Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: klvAWlZ4sLuplDqwX6K8lcrlNo8G2j36Dmtdq/KHW9M=
Subject key identifier: 02:BE:D9:9A:60:B4:CE:33:27:B6:5B:0E:C8:A5:8F:F7:61:2D:A9:D3
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 0196771EB2DA0DC952E64F2F5E21EE158BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 03C7
Signing time: Sun 27 Apr 2025 12:00:22 +0000
Manifest this update: Sun 27 Apr 2025 12:00:22 +0000
Manifest next update: Mon 28 Apr 2025 12:00:22 +0000
Files and hashes: 1: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: vAYWiZk4i4mwIbdbKFNITaPzciT/hmfsYkSoqnHWkVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:b2:da:0d:c9:52:e6:4f:2f:5e:21:ee:15:8b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Apr 27 12:00:22 2025 GMT
Not After : Apr 28 12:00:22 2025 GMT
Subject: CN=02bed99a60b4ce3327b65b0ec8a58ff7612da9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:f8:61:55:76:31:27:e8:8a:6c:da:b1:a9:
1d:8d:52:b6:c3:26:fb:2a:72:63:06:49:01:ec:b7:
dd:13:f4:3c:70:b4:6b:72:4c:65:2c:44:9d:00:04:
58:53:b5:1e:37:01:3a:23:fa:06:22:4c:60:15:1f:
8b:fa:72:36:f9:30:04:b6:96:d5:60:76:a5:8f:88:
b2:f7:6d:27:5e:9c:ae:60:94:be:7c:36:f7:5c:47:
a0:e9:61:c1:36:31:d0:03:f0:51:f8:c7:4a:1a:7c:
f3:98:79:bb:0f:3e:f5:47:a3:b7:78:95:90:9e:d5:
cd:13:63:09:e0:7e:d4:dd:d2:24:67:1c:07:90:d0:
58:10:7e:08:9c:c8:a9:83:1d:c3:59:34:a9:f6:7b:
24:0e:16:44:80:de:b1:8e:a5:2a:de:fe:76:f1:a1:
9c:68:63:72:45:8f:e7:d8:a6:f7:69:a4:97:a9:da:
19:4f:10:f2:4e:ee:ce:e0:65:07:c5:33:38:cd:1b:
be:d4:9f:50:25:ff:2b:b5:96:9c:2b:30:04:73:f0:
71:43:d3:2d:af:d2:2a:fe:65:43:e9:91:e8:0e:41:
32:87:19:66:5b:d9:db:da:e1:5f:33:ac:ec:ae:19:
8c:f1:b1:07:c5:84:d8:fe:45:42:8c:5a:89:90:af:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BE:D9:9A:60:B4:CE:33:27:B6:5B:0E:C8:A5:8F:F7:61:2D:A9:D3
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:58:bf:c4:ef:19:21:88:74:67:27:cd:44:29:56:52:91:2f:
59:7c:1d:26:0c:41:66:6d:0f:5a:fb:b5:a0:ef:59:cf:af:2a:
67:88:a5:9d:01:79:10:da:7e:86:a7:7d:32:1d:45:18:e2:22:
11:09:1d:47:1a:08:bb:fe:41:2b:00:e9:57:66:06:35:cf:e6:
4b:03:ee:d0:f3:05:d0:a2:f4:5f:2c:bf:df:6a:49:a8:50:01:
5d:dc:f8:2d:f9:07:c0:18:25:f6:45:ab:99:62:f0:d2:a6:2f:
af:d0:0b:7a:12:93:20:0a:31:6b:47:ba:01:b7:df:01:e2:c2:
40:e1:4a:63:ad:01:55:3e:44:39:70:67:ec:69:b3:8c:b4:d5:
7f:ef:2a:55:bd:d7:36:21:2e:e2:6e:54:c8:66:e8:aa:99:51:
ee:cf:3a:8f:b4:41:71:a3:23:5e:ab:5a:62:6c:1f:19:a0:59:
ab:22:48:af:ec:91:49:69:98:5f:ca:32:4f:52:bb:13:0c:15:
d4:3e:19:9a:94:54:27:46:6c:71:cf:c5:d3:f5:56:b0:2d:89:
ea:04:eb:36:c4:1c:da:7d:2f:69:d8:e8:88:57:63:3b:33:c0:
1f:53:87:99:ca:2f:b1:bc:c0:ec:c1:cf:2b:ae:0f:26:4a:9c:
7f:0c:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:40 2025 by rpki-client