:08:BF:49:9F:4B:A0:36
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 01963F8BC5F7D9D6913FA22FD3AE74B3C15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 14FE
Signing time: Wed 16 Apr 2025 17:00:46 +0000
Manifest this update: Wed 16 Apr 2025 17:00:46 +0000
Manifest next update: Thu 17 Apr 2025 17:00:46 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: DQQVfrDiRTCIUPr9zd0b4FQXD9s.roa (hash: 8keLR4RgePK/t+qeMIRiOhqAQZ/cmQFBEI8DEv5+z8s=)
3: WAFcyNofG780PiarII34uyb9U64.crl (hash: DQtDuj5n24MiS0F3qgrNHY/BvFXV81a1oTxLCOINPDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:c5:f7:d9:d6:91:3f:a2:2f:d3:ae:74:b3:c1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Apr 16 17:00:46 2025 GMT
Not After : Apr 17 17:00:46 2025 GMT
Subject: CN=2069b0b924b9168508824904eb08bf499f4ba036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:7f:4e:73:01:8c:b0:ca:6d:ee:2d:61:e4:
7d:ea:93:70:3d:a3:23:2e:79:85:5f:e2:92:b1:8a:
54:61:79:97:2c:86:e2:5f:ae:a4:5a:61:ed:99:01:
6c:65:5d:37:b4:80:6c:eb:f3:55:67:5a:73:49:e7:
0b:43:36:47:76:6f:bb:47:d0:39:63:d4:a6:fd:62:
7a:5a:ca:fa:6a:ca:08:43:8d:8a:3c:d4:72:a8:29:
29:fe:4e:81:01:1e:0a:07:7c:2a:39:0c:2e:28:ad:
4a:72:7f:e3:b3:5f:5a:80:2b:94:20:5a:7d:6b:dc:
b3:18:13:b0:27:25:2b:f9:a2:56:4f:2a:ad:3c:cb:
71:a1:55:cd:34:39:61:49:18:b9:cb:89:d4:ec:5d:
c3:12:82:98:03:f1:51:7e:55:4e:d9:9e:79:ef:c7:
11:50:46:6b:db:eb:f4:07:4c:23:d7:23:cd:2e:d1:
9b:c5:8a:83:27:8b:ce:ae:83:7d:84:11:65:a0:29:
aa:34:e6:0b:5c:1c:61:f5:df:86:c5:f4:d7:78:df:
7b:f7:63:98:2f:de:f5:b7:10:e7:a0:ab:58:f1:6a:
62:ad:7d:52:c4:79:68:42:b6:11:c2:51:30:d6:79:
b5:62:36:62:c4:02:14:fe:60:56:8b:8e:f1:6d:7f:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:B0:B9:24:B9:16:85:08:82:49:04:EB:08:BF:49:9F:4B:A0:36
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:64:cf:e6:39:93:7e:81:dd:b3:0e:7f:8f:9f:a5:f9:e1:bb:
2c:1f:cf:d0:f6:0d:04:c2:43:42:71:01:f6:71:5d:cb:75:fc:
24:ce:d6:72:f1:44:d4:ce:d9:04:dc:f6:af:3e:8e:e9:5c:b5:
b0:ce:65:b4:4b:75:86:c2:44:09:3e:d6:62:87:1c:a9:7e:35:
67:9d:34:f1:10:e3:5a:9e:0e:6f:35:27:6e:08:1f:ea:0e:79:
2c:0e:0a:99:3d:29:8e:07:c0:4e:48:24:e4:7d:ce:9c:6d:5c:
a7:43:9e:5c:e0:f6:4f:3d:5c:5c:4b:88:11:42:f0:f1:3a:89:
c3:2e:e1:cb:49:cb:50:d3:da:72:49:d2:12:21:ce:ac:c3:4a:
53:d3:80:54:cc:dd:cf:17:af:e0:8a:8d:45:51:80:6e:4a:49:
61:7c:1d:44:50:26:23:fc:34:16:f7:3d:a9:f0:5f:a8:ce:7d:
3d:e5:bc:10:0c:7b:2d:c6:79:94:00:73:f7:47:b5:fb:aa:8e:
67:b8:1e:84:c9:e8:ec:44:a1:99:d0:05:8b:45:5f:da:3b:81:
2d:1b:95:c2:ac:aa:c3:86:f8:98:b1:8a:8d:e8:40:b3:14:f5:
8c:64:2a:5f:f2:48:8b:45:ec:dd:29:ae:77:31:1f:ab:49:0f:
42:8b:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:01:28 2025 by rpki-client