Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: B6LjQxyo7sjUxDuDyaihevaJ/qVoaX9J4oPVlgOy+tc=
Subject key identifier: 54:60:F1:99:FA:7C:08:CE:96:37:29:B5:07:04:E1:52:BD:8D:73:BF
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 01968ADCAE4F463DF28EEC5887C28F974651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 0300
Signing time: Thu 01 May 2025 08:00:40 +0000
Manifest this update: Thu 01 May 2025 08:00:40 +0000
Manifest next update: Fri 02 May 2025 08:00:40 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: wW42I9ItSa2BMa1kdbLxT4QPXdTVOuhYwT5LQJm7y3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:ae:4f:46:3d:f2:8e:ec:58:87:c2:8f:97:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: May 1 08:00:40 2025 GMT
Not After : May 2 08:00:40 2025 GMT
Subject: CN=5460f199fa7c08ce963729b50704e152bd8d73bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:67:1d:47:be:5e:a1:fa:4a:c8:de:dd:65:
5c:b2:1a:54:fb:fb:2c:ab:6e:1a:58:2e:18:d2:13:
41:c8:90:66:97:ed:c0:4f:bf:1c:f6:0d:1c:59:6d:
5e:9e:cb:ec:06:6b:1d:6b:ea:9e:50:46:03:f2:b0:
25:fe:3e:5d:d8:61:5a:8f:da:68:85:4b:e4:51:13:
ed:ba:36:a9:b6:d0:be:9c:44:d4:72:80:47:70:34:
30:10:68:5a:78:65:04:1c:c5:47:c5:08:cc:21:8b:
49:c2:0f:1f:f3:95:c9:1d:95:03:cf:e0:07:d7:d9:
4f:c1:ae:00:07:35:80:cb:3a:8d:6c:d2:00:cc:c4:
7e:e6:6f:9d:e1:58:28:7f:a2:8b:23:f2:54:51:94:
da:68:5d:df:0d:ed:23:b1:09:1c:f4:96:46:41:d3:
2a:a4:19:17:3b:64:b0:02:7a:7c:22:1a:93:39:14:
cf:4d:40:a7:ff:e6:8c:0d:f5:6b:ed:5c:b7:95:dd:
e8:6b:5b:31:53:86:22:fc:55:6f:cd:ea:b6:0b:83:
f4:ec:8f:ff:96:bc:73:f8:0e:36:4f:ef:b3:e3:fa:
0e:5b:80:3f:21:3f:8d:92:a4:3a:5c:8f:74:34:8d:
14:ed:5a:b9:1e:d6:21:fd:9e:12:21:82:9c:7e:b5:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:F1:99:FA:7C:08:CE:96:37:29:B5:07:04:E1:52:BD:8D:73:BF
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8a:dc:bd:18:c5:a5:9c:5e:a1:4c:df:09:50:dc:65:23:11:
38:ba:26:bd:e4:89:d8:11:bd:71:10:fc:72:19:96:30:68:dd:
61:68:c5:db:39:8e:66:27:c9:af:20:8e:a5:0f:89:a4:79:ef:
2a:b8:7d:57:6b:be:f3:2c:8f:c9:4b:2e:4f:90:f0:3a:8c:25:
4f:bf:89:6c:75:95:0f:22:ab:16:46:49:37:ff:7c:a0:6c:52:
ee:9e:ba:f6:ad:10:7d:9b:bc:5e:cf:71:4f:56:5e:cd:46:3d:
8b:44:8e:f3:c2:fa:d5:6b:71:48:16:13:b9:ad:3b:ff:d3:cd:
ee:69:b2:e3:cb:a6:70:9f:28:ed:74:71:53:67:7b:ef:17:c3:
6e:cc:c0:0d:b9:af:c8:09:31:88:1d:e5:9d:95:c2:b8:12:e7:
a3:d7:97:14:24:d4:98:bd:41:aa:9f:c7:f9:56:51:6d:32:00:
7c:41:e3:f3:2e:4c:5f:24:45:65:f2:9a:15:3e:27:05:0a:d2:
07:e0:a5:2d:70:bd:0d:09:72:6c:7d:81:2a:ae:39:74:8f:13:
5e:e8:1a:41:f5:19:0e:4e:0a:e2:b7:57:b9:f3:13:47:84:41:
b2:ea:13:9c:0a:69:ca:0b:72:d3:11:99:65:12:46:f5:f1:02:
6e:5e:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:18:18 2025 by rpki-client