Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: vn6fY4KzUatu6zOCGlWTAMuDxqvAZKDW0HxNpFiifyU=
Subject key identifier: 75:F5:86:C5:50:5C:66:79:E8:2B:BA:A9:8C:9A:8D:88:A0:8C:DD:50
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 0196C238DB3F9FB1A2401AC76103DB08EA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 1296
Signing time: Mon 12 May 2025 02:00:28 +0000
Manifest this update: Mon 12 May 2025 02:00:28 +0000
Manifest next update: Tue 13 May 2025 02:00:28 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: MbUKoxcF17E43L0N3AYVxzgEXWsvdI8TjOXCdnoY10Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:db:3f:9f:b1:a2:40:1a:c7:61:03:db:08:ea:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: May 12 02:00:28 2025 GMT
Not After : May 13 02:00:28 2025 GMT
Subject: CN=75f586c5505c6679e82bbaa98c9a8d88a08cdd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:23:e5:1a:23:93:f2:29:16:40:90:5a:13:
2c:e0:1c:58:5b:44:da:7f:0c:50:e5:61:8b:2d:23:
81:c9:0f:73:9d:29:bf:48:21:1d:51:20:20:74:85:
32:62:4f:e0:1c:c1:a2:e4:30:25:43:bd:aa:c8:a1:
e5:bf:3c:68:ff:d8:b8:f3:0d:62:7b:9a:9d:32:81:
83:b0:b9:d5:95:0b:d3:62:50:b3:6c:60:fb:36:3a:
6e:03:72:56:8d:7d:df:30:20:59:23:22:35:c0:17:
e3:e8:cc:a4:7f:96:76:2d:ec:61:fc:47:c4:e9:98:
37:39:71:cc:b8:2d:88:e7:68:1c:c3:05:96:4e:34:
ee:45:bf:72:68:d2:f4:b8:da:6d:8f:94:9d:89:d1:
93:7f:94:d0:2c:f0:81:8d:00:ed:4e:8c:75:21:3c:
bd:c3:9d:af:17:a0:13:74:1a:c6:88:eb:45:9f:de:
25:15:30:7f:5e:a8:d1:39:76:24:27:8e:98:35:7e:
c1:b4:d9:ee:05:66:aa:97:ea:8f:55:ae:fe:4f:b9:
37:a4:59:1e:5a:5a:36:26:e4:f7:15:2d:0d:0b:96:
03:4b:09:ff:8c:93:9f:6a:cf:e1:56:ad:4d:f3:69:
01:71:1c:6a:0b:e1:07:02:4b:c1:9d:41:98:b3:8b:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:86:C5:50:5C:66:79:E8:2B:BA:A9:8C:9A:8D:88:A0:8C:DD:50
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:f9:09:5e:2a:3a:c8:b1:05:d5:5c:89:05:4a:19:be:3e:
74:a9:10:a9:1d:df:db:ff:14:48:98:f3:5f:51:94:21:1c:ff:
ff:95:5f:7d:9c:f9:8c:50:4f:84:67:2a:6d:79:5b:6b:d4:6a:
3f:88:f5:a1:94:6c:e7:28:7b:45:4d:cb:37:2e:31:06:f1:72:
25:b2:23:27:f7:98:15:32:8b:63:1b:c2:a2:68:86:cb:40:df:
8d:4b:23:3a:f6:8c:bf:de:80:da:a8:1a:81:de:bc:82:09:e6:
ea:b6:3d:d8:06:9b:db:88:9a:d7:87:d3:fa:74:2f:17:56:34:
5b:0c:09:78:61:00:0c:ab:34:ca:8d:16:c5:bd:85:50:ad:b7:
b1:04:d7:a9:f2:37:5b:d5:96:c4:2d:85:81:fc:fc:92:7e:2a:
b1:e7:f9:d1:e4:7a:14:ac:5c:cd:61:21:32:97:13:5f:98:bd:
a6:23:c2:bf:5b:49:b6:17:3e:fd:e6:16:88:d4:36:82:56:f9:
6b:e2:77:bf:e8:7a:d0:cc:3b:ef:25:75:90:14:cc:49:d2:ec:
38:97:38:fd:f8:78:56:06:11:ad:04:f7:64:7e:cd:b6:0a:33:
2d:e7:9e:7a:6f:a7:02:b6:cf:06:e4:4b:06:ca:4e:51:9a:9f:
3e:b6:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:45 2025 by rpki-client