Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier: nSubgyL6u4nn0YlCYgPkzLJczVRt5cHVG8ktgJrEVag=
Subject key identifier: EE:C6:E1:40:40:2C:38:BE:4C:E1:54:D5:B3:3C:D7:98:6A:90:59:3A
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 01967F460411F5061B77E31B3B6003798791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number: 0305
Signing time: Tue 29 Apr 2025 02:00:17 +0000
Manifest this update: Tue 29 Apr 2025 02:00:17 +0000
Manifest next update: Wed 30 Apr 2025 02:00:17 +0000
Files and hashes: 1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: LsjlaFWEPdFqh+GhUislThDSrLRBsO1+4hMiBbGWGKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:04:11:f5:06:1b:77:e3:1b:3b:60:03:79:87:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Apr 29 02:00:17 2025 GMT
Not After : Apr 30 02:00:17 2025 GMT
Subject: CN=eec6e140402c38be4ce154d5b33cd7986a90593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:27:8b:4c:bd:8c:76:46:cc:89:70:9c:53:
24:c6:a6:a9:e0:97:06:df:ca:fa:73:aa:33:3b:2b:
7b:3f:f2:e1:05:e2:55:06:ca:df:0c:f6:7a:e2:e6:
be:05:be:0e:4f:c4:62:c8:63:a3:5c:bd:7e:3a:87:
c4:e9:34:bb:d3:79:fd:f7:28:46:77:e8:c3:93:c4:
7d:cb:20:6b:89:6c:de:82:75:70:5c:5e:7f:37:19:
d9:2e:4c:a9:9d:39:05:15:20:2c:eb:5b:ca:02:a3:
1a:19:62:c1:c9:27:32:54:18:bd:82:b7:69:6d:95:
62:b6:37:01:05:22:ee:71:a8:5e:47:63:70:d6:7f:
0a:e5:6d:fe:f7:06:5c:56:5f:6e:01:40:e6:ac:e4:
f3:2f:55:28:c4:16:ec:4d:a8:88:59:54:09:ce:71:
74:c1:c2:12:32:2e:96:65:28:1f:38:4c:59:2f:4f:
9c:0e:69:2f:e6:18:51:15:cb:9b:c4:37:c6:ac:2e:
3f:cf:f0:10:3b:19:3b:83:43:9e:fe:a4:4f:b1:02:
60:5a:00:19:93:11:c5:22:70:e1:55:b8:5a:92:6b:
e7:60:a9:fc:9e:87:0b:b3:7f:a9:ea:e3:d3:a9:3e:
06:37:2f:08:54:38:85:18:1f:50:10:14:ae:1d:16:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C6:E1:40:40:2C:38:BE:4C:E1:54:D5:B3:3C:D7:98:6A:90:59:3A
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1c:4d:44:d4:2c:4b:5a:42:c0:6c:71:8c:5b:8d:ab:00:c0:
05:fc:e3:26:a0:b1:75:81:b7:69:c6:88:4a:30:b7:4d:c7:ee:
a7:bc:d3:09:52:58:28:e9:57:20:a3:75:e2:c9:88:2f:cb:9d:
96:0e:02:72:e5:1e:b0:de:82:87:6b:8f:c6:fd:f3:32:89:19:
c8:c5:dd:42:7e:47:49:e3:95:4d:d9:19:a5:83:1b:08:b1:16:
a2:3e:b9:f9:5b:45:56:b4:df:7d:4e:2d:02:3b:09:78:1f:ab:
03:94:57:4c:1c:ce:e4:72:d3:fe:a8:69:ef:f6:0b:9d:6b:bb:
9b:95:36:35:c7:5f:42:47:8f:48:05:15:1d:fc:54:ad:f8:5f:
1d:22:6c:ef:12:1c:5f:dc:d4:08:23:63:5e:c4:3b:a0:42:fb:
4b:af:7c:4a:0e:8d:de:ae:35:0a:c4:23:d8:3f:d5:ee:4f:8d:
48:90:84:b1:fc:c1:e9:14:33:5d:d3:ad:6c:87:5a:1e:09:c6:
4d:cd:ba:b0:56:4e:2b:7c:80:d5:38:5f:89:f1:0c:55:c4:25:
12:43:82:ad:66:97:e9:fa:5c:23:e4:63:66:d4:d6:05:2f:fd:
32:a7:b9:e7:25:67:21:9a:51:b9:60:3e:b8:75:77:97:68:b3:
e4:c1:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:05 2025 by rpki-client