Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
File: WRoP7x77ru2z0o1Dnz1cz639iHM.mft (raw, json)
Hash identifier: W3SAyc34Q+J2KaYu/IVMEi+8lFl9cHkT3tk5/jZGKp8=
Subject key identifier: A0:EB:F3:FB:20:6D:43:A4:4D:1B:F1:82:9A:0F:27:9A:F5:14:03:D6
Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
Certificate issuer: /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Certificate serial: 0196835A2657C5738E38B1827E5F436179AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 21:00:45 +0000
Manifest this update: Tue 29 Apr 2025 21:00:45 +0000
Manifest next update: Wed 30 Apr 2025 21:00:45 +0000
Files and hashes: 1: LUyjz5khkwF0up_SKtv4Oh6tO7Q.roa (hash: rBnLOroG+8zcnjSq90aHGH7YJtrPhERWyt49grALMsE=)
2: WRoP7x77ru2z0o1Dnz1cz639iHM.crl (hash: 3rMrRwlTe3ayZ6efvO1uSXNW3UCkkTf4Op6tMS3QMps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:26:57:c5:73:8e:38:b1:82:7e:5f:43:61:79:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Validity
Not Before: Apr 29 21:00:45 2025 GMT
Not After : Apr 30 21:00:45 2025 GMT
Subject: CN=a0ebf3fb206d43a44d1bf1829a0f279af51403d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:0e:46:70:64:02:e1:56:71:af:89:c4:9a:
e6:c7:65:d6:b4:d6:da:79:9f:5e:4a:4c:18:5a:1b:
2e:c6:56:9e:7b:5e:44:6d:1a:11:b2:0d:ef:8d:60:
d1:c0:af:a7:d5:2f:83:46:77:4d:67:1b:2c:fd:30:
50:75:d5:1e:21:6b:9a:6a:c7:8b:e6:21:87:e3:0a:
23:a0:9f:60:3b:31:fa:01:cc:68:f2:24:50:09:cc:
3b:e5:71:a4:50:c4:cf:75:9f:97:70:5d:fc:27:aa:
80:8b:38:72:c6:51:4f:b8:76:2a:88:35:c9:40:0b:
7f:c3:1f:0b:e0:6f:1c:f4:17:c0:f6:83:30:e9:a4:
bf:c2:35:86:fa:31:ad:3f:74:1b:da:40:ab:b7:1e:
7a:5f:a5:33:75:92:4a:ee:91:fb:7f:9e:1c:49:2f:
88:1b:98:e2:28:b7:2e:a8:b1:e1:1f:aa:fa:8c:c5:
fb:47:f1:41:78:b6:d1:21:13:ec:4e:39:af:cb:7f:
4c:b2:8a:b7:73:42:cb:c2:77:77:03:28:5e:67:5b:
f8:f9:b7:b8:1e:cf:a5:e0:a4:20:1d:fc:24:3c:87:
a4:dd:e5:bf:3f:ab:e1:69:4f:2e:9e:fe:cc:4d:2c:
64:37:2f:0c:11:8e:e8:74:25:39:7b:33:26:52:ad:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:F3:FB:20:6D:43:A4:4D:1B:F1:82:9A:0F:27:9A:F5:14:03:D6
X509v3 Authority Key Identifier:
keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d6:e3:cf:19:49:e6:7c:2e:42:3d:49:04:dc:68:59:58:22:
94:54:78:7e:a3:10:b8:31:40:92:0b:b1:c7:e8:17:f2:fe:0d:
7e:be:da:d6:cf:0a:06:b6:88:bf:b0:1f:67:d8:97:2d:ff:93:
c7:d1:2f:a5:df:db:68:0d:c7:96:6f:03:1c:cc:0e:68:30:55:
95:be:02:bc:0b:55:4c:93:83:94:43:53:99:15:38:d1:5d:09:
d0:31:ea:72:78:95:cf:68:5e:a7:78:84:37:a7:e6:f8:57:f2:
5f:49:5f:96:77:06:c7:91:f8:ae:fc:d9:34:a2:34:c5:79:50:
01:75:48:27:95:3e:94:0f:ae:7d:a7:6b:22:8a:de:42:33:03:
77:9e:3d:72:c5:d0:70:42:67:ab:22:08:78:38:a9:fe:b3:25:
7a:bf:d5:37:d7:e7:fc:69:ca:ed:f7:2b:d4:1b:69:cb:9e:fa:
e3:d3:9f:1f:76:d5:45:24:28:a7:4f:00:2f:24:ff:de:94:4b:
66:c6:7e:1a:de:bb:07:b5:59:98:a4:5c:22:32:f8:d8:e3:28:
da:7e:0f:30:ee:22:2d:c2:38:6f:6b:3d:f7:17:87:16:12:ce:
ce:8a:76:3d:6d:bb:72:86:6d:0a:29:1c:8f:b4:b4:33:1a:ba:
1e:b3:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:44 2025 by rpki-client