Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: +KIdzHrvHYBfaRkO55s6bEN+r7YfBdZCDRBeS3m9AHA=
Subject key identifier: 6E:75:C8:C2:7E:0D:6A:FD:8E:08:A3:23:ED:64:12:80:7D:16:29:19
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 01967ED8D27E8F2E0E9CBCAD8DBD0F24266B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 151C
Signing time: Tue 29 Apr 2025 00:01:00 +0000
Manifest this update: Tue 29 Apr 2025 00:01:00 +0000
Manifest next update: Wed 30 Apr 2025 00:01:00 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: wg4BmiDF1MdcqqDTvcXuGXOJWmJLNSYzbI4kPj5e5Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:d2:7e:8f:2e:0e:9c:bc:ad:8d:bd:0f:24:26:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Apr 29 00:01:00 2025 GMT
Not After : Apr 30 00:01:00 2025 GMT
Subject: CN=6e75c8c27e0d6afd8e08a323ed6412807d162919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:18:40:bb:4f:2d:f0:5f:de:99:9d:de:47:
4b:01:8d:c8:84:5f:18:9e:39:d6:2f:8f:28:3f:68:
c1:48:5a:4e:66:93:01:36:87:a1:1c:7a:e3:cd:ca:
3e:38:41:b2:42:67:8c:06:8c:bb:e5:32:28:7f:82:
fd:6d:a9:df:3a:0b:63:e7:7e:77:44:88:9a:dd:ac:
d6:d6:c6:c7:40:4b:04:51:b4:89:1c:36:2b:61:90:
4b:38:5b:2d:c7:41:96:36:84:51:c2:45:1e:69:e5:
fe:52:6f:4d:53:71:bc:ad:5b:f0:97:a3:8e:00:81:
7a:7a:38:b4:e9:49:0a:20:81:7e:8f:b6:ce:0e:14:
9c:5d:d7:b3:3d:31:d5:03:02:7a:42:51:82:e1:ec:
9d:8e:55:aa:6d:e8:51:ac:42:b2:42:cb:ba:0e:53:
45:27:60:3b:54:81:a3:5d:76:af:c8:7f:7d:c1:cb:
69:17:28:e2:2f:de:b4:0a:1d:09:72:70:57:90:40:
7c:9f:14:b7:6f:0e:9a:28:57:70:8d:72:a3:53:4a:
00:cd:c2:1f:82:01:a7:8e:3c:f7:ef:7f:1c:d1:09:
23:c7:ca:9e:9c:c3:23:dc:d6:c2:ec:51:ba:98:4c:
31:57:e6:55:9d:df:1c:34:4b:33:11:95:ae:6e:74:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:75:C8:C2:7E:0D:6A:FD:8E:08:A3:23:ED:64:12:80:7D:16:29:19
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e4:85:7b:54:45:21:a7:cc:31:d3:d5:c4:17:51:d4:90:6c:
28:26:ac:67:d3:61:ea:04:29:07:c4:a3:9b:38:5f:43:fe:c4:
32:b9:3b:1c:85:c8:6a:8d:fa:ad:db:45:fc:9d:5f:63:b4:1b:
50:89:36:32:91:20:1b:0c:51:10:f7:77:9a:4e:e7:4e:fb:bf:
72:bb:d4:f5:b3:be:59:30:22:33:82:f3:38:7c:60:79:00:e8:
40:06:bc:39:b3:e0:ed:f6:49:b7:0b:cd:b2:92:14:62:c8:8f:
5c:2a:1c:fb:4e:aa:f5:8a:1f:df:59:0c:e8:e1:e4:4c:0e:ab:
70:be:0c:0f:d0:8e:73:89:42:2f:b6:60:f9:12:4c:d8:17:6e:
1f:78:63:48:03:0b:26:37:5b:07:ea:35:e4:b3:e9:21:f4:2a:
28:98:07:ea:27:c0:84:fb:1f:ab:1d:64:de:bb:b7:56:d7:2a:
7b:be:39:46:6c:5d:98:42:20:83:db:ee:dc:28:75:1e:31:2f:
f2:53:d1:6c:c7:a5:49:e2:be:67:19:44:ee:4d:e5:50:a8:ef:
49:51:53:7c:db:b2:90:54:89:3a:b6:00:1d:8f:86:af:f8:79:
95:3a:84:01:e1:ad:ca:7d:74:26:bd:56:4f:b5:37:b3:df:8b:
f0:a7:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:09:53 2025 by rpki-client