Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: VQfbckMPtK0whmMeNFqMExhGEFN8bxpA5GitFbQKhZY=
Subject key identifier: 0B:06:54:07:2A:04:ED:50:FE:6E:B7:CB:CD:04:B6:56:04:48:FA:ED
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 01969FAD28E08D874D1AF31278F63A27BDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 152D
Signing time: Mon 05 May 2025 09:00:47 +0000
Manifest this update: Mon 05 May 2025 09:00:47 +0000
Manifest next update: Tue 06 May 2025 09:00:47 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: z96h468jnMtaOPbshGA1T7U3ZaScsfYLLvAMPEYWXT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:28:e0:8d:87:4d:1a:f3:12:78:f6:3a:27:bd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: May 5 09:00:47 2025 GMT
Not After : May 6 09:00:47 2025 GMT
Subject: CN=0b0654072a04ed50fe6eb7cbcd04b6560448faed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:83:eb:88:dc:79:85:6c:0b:16:11:1f:c9:
14:d4:f0:02:9e:44:bf:9a:e8:89:0b:4e:9f:1c:11:
73:c6:1f:77:e4:0b:99:17:1d:4a:42:81:dd:66:55:
62:bc:15:55:3d:f3:c4:e6:5c:da:09:02:6c:b8:76:
9d:a9:10:19:bb:de:66:75:3e:bd:70:63:4a:07:63:
42:49:55:c8:19:dc:46:c6:b0:7e:01:60:43:c2:f1:
44:b7:fc:1c:6a:6a:d7:98:60:0a:45:3b:4f:20:1e:
68:5c:01:c0:76:a9:b0:61:42:79:97:38:8c:d3:ad:
af:ca:ad:60:5f:c4:bc:75:aa:d1:b9:15:1c:eb:ce:
51:16:50:f6:78:97:67:9d:d8:b2:d3:1f:41:5d:6f:
47:36:8c:cb:1e:83:d9:b4:68:28:4c:e4:ff:cc:b4:
33:98:6a:5c:32:e1:43:51:20:fe:f9:ad:95:00:ba:
f1:77:28:14:3e:91:8f:a2:3a:6d:aa:6b:4f:bc:38:
4e:2c:7a:80:1f:37:5a:a8:0f:dc:11:34:7e:64:22:
23:80:21:f7:2c:04:8c:f8:e0:5c:91:4e:f6:d3:a8:
ea:0d:7c:67:9d:9f:e7:61:b0:fc:49:96:dc:87:d5:
0d:a2:61:50:1b:76:39:0f:26:a2:3e:12:74:47:79:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:54:07:2A:04:ED:50:FE:6E:B7:CB:CD:04:B6:56:04:48:FA:ED
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:75:1f:fd:e8:26:32:6d:86:ed:08:12:a2:66:a9:19:af:
14:f3:99:a1:db:08:39:35:70:15:c7:86:5e:c9:ad:11:4b:91:
c9:f8:0d:b4:4c:3c:67:18:35:66:25:ef:0c:ac:62:28:6d:97:
81:64:4f:28:08:37:13:7a:42:ff:8e:e5:8f:bd:26:85:1c:65:
34:c4:24:db:1a:5c:2e:c4:ad:31:7d:52:d5:7a:20:87:08:d4:
ee:67:ea:12:85:f2:1f:7b:6d:48:4f:b2:7e:b5:f9:6f:9c:83:
28:5e:ac:d7:49:82:9d:50:05:61:47:c7:ad:e8:9b:f8:91:81:
f7:27:87:16:53:67:cf:dd:17:1f:e8:53:07:5e:a9:72:76:91:
2b:9f:c0:d8:6f:44:41:bf:bb:b7:ca:c8:8e:8f:ee:34:08:72:
d5:81:cd:d6:98:d0:38:df:e7:69:14:63:df:06:24:f3:ca:4f:
f3:bf:60:9b:26:99:a7:78:84:0f:e1:0d:07:f8:60:65:e7:72:
42:48:18:bb:c7:47:d6:2b:b8:fa:d3:84:af:28:34:85:59:e7:
f5:56:ed:56:cf:68:2c:a9:3b:9e:75:e6:1e:53:07:3b:4c:58:
7f:f8:00:3b:16:b6:3a:f0:0e:3e:2f:0f:f9:8c:07:5d:63:ec:
95:1a:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:55:02 2025 by rpki-client