Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: jWnBavcNT1b2dhLSBGcwZWb3kGSOvQMULM0/Z4zVwRs=
Subject key identifier: 67:70:6A:1A:CD:D1:97:7D:35:F1:8E:B1:37:B6:BB:56:75:AF:ED:12
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 0196767A3945257134666176AB058B52AE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 0E8D
Signing time: Sun 27 Apr 2025 09:00:43 +0000
Manifest this update: Sun 27 Apr 2025 09:00:43 +0000
Manifest next update: Mon 28 Apr 2025 09:00:43 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: NUMcLX6wgNkYZPRfMogGLf5OoG6Cat1z07dGwm3p6ec=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:39:45:25:71:34:66:61:76:ab:05:8b:52:ae:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Apr 27 09:00:43 2025 GMT
Not After : Apr 28 09:00:43 2025 GMT
Subject: CN=67706a1acdd1977d35f18eb137b6bb5675afed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:4e:a6:d0:b5:89:11:d4:ad:2f:c5:a7:e8:
41:b2:4f:92:e9:6d:29:5d:e3:59:8d:b5:1b:0a:fc:
6b:4b:ee:71:cb:a1:85:de:e7:07:31:48:15:1c:9c:
6e:72:0e:86:a7:ff:c2:97:84:22:79:cf:08:90:4e:
58:d9:69:31:1b:bc:11:24:ba:fc:1d:ab:db:86:1e:
c4:e5:a7:08:f9:53:a9:b0:bf:46:60:0d:4d:5a:0d:
a1:cd:f1:62:d2:95:5e:78:c7:d6:41:b2:1f:e7:4b:
28:c8:5c:e1:16:69:f2:0c:94:3e:a7:57:68:fa:28:
f3:cf:7a:55:aa:90:a0:03:1e:19:65:a5:0c:4b:37:
7f:b4:00:bf:44:38:2d:3c:7a:8b:d8:9c:6d:76:27:
b5:b2:60:35:8a:b0:e0:b9:34:d9:51:43:dd:d8:d1:
55:d3:37:aa:41:ef:79:62:dc:74:83:78:51:e9:c0:
43:f8:2e:d6:e9:be:b3:95:dd:54:0d:21:35:dc:1c:
a2:0d:5a:e1:65:7a:6a:78:44:f9:c0:88:c2:c3:2a:
12:25:25:04:2a:d2:e7:b1:e4:20:24:5f:45:de:27:
79:38:69:50:9f:1e:e1:79:85:c2:de:a6:3e:66:a2:
5e:72:25:a0:f3:e4:d0:a9:50:18:13:e0:d0:ce:8a:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:6A:1A:CD:D1:97:7D:35:F1:8E:B1:37:B6:BB:56:75:AF:ED:12
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1b:54:1c:7f:68:f5:60:d5:1d:4c:26:a1:92:83:79:2e:33:
20:2c:6e:22:d4:60:67:9f:5a:1b:61:67:1a:09:a0:3d:4f:a6:
c0:f5:78:92:5c:8a:5a:1b:bb:2b:b1:34:9f:0e:b7:49:e8:64:
bc:db:59:38:2f:00:76:70:42:08:2e:c6:11:60:03:33:0e:99:
5e:ac:2c:2e:42:ea:bb:57:4c:13:1b:d6:5b:0d:39:03:21:cc:
cb:b2:9a:d3:06:84:4c:ff:d6:04:89:d0:ba:e5:90:b9:4c:a4:
d7:38:28:60:99:c8:9a:85:f1:27:ed:0f:12:4d:81:e1:c5:3f:
a4:75:7a:c5:28:09:ce:b7:69:46:36:09:c4:10:00:d7:b0:59:
0b:04:12:d3:c8:79:c0:7e:15:b3:4c:6a:7d:02:cc:71:f7:92:
67:13:aa:57:47:6a:c0:fa:69:46:8d:94:51:65:26:f7:1f:ad:
a0:36:12:7e:ca:0d:21:b4:16:92:ad:c7:8d:58:1f:10:2b:24:
7f:f2:02:ae:b9:a1:2b:97:2e:14:5f:72:0f:79:ef:d2:44:e2:
a3:58:f3:db:95:7d:96:ad:3e:7c:2b:c7:7a:8c:ed:3f:cc:07:
f3:b5:34:76:89:a4:04:18:14:34:00:14:09:d1:a1:57:1a:ac:
c1:ef:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:36 2025 by rpki-client