Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: UrAKGm0ZuTw0Xx4WBExoUuxcl4E2+cHZ13ix8yz1LsM=
Subject key identifier: F7:DC:FA:F0:05:9E:8F:D4:F0:DF:60:B4:6A:39:93:E7:66:DA:B8:7D
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 01967A8D881A4A7CF5FED1DBCF61A93702EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 071E
Signing time: Mon 28 Apr 2025 04:00:17 +0000
Manifest this update: Mon 28 Apr 2025 04:00:17 +0000
Manifest next update: Tue 29 Apr 2025 04:00:17 +0000
Files and hashes: 1: Vxpb4qJ9bYXDPXhzI_87rtiLuZ4.roa (hash: ezjzpapAn7m7wLiPO5x/owz6rksCKM1DKAoQ0mrVR+k=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: iexYAjNtXnpDvCEye1c9OjYk/AZGbDHEgwNePbI7gRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:88:1a:4a:7c:f5:fe:d1:db:cf:61:a9:37:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Apr 28 04:00:17 2025 GMT
Not After : Apr 29 04:00:17 2025 GMT
Subject: CN=f7dcfaf0059e8fd4f0df60b46a3993e766dab87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:c0:98:0e:83:cb:b1:ee:47:cc:1c:30:b1:
f2:6b:33:f0:ec:c6:b0:e2:c6:91:1d:9b:52:23:3a:
e8:6f:27:19:a2:17:12:0e:be:03:a8:a3:62:5f:f0:
2c:d4:a1:3d:67:21:64:9d:52:fe:0b:70:9c:d2:df:
65:23:65:ec:83:89:90:a7:66:78:09:ad:cb:68:32:
c2:02:8a:e8:de:72:6f:b3:77:5b:1a:e8:36:ef:4c:
35:41:b4:42:39:2b:24:7f:3d:e1:4e:fa:d6:40:ad:
94:16:95:9f:ce:bb:ab:fa:3d:a9:b1:32:21:da:bf:
0c:ec:48:19:f6:5c:8f:95:41:d8:64:45:86:eb:35:
4d:a9:8b:fc:a2:aa:2e:78:ca:b6:9a:e7:a4:2a:e4:
9e:81:a0:f5:74:97:39:88:a6:1d:84:44:eb:db:21:
10:64:2f:a6:8a:f4:7f:5b:88:ef:65:6b:df:3f:d7:
61:c8:cb:e3:4f:f8:cb:7d:f1:7f:54:e7:13:4d:89:
c7:7d:91:0a:33:4c:01:30:c5:85:83:28:a5:74:61:
e5:1d:53:ed:a9:65:42:4d:84:ce:38:d1:19:88:c1:
c2:2d:f1:f3:1d:f0:60:eb:b0:99:39:90:bf:ec:68:
a8:ba:db:51:c1:06:8c:f9:2b:21:1a:b0:99:53:02:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DC:FA:F0:05:9E:8F:D4:F0:DF:60:B4:6A:39:93:E7:66:DA:B8:7D
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:77:42:0e:17:e9:97:5a:d7:a6:39:8c:09:a0:15:51:79:71:
99:6b:da:8b:d0:91:38:dd:44:ec:3a:30:20:0f:7e:e9:79:e3:
56:88:74:91:0c:f7:05:83:15:18:98:51:06:47:f9:c7:a0:83:
19:db:cb:25:c9:47:8b:21:de:d6:1a:3e:27:89:72:26:fc:3f:
31:de:f4:b8:d0:2d:e3:df:08:7f:72:dd:48:5a:6c:67:86:99:
53:23:6a:8f:11:33:29:a3:21:1d:15:0e:2a:cc:2c:35:29:e4:
28:72:43:55:c8:ac:e0:1f:f7:e4:1a:a3:71:27:8d:64:78:11:
1f:ef:8e:e1:fe:84:d2:73:5a:1d:c6:63:54:78:df:3c:8b:8d:
68:68:18:4b:2b:77:1f:1e:91:6c:63:72:02:37:d0:3a:32:7d:
64:de:80:b2:37:40:14:b0:44:a1:de:92:b3:e0:26:c3:54:8a:
0e:98:2c:5d:3f:55:81:30:32:fd:08:e0:3e:aa:e1:72:c7:ef:
89:06:04:a0:f7:1a:3f:64:55:bc:18:18:78:1f:c1:a0:f2:3c:
ea:48:9d:b2:8a:17:58:6e:ee:cf:f8:5d:fe:b2:7c:23:d2:de:
77:1b:2b:e1:b6:37:69:11:2b:ec:22:25:85:6a:5e:bf:1e:19:
58:3a:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:55 2025 by rpki-client