Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: phjJ09jL8VCwFyM3OOXEDg6Zl1F9JTbKfhv1/nFg1k8=
Subject key identifier: 07:EB:A3:91:A9:5D:1B:73:01:3C:64:1D:05:48:5B:A0:4E:FB:6C:A7
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 019678318F023B6A402D938757175F5D9A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 0AAB
Signing time: Sun 27 Apr 2025 17:00:35 +0000
Manifest this update: Sun 27 Apr 2025 17:00:35 +0000
Manifest next update: Mon 28 Apr 2025 17:00:35 +0000
Files and hashes: 1: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: urw4gR1Vzte61fINRSv77uddIMY88VNdnvMVgnpw4JI=)
2: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
3: xlkkoDtcxpoL9470SYUwdesBd0U.roa (hash: E5i1JoD4+1v4NgDajZkbyhzpzTtWx/xCOYZCaaoJ38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:8f:02:3b:6a:40:2d:93:87:57:17:5f:5d:9a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Apr 27 17:00:35 2025 GMT
Not After : Apr 28 17:00:35 2025 GMT
Subject: CN=07eba391a95d1b73013c641d05485ba04efb6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:8e:7c:9a:75:5c:14:94:98:7b:c7:06:c1:
2b:60:75:ef:3e:75:26:5e:54:8e:5d:6f:cf:7c:41:
ad:8f:9c:98:36:eb:a3:85:a0:de:6a:8a:0a:c0:2e:
e5:14:96:59:c9:b1:3f:06:cd:d7:92:53:f0:d5:07:
a1:25:fd:18:72:da:41:a3:aa:e1:77:2f:2b:c1:81:
2a:b2:21:52:d2:17:a9:36:5c:34:85:1d:57:77:eb:
04:ad:62:0c:40:bf:af:b8:b1:51:6c:6e:27:a1:d5:
3a:1c:38:74:20:2f:7b:30:9a:9d:11:d6:7f:47:43:
09:06:11:d3:68:60:8c:a3:d9:29:c4:84:ee:95:c5:
da:9a:a4:b2:86:95:07:cf:b1:0f:0f:c2:5a:14:81:
3e:15:e2:e3:a9:20:e3:c9:f2:10:ed:1d:d3:b9:03:
01:6b:0e:d1:68:52:61:39:86:14:95:29:30:d1:7d:
c2:83:38:4a:9b:89:8a:70:9b:c1:14:2f:99:e7:5a:
11:79:7a:44:a7:20:a2:02:73:52:8f:e9:93:23:66:
8a:a1:52:87:0a:d5:d3:a2:c0:23:af:8f:b7:3a:75:
a3:22:7f:f6:da:39:4a:3b:1c:c1:64:48:4b:2a:5e:
d2:5f:ac:26:f9:0f:db:81:3e:59:41:da:1d:25:51:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EB:A3:91:A9:5D:1B:73:01:3C:64:1D:05:48:5B:A0:4E:FB:6C:A7
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:94:80:0b:73:61:da:95:fe:a1:6f:2a:91:21:0d:6b:79:
ee:66:3e:c0:b5:15:a2:0d:54:88:33:ae:a7:a7:45:09:2d:f4:
39:f3:e5:f4:f4:93:29:0e:a3:c4:46:87:74:49:f4:a6:b8:40:
15:e0:ea:a2:17:8d:a5:d7:d7:3f:da:8f:93:da:b0:51:61:bb:
b6:89:66:da:12:20:16:2f:be:00:e8:e4:94:2a:e6:91:4f:e1:
d4:50:37:f5:07:3e:29:a3:04:02:52:73:ab:b2:2b:25:f2:22:
9c:e4:b5:20:b0:a4:ce:0a:40:e1:ff:6b:45:47:32:bd:f5:81:
d1:48:f3:10:f0:f6:dc:5a:a0:8d:2f:d3:db:19:52:96:84:6e:
fc:34:b3:ea:29:87:20:4e:fd:71:90:82:ca:4c:81:00:89:51:
6b:b4:25:3d:aa:79:54:34:a9:50:12:63:10:7d:b1:eb:ab:c9:
a0:7e:9c:d1:49:bb:f3:dc:d4:aa:34:77:c0:f7:90:29:60:dd:
ab:04:40:7a:ff:6f:83:e5:b9:12:fe:16:1c:d4:55:99:58:fa:
04:e9:ba:0f:19:4f:68:9c:3a:d7:c1:80:2b:e5:bf:44:d3:3a:
75:ca:6a:1e:58:a9:2d:70:1e:cc:94:d2:a9:41:90:f1:9b:1d:
19:fa:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:29 2025 by rpki-client