Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: rPyV8xRlEkA12SEYnreen+h30fU/DAordJO/yi/xprk=
Subject key identifier: 68:D5:FD:DC:D9:12:1F:B4:1A:A1:98:30:E1:C9:28:94:7D:BA:88:E5
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0196A98C0B55792A12EEEC8FFC8AB0341B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 012C
Signing time: Wed 07 May 2025 07:00:49 +0000
Manifest this update: Wed 07 May 2025 07:00:49 +0000
Manifest next update: Thu 08 May 2025 07:00:49 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: JMv/VE8DuG2J1W8pKk53/caXomxQFgb6q0EjWQEHl50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:0b:55:79:2a:12:ee:ec:8f:fc:8a:b0:34:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: May 7 07:00:49 2025 GMT
Not After : May 8 07:00:49 2025 GMT
Subject: CN=68d5fddcd9121fb41aa19830e1c928947dba88e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:c4:74:02:57:57:36:79:b5:2c:8a:07:a0:
cf:78:ea:e5:65:76:a1:b9:2c:b1:ce:9c:b3:fc:65:
f7:0e:de:a4:12:a2:ee:8c:ba:46:44:ae:94:3f:25:
30:2a:96:64:2e:77:ef:42:47:f1:7e:f7:38:4d:71:
5f:0c:fe:78:b1:05:96:25:80:5f:05:18:65:61:1b:
19:71:fb:a2:d5:d4:90:6d:f7:49:23:43:da:0a:20:
4c:a1:0a:ba:35:e6:66:b3:fe:af:12:96:bb:98:60:
95:dd:d0:ab:72:b5:eb:24:17:d7:5f:39:17:00:7c:
fa:7b:73:aa:fd:09:fb:71:0a:c4:8f:5b:40:a2:27:
d8:c9:1f:ba:0e:28:57:6b:f1:1a:a4:8c:19:6c:0c:
72:ad:0b:7c:8f:78:0b:da:4c:7a:cb:c9:66:7d:d1:
5b:cc:5d:b2:1b:70:25:6a:e7:cb:f5:7a:80:b4:71:
6d:46:26:30:0f:78:b1:4b:d6:9f:f1:67:79:4f:8c:
c7:0b:7a:9f:2c:49:d7:5a:15:9e:80:3f:05:f6:ca:
ef:f8:d0:29:3c:35:1d:15:b7:d8:2c:6e:fa:ea:7b:
4c:cb:bb:08:f5:8c:3e:79:22:86:ba:0a:4a:85:aa:
51:27:2c:fa:b3:57:51:ce:1b:fb:0c:d0:14:5c:b5:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:FD:DC:D9:12:1F:B4:1A:A1:98:30:E1:C9:28:94:7D:BA:88:E5
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:40:b3:ed:4a:59:c3:3d:3d:b3:6d:27:92:a9:09:c9:e4:17:
d0:3c:cd:5a:68:29:8d:40:df:cc:04:74:50:d1:7b:62:da:18:
33:57:43:49:af:2a:0e:4c:d7:bc:19:f7:81:86:b0:44:bb:02:
3b:0e:8e:7c:7b:c6:e3:a8:ca:7b:63:62:2d:fe:1e:b1:98:1f:
56:95:ef:20:97:f6:a4:f6:c8:ad:12:6c:4a:61:5c:71:87:72:
c4:0e:aa:8e:31:29:8b:1c:3c:13:2c:8b:2d:59:18:1f:dc:43:
8b:30:b1:73:e1:15:1d:b4:f5:d2:41:4f:57:9c:52:e7:fe:10:
70:dd:c7:b8:81:c9:1a:34:19:70:85:03:69:e3:40:cb:15:39:
82:35:a9:49:b2:54:54:c2:c0:66:90:81:0e:fd:60:15:88:60:
9d:21:ca:e8:a9:07:40:ff:31:15:36:00:57:1b:41:ad:b3:82:
0e:67:f3:62:7d:21:36:14:1e:ec:21:e9:60:da:5a:69:47:26:
55:35:41:5b:24:24:be:c9:5f:e8:29:04:b8:cd:a4:9f:f1:a8:
d9:31:9d:4b:51:3e:9c:1e:46:bb:e6:70:90:d3:1f:00:48:40:
26:f5:26:40:6d:cd:e9:23:e9:bf:f5:b0:39:ea:44:bc:60:8e:
99:de:76:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:21:27 2025 by rpki-client