Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: 8m4EPAzjFneT4Uz74OBH9QEjNnS/NqLiHVNfPzrV8zk=
Subject key identifier: 7B:54:69:CF:1E:99:29:2F:B5:C4:93:3E:FD:DF:E2:27:DE:BE:3F:80
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 01968691D46384C8E442C946E5D4EF640DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 08C3
Signing time: Wed 30 Apr 2025 12:00:25 +0000
Manifest this update: Wed 30 Apr 2025 12:00:25 +0000
Manifest next update: Thu 01 May 2025 12:00:25 +0000
Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: dZU68yjjvGYQuoE5o7GxFHL64hv2rxZQUkofC0uoE0c=)
2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:d4:63:84:c8:e4:42:c9:46:e5:d4:ef:64:0d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Apr 30 12:00:25 2025 GMT
Not After : May 1 12:00:25 2025 GMT
Subject: CN=7b5469cf1e99292fb5c4933efddfe227debe3f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:bc:4f:c5:9a:cb:7b:65:29:d8:7d:9c:d2:
af:8d:fc:23:78:b8:0f:ac:1f:9b:9f:75:08:76:bf:
8b:4f:c5:43:f9:42:5f:2e:d1:a5:d6:b6:33:be:72:
bb:54:59:ce:e6:85:15:9e:b3:95:87:a7:61:51:3e:
b0:96:81:c0:37:b3:d8:d7:5a:64:c9:ab:8e:dd:15:
1d:34:a6:9f:8b:42:0b:14:f6:4e:3f:93:ea:eb:65:
bf:54:19:3b:38:9d:da:df:cf:ce:d9:84:6b:93:f6:
ca:ef:c0:c7:6f:ca:b5:be:f6:b7:06:a3:bb:cd:31:
cd:5d:85:31:ac:bb:85:6c:e3:59:d9:df:db:e2:c0:
d0:f6:34:7f:00:cb:cb:81:53:66:8e:05:2b:e3:8f:
67:b2:e6:cb:d5:fe:9e:a0:4b:7e:05:0b:f4:62:28:
f7:98:be:c6:cb:a8:06:4f:0a:50:d8:08:fd:90:5a:
1b:67:1b:54:31:a8:7d:ce:59:82:5a:47:37:e5:28:
5a:31:5b:af:35:20:2c:f5:60:8c:32:81:0d:ae:6e:
a3:24:d8:c1:30:31:63:f5:87:14:cf:66:b5:a4:a9:
7b:ad:d1:a3:76:4d:b1:37:1a:a3:69:74:12:50:db:
a1:5e:d0:aa:76:6f:b9:6d:f3:e8:f1:7b:77:fc:e5:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:69:CF:1E:99:29:2F:B5:C4:93:3E:FD:DF:E2:27:DE:BE:3F:80
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:63:b2:de:e3:71:7a:54:07:64:8e:a6:3d:24:3b:75:47:2a:
f0:21:55:d0:3b:1e:2c:01:e1:e0:0f:ba:a8:2e:93:f1:45:a2:
ac:8b:5b:fc:42:b1:54:96:e6:d6:ea:41:2a:31:ca:fe:96:99:
a2:c8:1a:9d:24:49:39:46:f5:19:6d:db:ee:af:71:9e:a4:a8:
9d:b3:b4:d0:1b:e1:6d:b1:6a:b1:dd:d9:93:76:b1:61:6e:9e:
4a:14:95:99:05:bc:d7:69:f1:ac:32:08:73:63:d5:e5:c3:58:
2c:9d:81:7a:40:1b:a7:de:49:da:8a:c0:84:e6:a0:d9:0b:82:
85:11:1e:82:6f:c9:39:a4:8b:27:fc:42:e3:c7:de:5a:6b:fb:
0a:67:b5:f0:42:58:76:de:88:08:87:62:09:25:6c:87:fa:b9:
26:33:13:46:2f:a1:df:69:c3:80:56:e6:35:68:82:90:16:5b:
06:20:cf:4d:0f:12:cf:ac:1b:ff:8b:df:1d:dc:c9:b0:7a:80:
ab:27:d5:d3:a8:58:81:b9:a5:82:4f:10:16:c8:5e:3a:02:47:
8e:b5:12:53:f9:ca:38:a3:26:e5:0e:74:35:ef:0c:28:07:dc:
14:79:d0:37:7d:96:a8:35:ab:8e:c2:da:50:ef:56:5d:0e:49:
e7:d8:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:34:03 2025 by rpki-client