Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: PQNcerOtBI7TVTdLpjzKR7k7cob/DsPBTw8uoa49R3M=
Subject key identifier: 16:42:02:3B:B1:B6:63:CC:36:A8:A5:23:87:EA:59:09:4F:6B:A8:8C
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 019603AE3ED12769E51234B9A97013EAD644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 2D
Signing time: Sat 05 Apr 2025 02:01:12 +0000
Manifest this update: Sat 05 Apr 2025 02:01:12 +0000
Manifest next update: Sun 06 Apr 2025 02:01:12 +0000
Files and hashes: 1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: 84MF32t+DnuvCytlimHfui1RCFnOmpSMPYWEdm4SmTA=)
2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:ae:3e:d1:27:69:e5:12:34:b9:a9:70:13:ea:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: Apr 5 02:01:12 2025 GMT
Not After : Apr 6 02:01:12 2025 GMT
Subject: CN=1642023bb1b663cc36a8a52387ea59094f6ba88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:0f:84:7d:ca:5b:8d:07:fc:54:5d:15:09:
53:a3:57:fb:a4:4d:ba:64:59:0b:eb:2a:05:6a:93:
39:6b:e8:c4:4b:8a:b9:54:44:66:7e:50:fa:a3:be:
a0:a8:58:ea:d6:5f:a3:05:b3:d6:96:79:98:85:7d:
cb:57:d8:25:23:ce:57:e4:8e:65:0a:a9:6e:00:e0:
4d:d3:5c:9c:6a:30:08:8d:ea:16:b1:be:70:d6:dc:
e4:0f:f6:c3:bb:e9:6a:ff:7d:fa:fa:8b:0b:1b:bb:
9e:aa:c0:e3:88:89:e0:ca:66:bd:5c:70:20:7d:fa:
66:80:49:e2:b4:8c:99:06:05:93:a8:b2:0b:af:9b:
53:b9:e5:9d:e7:f0:be:70:d7:b8:ba:f9:52:e6:85:
33:51:ef:7f:f6:ee:b8:be:5b:b5:72:e0:90:fc:a5:
8f:3a:fb:8c:19:dc:b0:f6:96:a5:d4:38:8b:df:bd:
fc:a4:b6:99:7f:99:d7:5d:f0:70:58:4d:4a:8b:36:
3b:21:02:86:24:c6:b6:16:a6:55:59:67:a5:85:d6:
5a:b8:10:ae:63:48:3f:2d:6a:e6:93:49:1e:4b:c9:
30:87:e7:47:ae:b8:ae:68:86:fe:be:8d:05:db:27:
7e:36:de:5a:b3:d1:c0:c4:a0:e8:5c:56:3d:7d:c5:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:02:3B:B1:B6:63:CC:36:A8:A5:23:87:EA:59:09:4F:6B:A8:8C
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c6:54:08:86:65:d3:74:e1:6d:11:36:f9:a5:62:91:ef:ed:
71:bf:37:38:f5:1c:82:f0:b3:54:fe:b9:a9:da:29:42:77:98:
9a:9f:26:a2:5c:26:3f:63:8f:69:f8:67:1c:3b:dc:c7:10:a3:
41:b8:54:12:94:de:e3:ab:00:37:a9:87:62:a3:5e:10:9c:33:
3d:f3:fc:2d:8d:78:69:cf:1b:25:df:fb:96:26:69:f7:ae:5d:
03:48:36:38:85:3a:75:fd:8a:63:8c:bd:43:18:f4:35:8e:85:
3b:11:f5:38:6e:74:55:4b:e4:b6:21:b3:7e:3b:d0:29:a1:0f:
85:53:42:89:e9:cf:ba:a5:5d:61:44:6f:3e:e3:d5:a4:38:d9:
cc:92:36:7c:80:85:bc:96:0a:b9:f4:b2:55:86:45:c1:07:e0:
f8:1a:26:f1:73:d5:23:38:8c:80:4f:cf:64:e5:92:2c:9c:75:
c2:77:12:3e:bc:cf:43:ae:1c:72:93:c8:15:17:51:7b:3c:9c:
b7:bb:c5:78:b5:db:10:4e:24:43:b4:67:e9:14:64:d9:45:ef:
dd:1e:3e:d0:2c:58:6a:20:c4:2b:12:23:24:7e:c6:e6:fc:33:
ff:9d:16:09:fa:1b:d7:f6:ec:af:75:58:30:89:39:dd:20:33:
64:f4:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:14 2025 by rpki-client