Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: EL8SyyRHRjOWpvEOuSe2jBsw5TfcH620X8TltzIQHRc=
Subject key identifier: B6:FA:FB:A1:0A:35:FC:D2:F8:48:C8:3F:11:1D:DB:92:37:0E:1F:18
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 0196BE5C62EC3DB1A3BE935383F3DFB3EFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 1157
Signing time: Sun 11 May 2025 08:00:47 +0000
Manifest this update: Sun 11 May 2025 08:00:47 +0000
Manifest next update: Mon 12 May 2025 08:00:47 +0000
Files and hashes: 1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: 1869rVlLif1vpnWpRapNob5WFy7xVuTITPO7lsxZVms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:62:ec:3d:b1:a3:be:93:53:83:f3:df:b3:ef:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: May 11 08:00:47 2025 GMT
Not After : May 12 08:00:47 2025 GMT
Subject: CN=b6fafba10a35fcd2f848c83f111ddb92370e1f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:2d:7a:16:50:0d:e2:0c:6c:34:93:2e:2b:
ec:cf:53:ab:2d:fb:a4:90:a8:fa:df:24:5b:db:83:
8b:fd:ed:28:5d:8a:0f:a6:79:47:7d:25:b7:6e:e3:
55:b2:74:7e:ac:d3:82:00:dd:78:5d:be:f7:ef:32:
a3:27:bb:be:28:bc:c3:c4:a3:a7:1e:17:ea:18:75:
71:41:fd:1e:cb:58:c5:5b:f7:4c:38:81:f0:f7:e9:
95:b8:46:03:26:bd:3b:ce:01:d9:73:c0:08:21:1b:
cc:d0:0e:6d:b3:30:70:9e:d8:b8:d6:7b:37:ad:d8:
c9:73:cb:c5:f8:c9:6f:c5:ab:23:ca:39:07:de:95:
4c:85:0d:c8:f1:a6:e4:59:39:8b:b3:d9:11:29:f5:
1f:01:11:a4:f5:bd:17:94:cc:29:97:fb:bd:14:d7:
43:cb:f4:56:71:a7:96:4e:e8:7e:a6:bf:f7:19:2c:
4d:59:76:d2:c1:68:11:a7:18:c0:7c:58:40:18:68:
d0:14:5a:51:1d:c1:a9:43:b5:c8:5a:b9:7c:b9:f4:
ef:c5:f0:94:dd:db:db:05:e6:33:5e:f3:78:cb:99:
4c:be:6d:b8:4e:97:1c:52:1d:e8:6c:8b:56:4d:59:
e1:63:b5:bc:dd:7d:66:06:34:de:8e:4d:fe:a9:a9:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:FB:A1:0A:35:FC:D2:F8:48:C8:3F:11:1D:DB:92:37:0E:1F:18
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2c:8a:ae:dc:41:ce:09:00:ad:04:82:e7:07:c8:c2:66:47:
b6:cb:04:bd:7d:9d:c9:95:72:85:97:24:3e:32:83:87:a6:8e:
1d:b6:85:4a:f9:f0:2f:41:0b:6b:d8:dc:24:48:7e:a6:5a:f9:
27:a9:87:07:85:aa:b0:d8:49:6c:59:50:ec:de:30:4b:53:c5:
9e:ad:e7:de:4c:cf:9b:55:0d:67:0c:ae:75:e5:04:f0:56:15:
ab:e1:b8:07:08:7d:5f:93:aa:27:ba:81:e3:49:02:4c:3b:6f:
66:67:c0:48:5f:9d:8d:01:b5:e8:36:ac:90:d1:2a:96:9b:b0:
60:c7:24:1a:1a:56:8d:0e:8c:32:4e:a2:3a:15:4f:c7:5f:99:
c0:24:6e:ea:6c:3e:24:4d:9f:db:a3:67:aa:f5:c2:24:6a:a6:
ff:f0:80:d6:cc:2d:d1:3d:69:0d:cf:63:10:39:52:67:5f:11:
78:34:48:6c:54:bc:c1:b3:5d:7f:fa:67:07:9c:2b:62:47:e0:
34:df:6a:de:18:15:14:75:c1:5d:76:4b:f4:7d:12:c8:67:c2:
e9:29:c7:d1:29:52:68:9b:c5:61:7e:6d:47:b8:35:80:bf:b6:
ab:cb:6f:0e:94:1b:84:dd:9f:86:18:b3:9f:39:b5:99:cf:6c:
4e:5f:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:38:36 2025 by rpki-client