Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: QNQb5jKXmMrmavDdQOD3em2aaZKLSbRmShmPE0hW5x4=
Subject key identifier: A2:B8:EA:EC:F2:CE:28:60:0B:9C:C6:18:D7:28:08:2A:00:77:E2:23
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 0196C2DD8B0E2D276ACED0CA41E8E0E4B29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 3C
Signing time: Mon 12 May 2025 05:00:21 +0000
Manifest this update: Mon 12 May 2025 05:00:21 +0000
Manifest next update: Tue 13 May 2025 05:00:21 +0000
Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=)
2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: /O7fWx0B5o+46DrA25MoNo3hNVPJLR7hvX4jjrp3ar8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:8b:0e:2d:27:6a:ce:d0:ca:41:e8:e0:e4:b2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: May 12 05:00:21 2025 GMT
Not After : May 13 05:00:21 2025 GMT
Subject: CN=a2b8eaecf2ce28600b9cc618d728082a0077e223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:7a:03:0e:c0:2c:bb:1a:2a:62:dc:ee:44:
69:c4:e7:df:ca:09:3b:02:70:8f:38:da:e4:46:59:
85:4e:63:75:19:0c:3c:f2:78:e6:10:b3:19:0d:ad:
52:82:0e:ef:01:54:2f:9d:eb:5c:0c:b3:36:e9:d2:
2c:97:69:e4:32:5d:aa:af:eb:b9:84:0a:c5:93:be:
94:a7:a4:4a:68:21:f2:b2:05:a7:68:4a:27:77:94:
5a:d2:9b:b3:fd:2e:66:cd:b0:df:4e:0c:3f:ac:42:
a1:dc:f2:83:e6:20:61:fe:80:e7:f1:4f:09:e0:14:
fe:5e:e7:cc:31:4e:35:7d:71:e8:cb:a6:53:73:ad:
4f:dc:1a:37:51:4c:e1:e4:b7:0b:d8:85:b4:10:4e:
b4:99:25:b3:16:a7:c4:e8:af:ed:d0:62:6d:c8:a6:
08:7c:0c:c4:a5:d9:83:5d:4a:b9:79:2a:e6:c1:cf:
ab:0f:40:7a:4c:51:46:cb:f6:7a:b7:0f:21:d5:49:
66:ad:8d:c3:43:37:a4:0c:1d:0c:93:34:c1:35:04:
68:e4:7e:78:da:b5:12:77:77:a7:c4:d0:2f:05:c9:
00:0c:0c:6b:98:6d:57:44:c2:f5:66:0f:d3:8a:00:
45:c8:f4:f6:80:3a:13:74:82:b9:5f:3f:e1:5f:3d:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:EA:EC:F2:CE:28:60:0B:9C:C6:18:D7:28:08:2A:00:77:E2:23
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c1:3b:7e:ea:23:af:4d:0a:1e:0e:76:c7:ad:7b:b4:2f:5e:
16:d0:16:1a:c2:0d:33:f3:1d:64:78:c3:06:f5:12:d6:bb:27:
17:b7:71:1d:2a:39:88:00:33:dd:90:51:ad:9b:a9:fb:cd:0f:
06:48:55:04:71:87:b8:ba:c9:7e:26:7c:40:b9:60:1f:9b:a6:
e1:bd:33:fc:29:39:de:52:31:5e:9f:a3:f4:4a:20:81:72:63:
a8:fe:49:d8:02:4d:9b:9e:b3:4a:7e:73:d3:42:c4:62:af:d0:
4e:3e:9e:4d:e8:78:81:7e:3a:9b:83:8b:df:64:1c:20:bd:4c:
d3:67:ad:44:33:f9:95:7f:55:85:89:e2:4e:22:34:51:62:1d:
9b:d3:b4:bf:22:7d:13:7a:f5:ba:c0:ce:f4:87:f7:b1:58:d5:
10:eb:9f:df:f3:ba:73:8c:83:96:76:e7:bd:fd:b9:46:0f:71:
dd:7a:3b:71:b1:1f:ca:7c:ee:95:3d:ef:0b:50:b0:00:cd:fd:
1e:fb:b4:0a:81:e2:34:0b:ca:24:79:c7:5a:f5:25:b7:04:b5:
75:0d:d4:92:dc:c4:b9:72:0c:17:27:b9:1c:71:75:d2:af:7c:
f6:54:a4:02:c6:5b:31:3f:82:a4:db:2d:9c:e8:73:a6:34:ff:
fd:28:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:39:00 2025 by rpki-client