Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: Zs+T2VPo5i6isxJc6h/8vg9LFA9RQZzJuaBv5PqXwuc=
Subject key identifier: BA:DF:9D:4A:15:D9:5A:36:7A:F9:5F:4C:92:73:4B:AF:7C:4F:89:BA
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 019688B7BC3F126F766E86F8A79668042AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 14C3
Signing time: Wed 30 Apr 2025 22:01:04 +0000
Manifest this update: Wed 30 Apr 2025 22:01:04 +0000
Manifest next update: Thu 01 May 2025 22:01:04 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: YrG31MC2nEmRomL4aZSLsN66EPN9O87tNQPumliJ+AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:bc:3f:12:6f:76:6e:86:f8:a7:96:68:04:2a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Apr 30 22:01:04 2025 GMT
Not After : May 1 22:01:04 2025 GMT
Subject: CN=badf9d4a15d95a367af95f4c92734baf7c4f89ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:6e:f0:90:fa:56:75:6f:f3:5f:f1:86:79:
af:45:47:ce:6c:f6:bd:5a:f5:25:2a:ed:a3:c6:4a:
92:f9:15:e5:1b:d1:e0:1c:5f:f8:da:1c:29:78:6d:
72:04:ad:cd:b2:3c:b7:cd:c2:2e:a5:11:83:d6:55:
36:d0:37:67:8b:f8:a7:ea:3c:84:09:62:9a:7b:79:
89:7e:f7:6b:23:d8:2c:57:c7:1e:8b:55:18:40:17:
38:7e:75:b6:49:dd:77:e2:73:82:e9:d5:d5:d1:ef:
66:ad:4a:9d:cb:da:50:cc:b9:04:2b:aa:33:aa:36:
2d:d3:3e:1f:5b:4c:18:df:fe:15:6e:df:36:2a:cd:
c9:a5:f9:d1:27:7f:9a:60:ea:38:c8:90:6f:08:d4:
7e:9b:d5:c9:40:69:f5:c9:fe:27:78:e6:7a:da:62:
eb:2b:6f:81:58:25:f5:0b:d0:97:7b:7b:df:ea:40:
35:78:4c:97:9c:91:c3:ae:29:6f:c0:df:b3:85:b3:
fe:37:97:39:5e:d7:8e:f3:4f:34:be:eb:14:9e:63:
e2:fb:7a:35:21:36:31:f1:21:fa:95:5b:d0:c1:e1:
4c:90:b9:e7:a7:90:7b:0a:37:6d:7c:3f:b6:53:58:
12:4d:d0:fa:18:a9:fd:98:61:bd:27:a2:7c:5e:3c:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:9D:4A:15:D9:5A:36:7A:F9:5F:4C:92:73:4B:AF:7C:4F:89:BA
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b9:e3:53:e4:d1:e1:7a:f4:c6:9b:42:60:17:8d:9a:9b:c9:
91:4b:cd:5e:a6:32:96:52:0b:26:3f:56:e3:42:fe:93:6b:ce:
79:b0:ec:38:67:ea:72:e3:d1:7b:27:53:6e:f6:47:23:c8:4d:
9f:ea:90:d4:af:dd:f6:d1:ae:4e:bb:7f:fc:30:86:9a:3c:fa:
70:09:0f:31:c2:7f:f7:4b:46:52:fd:5a:49:9b:dc:2b:6e:61:
cc:5c:ba:a1:97:3e:98:55:d0:a0:1d:c7:6c:20:65:d1:9c:a1:
ad:45:3e:54:66:9c:6e:f0:8f:47:25:2d:7e:ee:2b:70:10:f9:
83:0d:0e:c1:38:64:49:e5:b5:4c:d1:e6:72:6b:35:15:ad:e1:
10:69:fd:3e:8f:48:23:69:46:f6:5d:b1:e2:ad:cb:a7:1e:72:
c1:fb:c3:bd:85:cd:07:35:b0:09:9c:61:cb:fe:b0:e1:3f:f8:
73:09:a0:91:28:42:36:27:e0:84:a0:ba:9f:ef:09:0f:3a:5d:
da:e4:80:65:c9:29:9e:2b:74:27:b9:6f:7a:35:ec:27:80:55:
05:ae:e5:41:20:a4:68:87:2c:f5:ec:e0:79:7e:9f:51:f6:5c:
1b:b6:d3:ab:af:42:e5:72:8c:f9:3d:4b:10:51:03:c4:4d:05:
09:d3:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:07:27 2025 by rpki-client