Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: D9RCfFwuzhffXE3WIObvub4i8hv0AatoBD5gtC73TC0=
Subject key identifier: 19:FB:87:DE:5C:8C:1F:B3:05:A6:B6:24:60:6A:B6:41:75:15:CC:24
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 01968623D3F06D1EA9F5C2240406580D3E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0A8C
Signing time: Wed 30 Apr 2025 10:00:16 +0000
Manifest this update: Wed 30 Apr 2025 10:00:16 +0000
Manifest next update: Thu 01 May 2025 10:00:16 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: Pw6ZG4RoRk+vdZ7CpDCHnVsvqNaXjprWty6miMQvqRU=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:d3:f0:6d:1e:a9:f5:c2:24:04:06:58:0d:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Apr 30 10:00:16 2025 GMT
Not After : May 1 10:00:16 2025 GMT
Subject: CN=19fb87de5c8c1fb305a6b624606ab6417515cc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:c8:54:c2:b9:01:bf:37:80:f8:40:27:58:
3f:9b:28:d7:04:87:11:19:26:ee:28:b2:4f:f6:44:
fb:f0:b7:fe:1b:f5:82:8b:7b:d3:a0:fe:7d:5e:83:
5e:1b:6f:83:bc:df:26:b1:5d:5d:bb:08:c4:ce:ab:
9d:1c:4b:33:32:04:98:8c:a1:28:76:6e:79:7a:b9:
e4:df:c5:43:53:c2:a9:b6:4b:0c:d2:39:06:3d:7f:
d4:31:32:56:72:7b:82:86:ad:ad:60:9f:5c:f6:67:
bd:ee:9e:e4:94:8a:01:97:f1:53:65:7b:4d:9c:67:
8d:ae:4f:97:89:54:fe:c0:e2:7e:10:36:d3:b0:2e:
a4:ba:65:31:03:ca:37:06:19:4f:3c:8b:08:10:e6:
1b:59:60:b8:a4:ef:ea:f5:17:eb:f2:34:4f:75:ba:
37:cb:17:f3:0b:0f:ee:8c:14:7e:ee:69:87:c2:1b:
c0:43:df:42:39:20:45:d2:95:9c:6e:a8:a2:4a:0f:
37:f5:a6:9e:d1:98:8e:ee:2c:5e:96:e1:70:06:21:
74:b0:4e:44:c1:c9:c4:ee:43:da:d7:2c:0e:84:ef:
64:03:be:d9:aa:3c:00:23:83:ae:e4:b8:c1:78:f6:
d7:69:60:fe:b3:ff:3e:dd:33:89:ef:36:38:3d:55:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:87:DE:5C:8C:1F:B3:05:A6:B6:24:60:6A:B6:41:75:15:CC:24
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:43:03:0d:a6:5b:99:c1:50:6b:b4:db:48:47:92:f7:97:c4:
dd:45:a1:bf:1f:ba:1c:c3:04:bf:1f:53:73:83:3d:ed:4d:3a:
05:55:dc:c6:9e:d2:43:4d:b1:ec:aa:4f:30:f8:55:8e:48:da:
56:7a:79:d9:fc:b1:8d:db:4b:18:ca:03:06:fb:44:b9:5d:f7:
f2:ea:e2:74:ba:f5:7e:90:f9:53:d9:76:dd:f4:5d:65:0b:cc:
f4:65:83:60:2c:3c:59:5a:43:d7:6b:db:85:24:f2:6b:78:e7:
6d:c6:09:92:3f:7b:36:2c:84:3d:ad:05:cc:6e:a0:4f:61:67:
da:ca:d5:45:db:cf:79:51:c5:e4:e1:84:78:d7:60:f3:12:8c:
65:2e:fa:80:93:f8:4d:9d:6c:6e:51:1a:41:aa:a1:15:a4:e8:
c7:b9:78:56:3e:06:41:9e:98:df:cb:89:a4:8a:e9:a6:91:83:
27:1a:25:e9:d7:3e:19:16:b3:12:a7:cc:8e:5a:d0:9c:a2:5b:
01:c7:a4:30:84:4c:fd:b9:ed:74:40:e6:ee:4c:d0:5f:6f:68:
c4:2f:66:e9:e0:24:4c:90:42:3c:0d:6a:2e:d2:17:59:7c:4c:
d0:68:74:89:b1:a3:04:59:5b:ea:f1:4b:fb:79:0e:9d:c3:d6:
8c:b2:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:21:52 2025 by rpki-client