Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File: wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier: rvKGl5YLBYkjcC92n1EbBecya8x8TVA/2r09dBKwH04=
Subject key identifier: 71:35:48:C8:DD:5F:70:6A:DA:C0:72:F9:61:F3:83:1E:F3:44:7F:49
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial: 01967DC63F17B57FDF8C4F188C2418AF9644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number: 0CC3
Signing time: Mon 28 Apr 2025 19:01:06 +0000
Manifest this update: Mon 28 Apr 2025 19:01:06 +0000
Manifest next update: Tue 29 Apr 2025 19:01:06 +0000
Files and hashes: 1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=)
2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: LkYnAZRMVHZ5GhKnEr9kYqTWNt4gjygiVLUVn4gpa9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:3f:17:b5:7f:df:8c:4f:18:8c:24:18:af:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Validity
Not Before: Apr 28 19:01:06 2025 GMT
Not After : Apr 29 19:01:06 2025 GMT
Subject: CN=713548c8dd5f706adac072f961f3831ef3447f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:fe:5d:31:3b:d1:6b:6c:b8:e3:f8:31:2c:
5d:cb:97:f5:99:0e:9d:65:c1:8b:86:b9:f2:f5:ab:
95:c7:78:8f:ad:8d:eb:a9:d3:78:95:43:c7:f9:cb:
95:a9:06:46:f4:1c:61:a1:24:fe:92:a4:37:1c:07:
e7:67:f4:f4:6a:0f:62:0c:b8:08:82:43:a5:7e:bc:
05:56:96:95:fe:e3:63:46:b1:ca:af:d4:85:17:1d:
76:52:63:2d:2c:91:f5:11:bb:4a:0b:60:15:0c:62:
88:01:e2:18:78:a3:25:de:d3:d1:4c:49:37:f8:b1:
4c:ef:ec:40:e2:e7:8d:56:fc:7d:35:6d:74:de:73:
ea:18:ef:56:e6:cd:14:51:c5:26:e3:ec:20:c4:40:
4d:f1:78:2b:93:ca:71:39:eb:a1:f2:b6:17:43:9e:
67:f9:9d:70:a9:54:00:9f:1c:02:5e:09:ad:5e:0d:
6f:2a:99:08:1d:de:eb:84:c2:f4:c3:23:fc:25:f7:
81:28:51:7f:f7:06:0f:9a:27:4d:44:73:07:7f:eb:
88:1f:d3:c1:42:39:13:99:ad:30:6d:45:7f:10:63:
be:50:6b:85:e1:bc:c6:f4:fd:80:a3:49:86:5f:bb:
f4:1a:66:97:17:cc:d2:11:7a:23:63:88:c6:0b:ee:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:48:C8:DD:5F:70:6A:DA:C0:72:F9:61:F3:83:1E:F3:44:7F:49
X509v3 Authority Key Identifier:
keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ff:2b:8c:9f:92:c0:69:49:4d:89:3d:a1:e5:90:73:6f:c4:
0a:01:9a:f9:1c:0e:e6:21:6b:5d:d2:f5:61:0b:40:5d:4d:22:
5d:fa:81:99:5a:ea:6b:32:66:b8:86:84:99:7c:be:1a:78:2e:
49:ba:14:3a:81:e8:89:f7:56:df:68:0d:31:ed:a7:8e:f8:44:
a6:e3:97:8f:92:1f:d4:92:4d:2f:c9:5c:ed:7f:5e:01:14:26:
c5:61:f6:df:32:0b:1b:93:76:90:93:e8:28:8f:c8:b5:1e:dc:
b5:98:c2:29:de:01:18:4d:ca:94:4a:87:76:9f:0c:24:b2:ef:
e5:6c:5b:1d:67:c1:90:73:2c:1d:3b:e2:6f:7a:be:77:24:e0:
52:42:8b:52:c3:39:34:86:8b:d2:e8:04:c2:37:d3:e3:2a:b1:
e7:6e:82:f2:6a:10:bc:dd:80:32:a3:c7:8f:0e:31:c9:7c:61:
47:19:ba:f8:0b:2b:87:26:04:8c:d2:ca:20:ce:e6:91:ed:38:
33:67:99:54:f0:2f:b9:3c:f6:4a:c1:32:59:9d:fd:68:9b:2e:
0c:23:0d:04:0c:a9:9a:af:ab:05:ca:33:3f:e3:83:cc:bd:5d:
38:9e:e7:34:2e:27:6e:04:39:51:3e:b1:51:5e:27:51:3c:ad:
c2:fc:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:20:00 2025 by rpki-client