
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: qtzDWVAyJbA945F3jjBN6C9+C211Uwzv7wNGSv/ZtZo=
Subject key identifier: 24:37:E4:5D:0A:D5:0C:25:2A:84:D5:AA:93:37:9C:32:2F:31:AF:22
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 019677C3BC553B2D949F06DA87FDCC508DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0BF0
Signing time: Sun 27 Apr 2025 15:00:38 +0000
Manifest this update: Sun 27 Apr 2025 15:00:38 +0000
Manifest next update: Mon 28 Apr 2025 15:00:38 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: f8hewBfu/6rC+opDivUhXJv8YXA7cH8kmB4d0UiWvzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:bc:55:3b:2d:94:9f:06:da:87:fd:cc:50:8d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Apr 27 15:00:38 2025 GMT
Not After : Apr 28 15:00:38 2025 GMT
Subject: CN=2437e45d0ad50c252a84d5aa93379c322f31af22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:39:ce:e6:5a:5b:41:91:24:41:6c:55:b5:
ce:b4:17:c2:45:be:65:8a:4c:d5:53:e8:b7:4e:2d:
79:a2:d4:98:bf:c0:08:af:19:e6:51:d3:37:cc:05:
50:f0:f4:b6:32:af:5f:44:99:81:ca:50:b6:e0:9a:
96:fb:d8:31:ce:13:7a:d0:5a:79:c4:b7:8e:ab:a4:
d7:4e:76:8b:d1:26:af:ac:d1:27:d5:34:d1:2e:99:
6d:0b:5b:4f:10:af:96:3c:93:03:9d:5f:71:e8:54:
89:20:81:37:b2:ec:9d:be:83:07:ed:0d:35:ef:a8:
0b:b4:5a:d0:86:0f:d5:12:a4:d5:76:6a:f0:42:75:
32:c5:37:7a:2a:78:02:2f:69:65:7b:c3:b3:ad:f2:
ad:07:79:54:75:b3:22:60:24:20:fe:b9:88:14:d8:
de:01:59:b8:aa:d9:e3:9c:6e:64:6c:10:06:cc:76:
d8:80:cb:93:53:9c:f5:e5:47:37:c2:63:cc:ae:9c:
10:07:a8:09:91:8a:2a:f7:39:01:81:b0:34:fe:6e:
06:7b:88:a8:08:db:19:d5:08:42:de:a8:23:35:8f:
1c:3f:6c:87:20:7f:b1:46:3f:2c:00:73:92:73:2d:
36:52:f3:24:9c:6f:78:fe:9c:cd:e9:31:d3:30:fc:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:37:E4:5D:0A:D5:0C:25:2A:84:D5:AA:93:37:9C:32:2F:31:AF:22
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:88:d3:42:24:e2:e6:8b:a0:c8:f7:21:ef:18:26:18:b1:
d7:d7:58:03:47:4d:48:63:a2:7f:90:62:55:7a:2f:f8:2a:c2:
24:92:2f:9a:42:6a:dc:18:10:16:20:62:fc:6e:67:3c:3f:21:
82:59:89:c8:35:43:c6:ef:50:21:1f:b4:73:b6:2e:65:8e:20:
dd:53:e7:f8:80:a4:d8:7d:88:d5:dd:5c:9a:ed:33:c5:63:f0:
01:dd:61:85:99:0b:88:57:fb:c5:b7:f3:82:0e:4c:b7:ac:cd:
2b:0e:16:55:76:88:91:05:3b:69:ef:c5:ab:6f:c7:c7:9f:31:
25:38:7a:40:2b:d0:bf:47:64:87:5d:03:52:35:16:fd:54:8a:
fc:6d:2f:2e:99:b8:e8:13:ce:34:49:88:c0:d9:0c:b5:3b:ff:
12:f7:53:2b:4c:c7:1d:e3:ff:34:55:1d:d9:5a:f0:92:77:f6:
f2:fa:d0:7d:22:a0:fb:9a:1f:53:50:f7:d9:70:97:86:c6:53:
63:03:ac:70:ce:9d:6d:ef:ff:8f:15:e6:b4:27:9c:98:d8:90:
62:86:e9:c0:b5:27:42:12:47:a4:81:b9:39:6a:9c:f9:4a:7e:
88:14:7e:67:45:11:e8:ed:73:ff:36:bb:a6:36:5c:4a:bf:bc:
50:62:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:12:57 2025 by rpki-client