Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier: BEgnAcpefF7s1SEeAeNAfASb9lziyiuOgAnih0qzZUs=
Subject key identifier: 84:69:D1:83:B4:9B:0B:2D:2E:59:C6:EA:70:41:EC:A4:7E:87:73:C6
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial: 0196854806CD1DD6F625E08ED3CEAF3F4A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number: 0B32
Signing time: Wed 30 Apr 2025 06:00:11 +0000
Manifest this update: Wed 30 Apr 2025 06:00:11 +0000
Manifest next update: Thu 01 May 2025 06:00:11 +0000
Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: uziG+EN2DiMTUCx1+moZUbqw4lETP5qDabBY3yx4uq4=)
2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:06:cd:1d:d6:f6:25:e0:8e:d3:ce:af:3f:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Validity
Not Before: Apr 30 06:00:11 2025 GMT
Not After : May 1 06:00:11 2025 GMT
Subject: CN=8469d183b49b0b2d2e59c6ea7041eca47e8773c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:0d:7a:eb:4c:04:a1:a6:36:f6:a1:a0:e1:
38:98:ca:ac:24:c6:75:c2:b8:35:7c:8d:36:5c:c7:
3e:76:07:02:be:37:db:d2:39:f0:61:18:88:11:62:
48:7e:ae:14:a4:d6:10:e2:50:68:65:1f:53:94:b3:
f7:59:13:2e:21:0a:59:4a:0b:43:fc:52:e9:c1:f4:
81:b9:ff:ba:cb:c2:a0:61:8d:71:01:74:f4:23:ee:
73:db:d3:96:d8:fa:51:14:1e:6b:7d:97:aa:be:60:
8a:98:00:0c:79:8b:03:28:3f:f2:04:b9:38:9f:17:
72:ed:8a:cc:fb:5f:fc:b0:d6:f1:2c:6f:a3:8e:23:
10:e8:65:b5:fb:5f:9b:c4:13:c7:09:4d:68:95:dc:
e9:a5:be:15:e3:a1:17:a7:ca:eb:45:dd:f1:89:01:
8a:ae:7a:76:3d:93:2c:0d:1d:28:28:eb:97:19:1b:
62:fb:a5:ef:0f:91:b3:9d:cb:61:ce:4c:50:f2:df:
c0:68:9d:31:54:b1:bd:d0:c0:f0:85:89:6f:49:ae:
3b:a2:66:5f:d4:d8:df:ef:39:df:a0:0c:f8:04:4d:
aa:55:c1:29:a3:22:f2:49:cb:e6:8a:26:0b:81:8a:
8f:8f:d1:4b:df:5d:da:5e:9f:79:9d:f1:27:37:96:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:69:D1:83:B4:9B:0B:2D:2E:59:C6:EA:70:41:EC:A4:7E:87:73:C6
X509v3 Authority Key Identifier:
keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3a:8b:b0:f7:cd:06:70:4f:70:27:b2:e9:42:c6:fa:ad:b5:
91:18:d1:0e:fe:98:f1:82:14:3b:1a:a0:e1:d3:a3:21:ce:2a:
ed:2c:20:49:a8:b8:db:8b:b1:b0:55:0b:b3:96:9e:95:d8:a5:
15:6d:83:3a:ec:91:af:72:00:4c:28:27:9f:8a:29:17:30:f2:
68:b7:59:fd:e4:9f:ba:68:80:0d:da:c8:63:dd:7c:65:db:75:
00:8a:46:82:79:01:2b:a6:9d:21:a6:e9:67:86:fe:e7:ac:42:
26:a5:fd:26:68:37:eb:f0:29:3b:b8:bb:a2:e7:13:aa:88:48:
9e:94:da:44:b7:d4:00:76:49:92:1a:86:bb:06:e3:00:fe:40:
c7:e2:c6:12:aa:65:3a:06:89:ea:67:bc:7d:76:f8:46:42:75:
fb:cc:02:c0:d0:03:25:1d:73:ee:f9:a0:a7:e6:06:a5:48:1a:
e4:3f:49:80:b0:ae:8a:7b:97:86:e9:c8:a9:c7:6b:fc:f1:0c:
92:72:20:c9:0e:78:e7:e9:2a:21:47:56:9b:5d:9d:3c:01:c6:
dc:93:12:8b:3e:c1:39:f5:54:87:eb:3f:2e:f5:e0:30:e8:59:
b3:66:9f:f2:69:0b:b9:3e:72:38:cf:e0:17:45:bb:01:6f:89:
c5:4a:16:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:03 2025 by rpki-client