
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier: pgpuGz6/hHC799p1XfSgHILq/qjORwLe559CDEN7bk0=
Subject key identifier: 51:4A:3F:F8:70:3F:C9:A7:11:7C:68:0C:B8:3D:0D:C8:C1:3C:13:32
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial: 01968A37A0B248225D165861A25752DEDF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number: 0191
Signing time: Thu 01 May 2025 05:00:23 +0000
Manifest this update: Thu 01 May 2025 05:00:23 +0000
Manifest next update: Fri 02 May 2025 05:00:23 +0000
Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: SSyUpU39OYfrWjKjj3Q9hfiCxnmz18yPayoNsFjSxbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:a0:b2:48:22:5d:16:58:61:a2:57:52:de:df:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
Validity
Not Before: May 1 05:00:23 2025 GMT
Not After : May 2 05:00:23 2025 GMT
Subject: CN=514a3ff8703fc9a7117c680cb83d0dc8c13c1332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:fb:e5:b4:1b:17:13:88:83:11:78:94:c8:
d3:f3:74:b0:24:5d:d5:89:d5:7e:08:4b:a7:ad:bd:
48:62:9d:f5:3f:4c:c8:33:4d:fb:a6:6c:ea:93:13:
ac:e2:a4:ed:41:ea:75:f1:94:04:b9:e4:11:31:81:
06:08:1d:5d:c0:8a:f6:07:cb:48:e1:a7:ef:37:df:
15:39:c1:da:f0:75:ac:ed:d3:cc:21:cb:28:bd:68:
f4:34:c4:fa:f6:96:e7:4b:a4:5d:70:ab:7d:d8:13:
c7:f1:1a:bb:d5:b1:ef:e6:50:82:6f:64:17:75:b3:
a2:57:66:e0:b8:07:0e:9f:00:d4:b3:06:b6:5e:b2:
ae:bb:b5:56:99:08:c6:04:28:04:4e:58:2b:72:be:
00:a7:61:45:be:c8:1c:cc:9d:3d:b4:5f:47:81:b9:
1f:5a:65:49:24:6b:bd:7d:9a:ad:81:5a:6d:69:7c:
d6:4b:a8:55:6b:8c:06:39:52:62:23:e3:d7:76:16:
27:dd:9c:7d:f3:98:11:6d:c7:3e:38:82:f5:b7:46:
24:f5:cf:0d:e0:f7:60:66:7e:34:a2:5a:fe:cc:d6:
da:20:1e:4e:ad:c0:e2:cd:3d:7a:fa:fc:ac:40:a5:
c7:8c:16:40:58:04:5f:77:a0:76:7c:04:3f:23:b1:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:3F:F8:70:3F:C9:A7:11:7C:68:0C:B8:3D:0D:C8:C1:3C:13:32
X509v3 Authority Key Identifier:
keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8b:3f:de:39:ce:3a:f6:76:da:49:4d:31:20:43:96:cb:32:
98:59:e6:8c:15:2e:d8:0b:2f:4b:61:4e:30:8c:a6:c7:67:0c:
c9:f1:ab:82:c5:86:b6:21:72:fd:bd:b5:25:aa:b3:84:30:c5:
9c:5d:98:34:67:2f:7c:33:f8:39:fc:62:32:24:9f:40:e8:c7:
4a:14:71:dd:15:37:06:4d:e1:0c:0b:15:89:56:84:78:53:ad:
68:ce:c9:59:d9:6f:53:9b:73:8e:4b:3f:bb:8b:bc:5a:49:1d:
a2:42:28:0c:4c:f0:ab:9b:03:98:75:bd:b3:b0:de:cc:fe:ad:
4d:db:06:04:9d:17:38:ab:c8:c7:e7:b8:5a:d9:6f:80:7c:f6:
00:39:db:a7:ae:5c:ad:8e:03:e9:1e:7b:37:1b:ab:aa:e0:19:
75:82:75:20:7d:1f:32:a7:a4:e6:c4:fb:9b:f5:28:5c:99:89:
29:f8:d2:1a:22:0c:e4:bd:ac:0f:45:52:93:e2:b8:cb:5e:ce:
3a:07:95:ea:07:74:16:9b:a0:f1:dc:3b:c1:fe:01:09:c2:9a:
69:e1:ed:8e:a7:65:d5:df:71:f4:b5:a1:15:11:53:4a:31:46:
d6:cf:a3:9a:25:99:ef:a9:8c:14:15:92:10:e4:2c:50:12:cf:
a0:48:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:27:03 2025 by rpki-client