Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
File: wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft (raw, json)
Hash identifier: VLCcBH50trfJhPQico2Fh0N7rlH9Jl8YuGGXpNWZuUk=
Subject key identifier: 2D:45:84:79:A8:BF:91:A2:5C:C3:6A:50:3B:F0:67:9C:BB:90:54:65
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 01967DC5D2FB3904580F470665EFB0442C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
Manifest number: 0CD7
Signing time: Mon 28 Apr 2025 19:00:38 +0000
Manifest this update: Mon 28 Apr 2025 19:00:38 +0000
Manifest next update: Tue 29 Apr 2025 19:00:38 +0000
Files and hashes: 1: a6SHvUwdULLlosMj0Qyu3etIaJs.roa (hash: AXN629p0Y1qYqZU9D/jxSCYhJRckcBgGmOm3TSGD8tc=)
2: lg4c_Y9KaB7IeYQtG_NlVFs8Ttc.roa (hash: s0TIgc9o3WnXNq+/Rw0e9Vihi4zyFHKiJVF/TZNGrnw=)
3: wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl (hash: EX1pjlkuxMofUIKwbkJ7+RUhj90Fr1A2eq57XNWe0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:d2:fb:39:04:58:0f:47:06:65:ef:b0:44:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Apr 28 19:00:38 2025 GMT
Not After : Apr 29 19:00:38 2025 GMT
Subject: CN=2d458479a8bf91a25cc36a503bf0679cbb905465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:19:c0:9a:d3:37:8c:43:15:b8:a0:34:4a:
65:49:e3:0e:91:36:ce:51:14:c5:8b:ce:16:10:95:
e5:af:93:6a:c9:42:2b:d1:9d:cb:fd:6d:e2:2a:e1:
6c:c0:f9:d9:4a:cb:08:1f:5b:4b:31:0e:72:52:86:
5f:d0:f7:b5:ba:70:0d:4b:e9:e7:c0:a1:62:47:9f:
92:f0:41:00:bf:b1:3e:61:b8:53:dc:ac:7d:e1:80:
97:28:ec:28:4f:03:68:ba:0d:ab:0f:21:a9:4a:3c:
e0:bd:15:3b:d4:a6:1f:6c:ba:39:6b:ad:4d:72:81:
25:ec:93:9e:2c:5a:18:7c:cd:98:83:87:6a:ff:f1:
d4:f5:31:ba:6c:20:88:1c:df:50:e1:7b:e9:ed:9d:
61:f9:f9:8c:6f:67:9e:9e:13:54:ec:cd:58:03:91:
1a:f2:97:ae:e7:2e:cd:a9:69:c8:27:52:e2:8a:ae:
ba:8d:c5:84:4a:7d:57:6c:3c:57:f3:38:11:21:04:
32:b5:94:77:27:4d:09:ab:42:a9:ea:66:61:0b:5d:
7e:21:6c:36:40:72:9d:8e:5c:c2:0c:65:34:10:d7:
11:b3:59:56:e3:18:22:7e:e0:5c:ca:16:e8:f7:7a:
fc:bd:84:8c:19:14:ac:e9:69:2f:65:f1:0f:bc:90:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:84:79:A8:BF:91:A2:5C:C3:6A:50:3B:F0:67:9C:BB:90:54:65
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:46:5f:fc:20:52:13:b7:10:6c:7f:fb:36:e4:21:e8:3b:
1f:0a:08:e1:7f:a2:cb:20:ef:da:be:79:07:cf:db:8b:bc:50:
3f:ca:1d:da:f2:65:3f:75:ce:3a:66:0d:3d:24:5e:d2:81:81:
76:f3:36:7b:dc:e0:7e:95:ed:de:c9:b4:29:6c:63:f2:81:0f:
f6:95:6a:b3:6e:52:00:f2:f0:dc:4c:b6:ad:b9:e1:0c:1c:0a:
d7:3f:a9:56:3c:21:32:ac:76:15:90:5b:58:e9:72:68:74:46:
f5:62:00:db:b0:53:18:67:fb:38:f2:da:a9:9f:8f:79:e9:d8:
8b:4f:af:b2:54:4c:13:26:3d:5e:94:4d:aa:99:7c:b8:a8:9d:
f6:54:7b:4d:c5:a2:6a:6d:63:42:94:39:42:ec:57:b5:f3:e5:
33:a5:b7:4f:f8:f7:75:b6:65:21:cc:4b:ae:00:51:7c:8a:f4:
16:40:23:11:d1:06:d2:26:29:12:f9:bd:07:56:00:03:3b:81:
07:82:06:21:40:76:b3:45:e1:70:30:6b:36:9a:60:d5:82:8f:
2f:be:6e:ff:de:e5:66:6f:dc:d0:a8:27:06:33:6d:b3:34:67:
90:71:d2:76:46:49:2e:59:99:a4:5d:1e:e9:e3:f8:21:d3:60:
89:68:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:18 2025 by rpki-client