Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
File: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft (raw, json)
Hash identifier: o9AeNP89yoyBTkGsGtSkSXqJlMjd0PejguL18d0q+xs=
Subject key identifier: 40:35:EC:C3:77:A6:5E:A0:24:5C:FE:04:DF:81:8C:D8:C2:8F:64:D2
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 019684DA27FC9617AA3F0ADE6703A4D6CA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
Manifest number: 1323
Signing time: Wed 30 Apr 2025 04:00:11 +0000
Manifest this update: Wed 30 Apr 2025 04:00:11 +0000
Manifest next update: Thu 01 May 2025 04:00:11 +0000
Files and hashes: 1: 3vk_cNMUWC-JUrbyIXBN2gny1YM.roa (hash: 5UI1dk/WNT1Jzxh8ssSrm2cZ8VMJvaL80lHMAJV1sdM=)
2: hm311e8NJq4CeLUwG2WwDwuRkEo.roa (hash: q59x20MyNrLs1Zhrc2YWC53c5eh99JxfPMp5OIsclNU=)
3: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl (hash: nI/iSNufXIXG9Cj2m2jFTJA+2oCFjO4YkntllunWsl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:27:fc:96:17:aa:3f:0a:de:67:03:a4:d6:ca:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Apr 30 04:00:11 2025 GMT
Not After : May 1 04:00:11 2025 GMT
Subject: CN=4035ecc377a65ea0245cfe04df818cd8c28f64d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:7c:50:55:f3:50:d1:e2:bf:65:d8:b8:e4:
43:02:50:a1:dc:ba:0f:c6:27:32:ca:1a:25:5b:91:
5e:74:b9:d3:1c:df:6e:fa:1d:28:c7:51:00:f5:e0:
69:fc:8f:e8:eb:de:51:c0:36:1c:67:d5:6f:b6:1e:
26:f7:3e:14:3b:c5:1f:cb:53:a7:a0:1b:18:bf:89:
ff:e4:66:11:c0:62:11:35:18:ec:fb:de:29:f7:77:
39:37:43:74:15:18:bd:84:7a:57:8a:81:be:a1:a6:
ef:1e:f1:f2:09:39:7c:ff:c0:ca:1f:b0:cd:f5:65:
67:68:f3:fa:16:ca:2e:d3:57:ab:bf:5c:75:81:86:
cd:27:a8:ea:70:72:86:88:66:7d:fd:ee:e3:88:ab:
ba:76:20:42:c7:70:70:4c:c3:a0:c9:aa:25:48:6d:
99:5c:29:2a:69:84:d9:c9:f4:96:91:ff:6a:45:d7:
d2:e0:43:68:c7:94:91:12:b1:63:f4:d3:20:5e:e3:
9a:c5:84:eb:7a:54:ce:9d:82:7f:1f:46:bb:1f:b4:
1a:b2:4e:2a:56:d2:7e:99:bf:be:94:60:3d:00:26:
af:06:3b:65:eb:e3:af:bc:47:bb:91:08:df:33:bc:
25:54:e2:d1:a6:ba:4f:00:9b:c0:06:82:8c:f9:c6:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:35:EC:C3:77:A6:5E:A0:24:5C:FE:04:DF:81:8C:D8:C2:8F:64:D2
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fc:42:35:95:9b:83:d1:e0:fd:8b:80:c7:ba:15:f8:7c:f7:
6c:ec:2a:7c:1c:f1:01:79:49:c2:cc:d4:2e:2e:fd:18:df:23:
e5:50:9f:40:1e:d2:c8:e5:bc:ad:85:7e:11:66:d7:af:77:0b:
1e:a4:a3:fd:aa:f9:c9:ff:09:16:9f:e6:57:90:57:f8:00:4f:
63:63:dc:af:36:dd:15:da:9a:00:be:2c:eb:ed:d3:8e:6d:5a:
2d:2b:b9:dc:6a:69:c6:1d:e6:f6:95:46:42:bc:fd:04:02:17:
16:c5:96:73:81:32:46:78:b9:ff:04:25:3b:05:23:8c:ce:8b:
19:e9:31:1e:43:36:34:61:9a:93:1b:2b:48:90:a1:fd:b4:ae:
42:1c:39:2c:1f:90:81:a4:bd:04:bd:c0:89:7b:f3:d3:17:4f:
69:d0:8f:56:34:b4:af:80:6b:ab:0e:d1:b5:f8:4b:ee:f1:16:
6f:88:0a:99:58:6a:e0:e6:6b:d5:37:04:7b:bd:7b:eb:32:ad:
b7:40:ed:cf:15:e6:da:fe:2a:67:dc:89:bf:0a:02:73:5c:c8:
f8:eb:96:87:0f:a2:e9:95:ba:4a:73:f9:81:94:88:2a:8f:fe:
bf:18:99:ee:fd:e4:20:ec:39:d0:53:f3:c7:80:d0:7e:a6:b1:
cd:8b:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:05:51 2025 by rpki-client