Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
File: Wki138AUKmjDC9qsVQYD6eRdEIo.mft (raw, json)
Hash identifier: WquHIrGedqrNZ8v6jSy3buza6OKyirBPtD7uOfSvRYI=
Subject key identifier: 58:98:0F:FC:C4:1E:C3:0B:14:18:56:CD:27:99:4C:63:98:F8:B2:F6
Authority key identifier: 5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
Certificate issuer: /CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Certificate serial: 019678D65F5D345DC772C38094FAA3918A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
Manifest number: 0C81
Signing time: Sun 27 Apr 2025 20:00:37 +0000
Manifest this update: Sun 27 Apr 2025 20:00:37 +0000
Manifest next update: Mon 28 Apr 2025 20:00:37 +0000
Files and hashes: 1: Wki138AUKmjDC9qsVQYD6eRdEIo.crl (hash: zLWA6k0e/PFZVPZX0hci8c0srnOuYhAz8I3eSK9pn+s=)
2: qMEDpZRLrC0RKVzoFu5d0Yn0iVs.roa (hash: IfGwXhsO4LUshRhgsyNsDeEfXeX5DUDuXfY5jcbXNqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:5f:5d:34:5d:c7:72:c3:80:94:fa:a3:91:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a48b5dfc0142a68c30bdaac550603e9e45d108a
Validity
Not Before: Apr 27 20:00:37 2025 GMT
Not After : Apr 28 20:00:37 2025 GMT
Subject: CN=58980ffcc41ec30b141856cd27994c6398f8b2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:af:53:83:d6:7b:4c:d7:6a:99:9c:5d:2c:
8a:96:f0:14:3a:c1:8c:1c:71:ed:05:c2:ad:41:74:
57:a0:69:28:ec:b1:53:f4:f2:1d:42:09:88:22:4c:
45:a9:df:20:33:0a:18:82:e9:43:79:f8:22:e3:6c:
38:25:ee:5d:5b:c8:7b:af:ad:63:fa:a6:ec:6a:45:
dc:4c:97:fd:fd:b1:d3:3b:95:b5:db:f2:01:ba:6a:
a5:3a:50:3b:4a:ab:83:10:4f:ec:5b:02:24:1b:07:
d1:5a:3d:4f:dd:8f:48:1b:e0:a7:6f:13:e0:d7:0a:
4c:99:9d:08:cf:5d:6b:01:95:38:7e:79:94:36:63:
30:7c:07:12:03:00:b3:05:68:08:75:34:41:0e:1b:
26:1d:4f:1a:95:d0:cc:2f:b4:cc:bc:0d:65:f1:6e:
06:93:db:a3:cc:f7:34:d0:7e:48:4d:78:11:7b:e5:
52:bb:47:0d:1c:28:9f:4c:55:30:3f:0d:a1:9d:ab:
50:95:df:ee:99:7e:5f:1f:ae:5e:5c:cf:1a:6c:c8:
ab:c4:97:40:2c:be:87:e1:79:6e:9e:02:f1:8d:e8:
69:98:38:72:e1:3b:f8:33:fa:57:31:22:a1:82:ef:
3a:15:0a:81:ee:e8:c8:41:3f:ca:a7:7b:39:e4:61:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:0F:FC:C4:1E:C3:0B:14:18:56:CD:27:99:4C:63:98:F8:B2:F6
X509v3 Authority Key Identifier:
keyid:5A:48:B5:DF:C0:14:2A:68:C3:0B:DA:AC:55:06:03:E9:E4:5D:10:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wki138AUKmjDC9qsVQYD6eRdEIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/acd0e2-3712-4ccc-872d-e0d9883e0fcc/1/Wki138AUKmjDC9qsVQYD6eRdEIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4b:08:23:b9:85:44:1c:f6:1f:b7:85:76:be:1c:86:a4:ab:
69:71:bc:d1:16:3f:90:a0:d2:94:b7:ec:8f:f7:1b:10:18:84:
31:72:ed:e5:5f:87:c7:7e:6d:a2:b9:4f:2d:39:81:72:e3:06:
47:d4:fd:f9:1b:ab:0e:9d:12:f7:70:36:92:d1:d3:1a:b7:13:
26:22:ea:4d:9b:3a:15:17:f2:07:80:56:bb:a1:bf:4a:4d:65:
44:c0:c8:0c:6d:1f:72:84:38:12:ba:ba:3c:04:6e:7b:36:5a:
0b:6e:6c:9f:c3:26:fc:f2:45:cc:7d:50:cc:96:1d:1e:72:de:
58:4c:f2:da:2b:cf:7c:34:95:f7:7c:9d:cf:22:26:42:26:ae:
4f:32:39:c9:79:ea:62:4d:23:4a:87:ff:57:21:98:a4:15:0e:
24:6b:6d:50:d8:66:33:6f:34:5c:27:b9:32:bb:db:33:03:1d:
e7:6c:d3:8a:04:67:04:ca:41:d1:63:f6:a4:53:e9:67:22:7a:
06:ee:6d:a0:c6:57:09:28:10:12:22:1c:14:9a:ad:5d:e1:0b:
38:4a:a4:e5:f4:75:d9:4b:8f:89:95:05:10:87:50:b7:e9:c4:
4b:33:75:b1:c0:5b:66:f9:78:26:0e:0a:43:93:1a:7c:7f:9c:
9b:cb:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:58:47 2025 by rpki-client