Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File: WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier: K6v02ra0SXeH/RjSFjPMD9ogW2+a0tggBKUwbXg/mrM=
Subject key identifier: 88:4D:BE:2B:8A:13:B4:FE:90:FD:AD:54:03:77:AF:B3:D5:4C:10:11
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 01967A8DD889ADACB4DAA76A056CA84B9536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 04:00:38 +0000
Manifest this update: Mon 28 Apr 2025 04:00:38 +0000
Manifest next update: Tue 29 Apr 2025 04:00:38 +0000
Files and hashes: 1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: lshKBxeDz/xyf7zV7RMVTv9UZCMk6Yi8oASQMaExYmg=)
2: qnyT4xJfydWnP5jn7MY2v2jL3y4.roa (hash: OVzltJuTj7ZgLCXEnxygFrh+27k2M7PI7mlew2jPilY=)
3: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (hash: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:d8:89:ad:ac:b4:da:a7:6a:05:6c:a8:4b:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Apr 28 04:00:38 2025 GMT
Not After : Apr 29 04:00:38 2025 GMT
Subject: CN=884dbe2b8a13b4fe90fdad540377afb3d54c1011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:a2:cc:65:ab:cd:be:e5:85:a0:92:9a:17:
c1:d6:0c:2f:75:44:b2:4d:7d:15:6e:32:f8:84:88:
b1:30:7c:d4:c8:36:b5:a8:37:7a:d9:64:1e:86:e1:
9a:8e:a0:d9:b6:85:86:af:0e:a5:e0:41:9f:15:05:
b6:fb:78:4d:f1:39:29:67:0d:07:10:64:ac:5a:99:
2c:ed:37:b9:05:5c:78:c6:83:8d:c8:84:87:75:c8:
da:1d:08:00:66:e7:b9:5d:bf:10:0b:60:63:3b:d7:
fc:d7:8e:5c:76:8e:51:cf:da:5e:9b:8f:43:f0:05:
8d:73:5d:f6:bc:ef:4b:81:13:81:d7:04:53:06:03:
1a:ab:72:da:82:d3:73:75:94:13:da:2e:9c:3e:90:
10:1b:0d:f0:97:55:c9:f3:d5:d0:7f:39:8c:d1:7d:
2c:b9:c3:68:49:f0:fa:6e:23:48:69:53:5b:7a:87:
ae:39:bb:da:24:a7:1e:b3:16:fa:97:14:f5:f0:44:
55:a8:9d:81:42:78:10:45:9c:a2:dc:4b:f8:37:09:
46:a4:75:eb:d2:b8:27:c8:1a:2c:91:7a:70:00:cd:
d2:50:7b:ad:88:d6:44:ed:53:61:21:00:a8:b6:e6:
62:a0:a6:80:b9:d0:d6:fc:be:31:ab:2d:c3:ad:32:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:BE:2B:8A:13:B4:FE:90:FD:AD:54:03:77:AF:B3:D5:4C:10:11
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:44:14:ec:97:20:1e:52:16:26:ea:5b:98:c7:f6:3a:63:ef:
62:d1:50:24:21:91:08:37:c9:57:66:80:4c:08:d0:e9:d0:89:
07:7f:92:cf:57:61:5b:d6:d1:43:28:25:e7:ed:81:64:58:60:
da:af:ed:bb:93:5f:e8:5e:77:a5:97:50:c1:fd:5b:6a:6e:6a:
fb:75:c4:54:3e:4b:d6:e7:de:c4:2d:59:8b:90:9b:b5:d5:06:
31:83:2b:44:9c:c6:90:68:04:3b:c7:00:e1:34:24:de:83:ac:
22:af:20:74:6d:87:0d:6f:57:37:38:e1:97:35:25:81:9a:d6:
3d:7a:e4:bc:ce:cd:ea:6a:c4:1f:c5:78:39:77:a0:eb:3d:2d:
53:bf:a9:5c:b0:67:3d:b9:ca:34:53:37:95:59:30:48:b5:03:
e8:99:44:1e:d6:5b:ad:8e:dd:f6:98:2b:2a:e4:ef:83:17:57:
6c:cb:c2:59:a0:6b:e7:76:01:ef:85:76:44:71:e2:96:3f:a0:
8f:67:92:e7:63:55:31:fb:76:36:56:31:e4:5d:2d:1a:1c:f9:
3b:b0:f8:c0:9c:74:9f:e1:fd:aa:49:59:7d:54:c5:56:b0:cd:
60:28:3b:6f:64:6a:cc:37:c3:7e:ed:be:34:01:33:36:94:9a:
60:eb:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:05:05 2025 by rpki-client