Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: rWdA9+RpJ2+3qQtutY+BFy8mdeu6DcDOHloL1dCFL/M=
Subject key identifier: E4:3B:61:70:10:F8:E0:BA:68:0F:87:AC:F2:0B:00:58:5C:2B:15:5C
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 01962AF2FE8BBA51B125E5D5A818594EF0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 14E8
Signing time: Sat 12 Apr 2025 17:01:29 +0000
Manifest this update: Sat 12 Apr 2025 17:01:29 +0000
Manifest next update: Sun 13 Apr 2025 17:01:29 +0000
Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: s+baKpcczgpMBE4cOb/MgvXicIuCTj8EMrE3g/ca1j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:fe:8b:ba:51:b1:25:e5:d5:a8:18:59:4e:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Apr 12 17:01:29 2025 GMT
Not After : Apr 13 17:01:29 2025 GMT
Subject: CN=e43b617010f8e0ba680f87acf20b00585c2b155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:90:31:09:26:0a:25:d6:d7:92:96:d0:df:
96:71:dc:f5:f7:27:e3:0b:c6:74:48:d8:a3:d9:b1:
e2:e4:6a:01:68:22:84:3b:54:47:72:b5:20:ef:46:
4c:f6:cb:6d:8b:9e:06:50:df:a6:fa:e7:a9:01:e8:
68:e5:0d:cd:12:8f:ca:43:b3:14:b4:25:47:95:aa:
ea:c3:60:44:b6:04:f1:83:8e:25:62:6c:eb:0d:9a:
4e:4a:af:7b:0c:26:9c:21:2c:67:90:aa:4d:a6:ee:
ff:1d:38:b6:77:a2:b8:f8:de:31:3a:22:4d:13:ac:
fd:a1:46:c7:f7:8b:07:42:ab:1a:04:0e:fd:8e:66:
68:aa:c7:2d:03:79:2c:40:5d:da:ab:c9:6e:b9:7e:
51:b0:6a:48:50:0a:a3:b7:d6:99:45:18:bc:88:39:
10:9f:ce:75:7a:54:3b:3a:c3:dc:66:7f:dd:f4:41:
56:8d:52:73:bb:a4:aa:b2:c1:af:47:f1:6b:c0:44:
d2:6e:ee:28:a1:25:fb:b4:b8:4c:69:ce:c8:19:65:
bf:84:fd:3e:cc:a8:72:0a:15:b4:3b:49:38:bb:b8:
6e:4a:8a:d3:14:04:89:fe:38:84:42:df:e3:b7:27:
e3:95:26:4d:86:c8:20:c8:3d:2c:ea:a9:d5:e8:13:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:61:70:10:F8:E0:BA:68:0F:87:AC:F2:0B:00:58:5C:2B:15:5C
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6a:92:c4:c6:75:9b:cc:fd:ca:aa:c4:00:c2:9a:80:9c:b1:
1c:35:73:15:88:01:2a:5c:c0:26:ab:12:59:db:49:a5:6f:84:
5a:70:3f:5a:f2:b3:ed:22:5a:5e:06:8d:24:d6:09:ad:89:8b:
9a:1e:3e:fe:d8:fa:13:38:45:bf:43:7e:a2:3f:bd:4f:a2:4c:
22:8e:ca:11:b9:06:7d:96:56:4e:e4:26:0a:9a:54:e4:c5:dd:
45:b7:9f:80:e9:ed:48:49:63:3d:d4:e4:d5:ea:d6:8e:a4:fe:
97:a6:ad:5c:bd:0d:42:36:36:20:30:f6:82:fd:e8:c3:80:3a:
d1:0f:02:e5:37:82:25:f8:f7:59:33:df:86:43:8c:b4:42:8f:
60:9b:54:94:5a:1c:25:1b:84:b0:fb:4b:72:16:7c:70:83:60:
33:5c:27:28:5e:cf:fb:f6:17:97:df:be:40:b5:fa:e3:ad:2f:
3c:a4:34:c2:ca:ff:88:be:0a:42:b9:99:5f:c7:b5:c3:08:37:
21:e9:ec:7b:86:8a:94:d7:8a:26:1c:80:2f:20:97:e3:11:d7:
12:d1:43:4a:c1:af:9c:2e:c2:fc:c5:5d:02:b1:12:22:11:b6:
00:e8:1f:5f:f2:9c:52:33:07:fa:f0:87:75:c8:da:31:aa:2c:
41:84:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:32:58 2025 by rpki-client