Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File: wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier: ePeUf6EkEov9peXIdbIbjt0yJqbIZHNwwaIR7J1Hmko=
Subject key identifier: 07:7D:B3:03:9C:7D:FC:E1:0F:CD:F5:97:F1:01:55:51:F3:27:AD:B6
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer: /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial: 0196B47DA2C7A9FFD835131B4B39E1723427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number: 04E8
Signing time: Fri 09 May 2025 10:00:54 +0000
Manifest this update: Fri 09 May 2025 10:00:54 +0000
Manifest next update: Sat 10 May 2025 10:00:54 +0000
Files and hashes: 1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: ACoZpT0pl/5B7BkHFyg6voAGC0qJob5zfH9VdcRLdoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:a2:c7:a9:ff:d8:35:13:1b:4b:39:e1:72:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Validity
Not Before: May 9 10:00:54 2025 GMT
Not After : May 10 10:00:54 2025 GMT
Subject: CN=077db3039c7dfce10fcdf597f1015551f327adb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:f1:f9:4b:ff:9b:e8:60:fc:76:ff:1b:2c:
00:5b:39:f1:01:0a:b3:98:d8:ad:d5:c5:cd:57:5a:
b4:a6:0d:ca:23:b6:6d:96:13:ed:11:53:f7:14:b8:
c1:9f:c7:c2:6c:f2:23:9f:40:f8:97:ce:55:2f:59:
f8:ca:3b:6c:72:7d:5c:e9:8b:24:0e:c5:90:ab:52:
b1:b3:0b:23:9d:93:c7:03:fb:c9:88:4b:45:ec:4e:
3a:ff:a0:8b:61:84:db:a5:e7:2a:1a:4d:d1:32:4e:
34:ee:7a:60:0f:af:c9:24:6a:4e:d4:1f:57:37:9b:
c2:e6:6f:0f:18:35:d1:a9:15:8b:77:17:19:91:63:
21:ea:2c:c6:95:12:a8:81:b8:04:55:1b:57:f6:f0:
9e:7a:0b:0f:2f:7c:4c:8c:7a:46:e5:60:1b:20:01:
4f:b5:fa:e8:f8:8f:33:74:1c:00:d2:8b:03:d7:82:
4e:f1:47:e1:49:b3:ee:41:e0:a9:4b:21:c8:a1:a6:
da:8c:ba:99:3e:f2:65:b3:a8:04:dc:bf:0b:49:be:
af:fd:65:29:46:a3:e1:27:f4:64:1e:11:15:2f:1a:
65:14:e3:bd:2c:7a:46:fe:f4:9d:72:d3:9c:43:94:
52:9f:f9:01:b4:9e:20:3d:e8:56:04:d4:9d:3d:b3:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7D:B3:03:9C:7D:FC:E1:0F:CD:F5:97:F1:01:55:51:F3:27:AD:B6
X509v3 Authority Key Identifier:
keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:98:b8:2a:d4:c1:94:7e:24:21:df:d3:3e:33:36:f1:22:08:
ca:07:a0:cf:bd:d5:c1:12:52:8b:0d:8e:d3:e0:ab:92:c9:01:
73:93:26:4c:c5:9e:d8:7e:ee:96:d9:75:a8:15:d6:ab:4c:09:
93:86:fe:ff:4b:e3:1b:2f:ff:11:9e:5b:bb:6f:28:e7:ba:03:
95:7e:75:10:7b:e7:d1:e2:b5:af:ed:19:2a:7c:09:53:55:3b:
e6:a8:28:7d:a3:43:81:1d:5f:cc:ad:c7:28:a7:73:31:17:f7:
79:0d:d8:02:16:64:98:5f:dd:d9:c3:3e:da:4a:4a:4c:c0:44:
00:f6:8a:86:0d:f1:a7:fe:34:8d:2a:43:03:c7:a3:12:4f:ef:
54:e4:06:32:69:6e:fa:ed:54:e3:74:c6:97:c8:5b:e5:85:08:
e5:78:3a:89:0f:0a:53:50:08:6e:c8:e0:92:37:05:ca:eb:e9:
03:f0:73:00:b1:8b:43:3d:6c:3d:58:c2:08:85:da:5e:49:cc:
26:c9:a0:95:d5:83:00:e8:2e:04:73:c3:4a:e0:c6:93:f3:9a:
86:f9:2d:2c:2c:98:c6:f6:2c:96:be:8f:27:4d:5a:2c:b5:9d:
bf:7b:f9:e2:2c:a0:ca:ad:82:f2:36:9e:69:ed:83:46:5d:f6:
63:7e:92:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:25:20 2025 by rpki-client