Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: twgTt3dbu2KorAoGLd076XEcLlYcXM+rI+qcLRtMZSE=
Subject key identifier: 95:C1:CA:D8:AC:45:CC:D0:23:24:F3:68:B9:E5:04:8A:B7:F8:3B:AA
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 01967DC5C39BF10259CEFAA11BA97EBD2A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 19:00:34 +0000
Manifest this update: Mon 28 Apr 2025 19:00:34 +0000
Manifest next update: Tue 29 Apr 2025 19:00:34 +0000
Files and hashes: 1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: RNeJKhpKB823UiFj+QdRvQWMMgCuW9irQmEOiRuJ2p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:c3:9b:f1:02:59:ce:fa:a1:1b:a9:7e:bd:2a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Apr 28 19:00:34 2025 GMT
Not After : Apr 29 19:00:34 2025 GMT
Subject: CN=95c1cad8ac45ccd02324f368b9e5048ab7f83baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:ae:7f:11:44:9b:e2:61:ef:d9:f0:41:6f:
c1:e0:0e:a4:fd:b8:40:07:42:41:ea:fc:2e:1d:5b:
84:18:0b:f0:83:03:4b:d8:7a:ac:98:b7:97:03:39:
f9:19:36:04:0b:cf:bf:78:97:f4:d2:a1:a6:93:b7:
e2:47:dc:5a:8e:3f:88:3b:ae:97:b0:be:41:08:2f:
c9:de:47:72:0a:7f:ee:8f:75:27:fa:a0:c7:08:39:
18:06:0a:a0:3a:36:e1:46:7f:05:61:83:a7:7a:c8:
dc:9f:0b:c0:36:37:ec:88:61:2d:5a:9c:cd:22:18:
eb:19:71:62:17:89:65:77:4f:5f:72:2b:01:02:6b:
dc:e7:83:56:c6:5c:98:54:3b:1f:1c:ca:91:66:15:
37:75:ed:b9:df:ee:68:8b:48:5d:c6:43:b1:28:f1:
57:0b:18:f0:13:1f:0d:bf:28:c4:de:f5:2f:1a:16:
8c:fc:d2:3c:fc:71:45:7b:07:86:22:e5:c8:aa:06:
8d:96:e9:bf:45:2b:22:b4:a3:69:94:3b:82:61:4c:
24:40:58:df:a9:06:3e:27:68:d0:4d:4b:d1:e2:92:
b3:dc:3a:57:de:14:58:a2:7b:3b:0f:96:b4:80:d6:
ec:d3:4d:e0:29:8d:83:49:13:25:08:23:d9:c2:f0:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C1:CA:D8:AC:45:CC:D0:23:24:F3:68:B9:E5:04:8A:B7:F8:3B:AA
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:06:ed:3a:30:fa:be:cb:7c:80:33:30:a8:38:4a:ca:ec:a4:
64:89:99:0e:ea:43:4c:5b:bf:f0:9e:0f:0f:53:b3:a9:8e:97:
5e:c7:85:14:7c:aa:08:25:a9:36:ea:fb:be:5f:a4:82:90:b2:
8b:4a:bb:9f:ba:f3:52:df:c4:84:78:31:5c:54:db:8e:49:b5:
56:9a:06:1d:31:cf:4d:6e:25:f5:32:af:ac:1e:19:a6:07:1d:
9c:48:f9:75:12:f4:2f:82:7b:a7:a5:9a:62:46:4c:fe:ba:00:
cc:26:bb:95:28:15:ff:da:9b:a1:f2:2d:72:63:e7:e1:57:93:
de:9a:1f:90:c5:b1:35:3d:57:d0:62:ca:35:a6:a8:ad:93:94:
e5:4a:23:63:08:60:31:e9:eb:e9:d3:db:ef:aa:60:47:9a:e8:
75:59:c3:14:3b:ab:c8:e9:fb:06:f9:c4:59:6d:37:37:c9:7d:
75:01:af:4d:da:83:44:9c:88:cb:17:9a:95:1c:31:bd:b2:16:
6a:e0:2b:1c:d5:ad:ae:c2:81:40:32:36:d9:d1:f1:b9:ec:6c:
3a:18:12:a9:16:15:92:3a:6f:92:85:df:58:fb:d6:f3:15:62:
d5:c4:27:d7:72:aa:f2:83:f5:58:71:13:db:3d:86:7d:ec:b2:
c1:f6:df:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:44:13 2025 by rpki-client