Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: pCUhYhI3maqPSVcCoBw1hTwvcjc/MT72NnH51NhBQ4s=
Subject key identifier: BD:50:36:1E:B0:8E:2B:C4:17:DF:73:8B:80:18:E8:11:A3:A6:7B:BC
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019687A498F0F6680D5033D7B27F3BED3378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 1349
Signing time: Wed 30 Apr 2025 17:00:33 +0000
Manifest this update: Wed 30 Apr 2025 17:00:33 +0000
Manifest next update: Thu 01 May 2025 17:00:33 +0000
Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: nxcChQC0ENZ/pgBa+0JIqibnnFrE2kawkWhILxFZzoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:a4:98:f0:f6:68:0d:50:33:d7:b2:7f:3b:ed:33:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Apr 30 17:00:33 2025 GMT
Not After : May 1 17:00:33 2025 GMT
Subject: CN=bd50361eb08e2bc417df738b8018e811a3a67bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:26:b7:d7:ce:39:3b:32:91:64:f7:bd:a4:
33:41:22:a3:be:16:1e:55:78:b2:ad:b9:72:3a:1c:
3e:dd:6a:47:48:41:da:b8:19:d7:83:8c:c3:ea:f0:
77:71:63:02:0f:36:34:1c:4a:5b:51:e9:47:f6:49:
69:4b:a8:7b:dd:88:48:89:fe:b1:40:13:b2:a2:48:
88:c7:18:46:fd:f6:65:cd:e5:7e:92:d1:87:21:8d:
31:d7:e7:1b:8e:fb:59:a9:83:ee:61:4d:f8:ef:64:
7b:33:e6:56:56:7d:4a:7f:3a:c7:72:27:71:d9:f0:
e7:dd:66:04:66:0e:75:85:ab:01:ac:dc:2c:29:88:
8d:c4:cb:e8:94:63:68:d6:97:71:14:c5:63:2a:85:
df:51:6f:70:31:da:ee:5d:51:93:a7:24:f5:17:e9:
2d:c2:3d:fb:cc:87:18:80:12:c0:34:08:8d:4a:a2:
b6:37:fd:5b:21:dd:9f:21:ff:3f:90:cc:ef:7f:c3:
bd:8d:88:70:33:66:15:9e:a8:52:c6:57:7b:55:24:
a0:40:63:c2:76:dd:a8:24:1e:72:74:dd:0a:a8:3d:
cf:af:b2:96:fa:33:6a:23:7c:72:18:41:0f:18:91:
9f:15:ed:0e:d6:20:7d:4b:b2:98:07:48:7a:64:56:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:36:1E:B0:8E:2B:C4:17:DF:73:8B:80:18:E8:11:A3:A6:7B:BC
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:53:1c:ef:95:bf:a9:f3:cc:2e:de:b9:79:e0:32:b4:85:40:
20:73:6c:2f:05:0a:d3:ac:be:76:2d:23:51:e9:08:fa:13:34:
f5:e9:24:97:de:50:72:30:b6:9b:9d:8a:06:d8:e5:a6:7f:c4:
6c:69:63:c3:23:36:2e:8b:1c:af:4c:5b:7e:77:44:32:e8:2e:
58:74:3f:11:8a:1a:49:a4:48:44:ca:86:bc:8c:e8:eb:58:18:
e2:75:e2:3e:85:3c:05:b1:fd:76:6e:f6:77:9c:fd:d4:bc:8e:
14:a5:31:44:e8:d9:32:85:2d:3f:31:72:70:5d:25:7e:bb:98:
70:60:12:2b:24:2d:07:9a:28:92:7d:2f:ca:1a:a7:0e:24:97:
de:60:e4:62:b9:6e:dc:cb:30:c3:15:46:6e:bc:28:06:5a:13:
69:2a:68:f2:4b:dc:9c:46:52:ae:44:1a:ac:bb:7f:9a:ad:a9:
13:26:70:cf:30:b1:47:7d:46:9e:e3:be:f7:5e:cb:c1:93:2c:
ef:68:fa:71:a1:d2:28:56:d5:51:c7:52:1e:c3:94:8a:a7:3e:
fc:07:41:f2:5a:58:b2:ca:65:31:00:7c:9d:f7:fe:8a:e4:96:
e6:cf:2b:f1:b1:95:b3:69:54:5b:d3:40:b6:21:2c:08:8f:af:
ca:65:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:21 2025 by rpki-client