Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: XxhVqxYz3cJMPuB3nF7OU0y3QtmQviL9fwZ7TxQCf2M=
Subject key identifier: DC:71:71:16:88:43:40:83:95:4C:C2:6B:BD:E0:B5:2D:42:62:97:AD
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 01969D510491E98CAAFD66AFFFE18336A067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 1011
Signing time: Sun 04 May 2025 22:00:54 +0000
Manifest this update: Sun 04 May 2025 22:00:54 +0000
Manifest next update: Mon 05 May 2025 22:00:54 +0000
Files and hashes: 1: Ex-cB_4h1wPjXU2C6qgnvAowG6s.roa (hash: Pfofg8M1L5a51wZ24aPVDYrdbmmkhLSc6VaiAue9C68=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: 0FHBbK0FPn8OEBo4gt7uAvqjb5DBwqMiwlK6nczmHV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:04:91:e9:8c:aa:fd:66:af:ff:e1:83:36:a0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: May 4 22:00:54 2025 GMT
Not After : May 5 22:00:54 2025 GMT
Subject: CN=dc71711688434083954cc26bbde0b52d426297ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:a3:3a:4c:7f:df:36:88:da:32:df:2f:ab:
ab:bf:d8:51:81:16:4a:68:96:98:dc:93:64:4e:c3:
b8:30:91:ac:63:33:62:b9:ae:7f:09:c0:79:19:40:
9a:e1:59:a7:6d:41:06:44:ed:31:f6:86:a7:74:db:
02:ab:31:b8:17:93:d8:3b:04:d8:e6:6f:a0:34:6d:
95:76:ce:93:9c:9f:6c:89:17:08:96:5a:c6:0d:09:
a2:42:55:87:10:5e:81:79:06:ce:0c:ac:29:4d:04:
d0:68:b9:84:63:cb:ee:48:59:6c:5f:73:1d:2a:88:
15:47:56:a9:ed:ce:2a:ea:85:94:68:09:7a:2b:6b:
42:63:8b:7b:d1:54:d9:52:5a:ae:fa:c5:58:44:98:
a8:d0:43:b2:01:1d:7f:b0:f3:c0:79:0e:0e:3c:cc:
5d:de:e8:ed:56:a3:97:8b:1f:67:3b:fa:56:28:78:
06:a4:0c:b3:a8:a2:32:a4:b2:7b:86:3b:f7:1f:20:
85:02:ed:08:2d:7b:53:28:50:76:a1:7d:cf:34:bd:
92:29:56:5b:43:d6:21:0a:90:ea:ed:48:0a:b9:a4:
63:4b:5a:05:c4:ff:8b:ed:64:b9:5a:22:94:dc:f2:
cf:7d:f2:d6:64:6f:1b:6a:98:d4:1d:ac:f2:af:f5:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:71:71:16:88:43:40:83:95:4C:C2:6B:BD:E0:B5:2D:42:62:97:AD
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:68:72:56:bf:a2:bc:d9:47:ca:0c:a1:e5:8b:15:97:fe:c8:
e0:1d:01:98:2a:d3:6e:6f:af:95:fe:c2:ef:d2:18:82:92:42:
24:40:ff:53:60:6f:cc:87:bc:53:47:7e:29:74:c1:2e:04:d0:
2e:b9:1e:92:9d:74:af:a1:5f:7a:8b:e1:6b:9d:34:41:72:e2:
7d:75:a5:3d:cd:20:77:0a:9b:77:d5:de:e7:1c:cc:65:d0:a3:
93:df:fd:df:f4:55:45:40:82:69:b6:91:30:96:fd:aa:12:a4:
34:dd:80:37:c4:9e:21:0e:ee:ae:ff:a3:6f:84:55:86:46:53:
73:00:ee:50:44:17:5b:57:5e:19:72:c9:50:68:e9:15:b8:7e:
f7:cf:27:cd:0d:86:38:5f:de:54:57:5e:a0:3b:43:4c:8b:66:
7e:bb:d1:89:e3:55:83:e5:3a:e4:3a:e0:d5:ba:66:5f:f5:a4:
f7:bb:1e:ba:20:60:e4:08:cf:05:f4:5b:47:cd:1e:20:47:b4:
56:c7:9e:00:f4:75:df:aa:99:94:f5:39:7a:ef:9f:08:2c:56:
b5:68:7e:90:6c:07:34:9e:84:d0:12:2f:c9:e5:07:48:ee:62:
f4:46:97:47:97:4a:0b:1f:be:eb:03:0f:35:e0:40:29:87:2c:
e4:c6:6d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:28:48 2025 by rpki-client