Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: RVF0bs5JmToK14AwIw2PoUrwdrUALb3ydmglrvznEDE=
Subject key identifier: 49:9C:B8:C1:E4:41:15:FD:2C:2B:E3:FB:17:6E:BC:FB:08:B7:ED:98
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 0196458D6F8B94D29168296143CA0C1C194F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0B7D
Signing time: Thu 17 Apr 2025 21:00:19 +0000
Manifest this update: Thu 17 Apr 2025 21:00:19 +0000
Manifest next update: Fri 18 Apr 2025 21:00:19 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: jn5frP/7gQ1QE/ZhxmBVtjBffyd5dzOixZMrdERIFUU=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:6f:8b:94:d2:91:68:29:61:43:ca:0c:1c:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Apr 17 21:00:19 2025 GMT
Not After : Apr 18 21:00:19 2025 GMT
Subject: CN=499cb8c1e44115fd2c2be3fb176ebcfb08b7ed98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:d7:9b:3e:80:46:e0:85:c4:06:42:7f:95:
65:fd:9a:15:43:ac:41:50:e8:54:9c:e4:56:82:aa:
ae:a4:64:4a:32:b6:32:17:01:c6:51:ab:5f:7d:f5:
b0:8a:e1:63:9b:99:07:a0:bd:00:0f:5c:01:aa:52:
d3:eb:ae:6a:db:88:b6:b8:68:cb:d1:35:fc:7f:85:
b4:5f:4e:95:93:e1:fe:e9:18:d8:8b:fe:4d:73:9e:
e6:c2:ad:cc:e8:3a:21:2c:b9:ae:64:f1:e2:2a:c8:
e1:d7:1d:93:24:37:52:e0:19:35:9d:c1:76:e8:80:
37:60:40:e4:0b:78:ed:f6:01:c9:04:91:ac:68:5e:
de:35:6a:1f:23:9c:29:22:a4:2a:a6:5c:d0:c9:be:
5b:2d:6a:73:31:21:2a:a4:af:22:c5:97:cb:4f:63:
71:a8:76:2f:31:bb:0e:47:7f:5c:0f:3f:8c:a5:b2:
a5:e1:8c:85:d9:7e:36:ff:03:1f:77:75:aa:52:4e:
c9:4f:3b:59:21:47:1c:b3:a3:77:e7:ad:23:cd:05:
c2:95:57:59:89:11:70:01:5d:1b:49:d2:a2:29:60:
2a:ac:71:28:82:85:2b:12:48:69:e3:52:87:e6:6e:
53:9b:37:37:a1:6c:b9:3a:60:54:ab:d9:9a:a1:f1:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9C:B8:C1:E4:41:15:FD:2C:2B:E3:FB:17:6E:BC:FB:08:B7:ED:98
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8d:24:97:3a:e8:f1:12:28:91:91:fc:0c:00:fd:d8:9d:24:
ed:32:d4:2e:d6:a0:ce:45:3e:37:76:7d:7b:a0:b9:18:55:8d:
1e:10:12:11:08:dc:1d:1a:4c:7f:2a:21:ba:54:0e:ff:5a:68:
18:ce:18:df:78:80:29:12:45:ee:b7:68:f8:9e:7a:ff:eb:6e:
43:83:ca:00:65:68:85:4c:1d:bf:a0:cb:c7:68:46:47:18:8e:
bd:6d:85:15:95:a2:8c:41:b5:8d:dc:23:13:0b:70:92:64:6c:
8f:67:68:7a:09:4c:27:6b:c8:f1:3f:74:1b:11:c3:2f:46:ae:
2b:b5:7d:cd:e1:7c:06:79:1b:42:40:29:b4:45:d4:88:b3:34:
ef:bb:61:b3:6f:2e:e4:a0:d7:5d:8a:c3:72:2e:0e:50:99:09:
da:16:99:a3:90:6a:45:c2:54:43:75:5a:b6:4f:70:72:fe:89:
eb:01:bb:13:c7:a2:93:6f:46:3d:3a:98:63:5b:7a:c4:f4:73:
7f:52:53:b6:06:ed:11:e0:3f:c4:2e:44:e4:ca:c7:00:a7:85:
db:b8:a0:70:d4:bb:8f:ce:bc:bd:52:37:c6:4e:2b:f8:cd:71:
56:93:8b:a9:a9:d9:48:74:d1:d3:a6:26:9e:37:d6:7d:c1:9a:
d7:e5:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:04 2025 by rpki-client