Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: X3qOhW8K2xyoYAjyCoG7umxEdr2MnqStdmM10zYrUxA=
Subject key identifier: C0:C6:6C:FE:1F:FD:C9:72:37:2D:47:43:31:0A:71:67:4A:E3:DF:48
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 0196AA307D89735B1C4E89B0492CF1E422DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 1443
Signing time: Wed 07 May 2025 10:00:26 +0000
Manifest this update: Wed 07 May 2025 10:00:26 +0000
Manifest next update: Thu 08 May 2025 10:00:26 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: nKzll5itf/zssEKutsvhkDgx+EJ/syETKrBgQjnbFfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:7d:89:73:5b:1c:4e:89:b0:49:2c:f1:e4:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: May 7 10:00:26 2025 GMT
Not After : May 8 10:00:26 2025 GMT
Subject: CN=c0c66cfe1ffdc972372d4743310a71674ae3df48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:1b:1e:1d:60:cf:f8:3f:c1:d3:74:0f:ef:
5f:30:d5:df:11:82:91:ad:f4:72:6d:d1:e0:1a:13:
5e:ff:2a:cf:b7:4b:f1:8e:ab:ae:f5:84:56:c0:51:
26:59:ab:1e:29:56:1c:73:92:f6:a3:b1:52:e6:1d:
6f:e0:f8:19:f0:55:d3:61:ca:72:de:06:59:c0:4e:
19:9b:46:89:06:08:44:99:b3:25:9b:d0:40:f2:e7:
1b:2b:35:be:5b:7d:e5:87:36:e5:e7:93:e0:85:d3:
94:6d:3b:35:73:4c:4d:ac:a4:be:e0:41:55:af:b3:
8c:cc:de:ea:d5:de:21:70:a2:94:76:e5:cc:d8:b5:
03:7a:d7:bb:24:82:26:d3:54:96:d0:09:13:6f:01:
3c:af:c2:3c:07:c6:d6:8d:f5:90:8a:aa:46:cd:dd:
7c:80:32:73:8a:af:ac:c5:00:f6:d8:89:b5:99:3c:
da:8a:c7:33:a8:b8:0d:b6:5d:e1:d5:88:81:7d:08:
78:6b:1a:a0:b7:4c:cb:b3:3c:56:73:48:29:66:17:
fc:74:4d:d7:57:c0:fc:f0:40:cf:ea:34:18:61:d6:
e8:84:80:d9:7b:9c:75:b3:f3:e6:cd:6a:c1:0c:c6:
c3:30:69:8d:19:e1:ac:22:4e:d7:a8:f3:54:4c:1b:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:6C:FE:1F:FD:C9:72:37:2D:47:43:31:0A:71:67:4A:E3:DF:48
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:52:d6:5f:0c:9a:0d:de:a2:8e:a8:b6:ba:35:3c:a5:cd:
e4:34:a5:18:b3:bb:35:12:42:80:8e:ab:49:e1:d4:52:d6:6a:
16:a0:22:0e:7b:81:c7:59:07:07:6e:96:fa:77:cd:bb:4c:fb:
dc:f6:36:4e:d8:05:bf:e4:32:c3:ba:69:5a:af:f6:a3:23:7e:
fd:cf:65:47:5e:99:a3:95:0c:c1:4d:a6:1a:c3:3e:25:ad:38:
6a:d0:54:62:5e:ac:01:10:25:47:3f:e1:c9:87:84:6a:41:23:
3b:63:0e:dd:ff:4e:bc:17:ad:be:6d:8a:a9:7a:62:66:10:d8:
77:35:69:f1:58:49:80:55:39:dd:cb:85:f5:65:67:00:e0:35:
03:d9:a9:1d:84:8a:b8:e5:f2:5a:fa:f5:69:c2:af:0b:62:53:
26:cd:6b:de:af:8c:3a:3b:c2:c3:50:88:d3:2b:d8:cc:c9:a7:
fc:18:1a:6e:31:87:9b:4d:ee:50:10:2e:c5:bd:2a:6c:68:69:
06:ef:e9:46:7d:db:7e:60:23:de:51:21:f1:65:37:b3:74:f7:
83:30:22:54:01:44:01:0c:f8:35:4a:3d:d6:df:db:ea:28:0a:
c9:c4:9b:9a:cb:4e:a1:a5:a8:fd:bb:17:99:6d:0d:7c:40:87:
1c:29:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:14:59 2025 by rpki-client