Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: 2wHAfHiloXRwR4DM8C5Rlm1Gf2WhSi/FWsSRk9Hct6Q=
Subject key identifier: 6C:EC:94:62:58:EF:83:20:5B:37:69:A2:CE:48:C7:50:E1:19:87:4D
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0196B77E5108BECB9FD7935265AED70E777A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 1540
Signing time: Sat 10 May 2025 00:00:30 +0000
Manifest this update: Sat 10 May 2025 00:00:30 +0000
Manifest next update: Sun 11 May 2025 00:00:30 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: MNcgkczqVPWgTo9P2Au38/u9kpizRt9+5V4/yBcuFU4=)
3: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:51:08:be:cb:9f:d7:93:52:65:ae:d7:0e:77:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: May 10 00:00:30 2025 GMT
Not After : May 11 00:00:30 2025 GMT
Subject: CN=6cec946258ef83205b3769a2ce48c750e119874d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:c5:59:f4:f1:6f:ea:69:f4:eb:7e:26:66:
75:2c:55:cb:17:05:09:47:33:06:60:a9:cf:49:ff:
e8:7e:9b:0c:51:40:0a:41:0d:95:aa:fd:1f:b4:c6:
32:f3:ae:e8:41:79:dd:db:82:b2:a7:45:c9:a7:55:
f6:b7:dd:be:03:38:aa:15:54:45:90:39:db:de:7c:
8b:41:8b:ae:7f:53:c0:ab:9f:b8:6f:7b:c1:5b:10:
3f:9d:f6:35:bc:85:66:ff:f7:7c:da:ab:e1:ad:47:
61:74:e5:90:d7:01:11:62:ea:59:3f:01:97:48:ce:
b7:dc:7d:5c:11:88:06:b5:a9:15:6b:5a:44:7f:cf:
e0:f9:b8:47:03:f4:5d:24:16:2e:be:01:a1:8b:54:
60:28:4e:5a:67:38:04:fe:23:42:c0:bd:e6:f1:8e:
71:4a:58:71:0b:5c:4f:73:c4:63:3a:cb:38:92:1d:
d6:e9:49:e6:93:47:ef:f9:6e:a7:ce:4d:79:c3:dd:
9d:56:3f:af:9a:ec:8a:a4:e6:02:8c:91:7c:35:9f:
b7:dd:9a:64:28:0a:e4:8d:b3:03:26:43:88:07:61:
b2:1d:85:33:fe:88:f5:89:e6:16:bb:91:cf:cd:d9:
53:70:b7:b2:12:2f:c3:ff:56:97:b6:57:80:6f:cc:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EC:94:62:58:EF:83:20:5B:37:69:A2:CE:48:C7:50:E1:19:87:4D
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b1:96:6b:7f:3c:ee:e8:12:56:e8:a4:f2:67:ff:5c:67:b8:
7e:3d:b2:49:96:3c:d6:e8:37:79:37:ca:e8:6c:ee:5a:fd:f3:
88:45:58:32:f7:de:78:1b:a9:80:ce:b7:08:26:54:c6:2f:d5:
cd:46:a1:08:b5:74:33:ff:99:fe:fc:4d:5b:77:38:c7:c5:3b:
75:a0:00:81:be:73:11:51:2a:58:10:b8:e6:16:6a:03:90:5d:
77:b0:7a:9d:f3:87:20:17:78:87:98:ea:cd:63:97:f8:ab:02:
b5:fa:61:9a:05:f2:e4:34:89:de:73:a3:79:4f:6f:e7:c5:2a:
44:6c:1f:5e:fc:1f:64:c5:37:be:a8:4e:c0:34:61:1c:6f:36:
91:1f:ff:1c:1a:c4:d1:3a:0e:52:02:60:ad:a2:d1:40:e9:9e:
40:af:22:d5:8a:27:f0:2f:60:da:e9:3f:48:35:d1:30:e3:39:
72:82:3e:28:09:53:92:8a:c5:02:35:a9:5a:76:00:2d:a0:35:
9a:8d:f9:b9:41:93:17:5c:09:44:7d:2f:ed:f1:14:7d:3c:ed:
75:59:8d:85:ff:08:9d:24:a2:88:df:61:32:f1:fd:48:c6:57:
2a:cd:bf:de:6a:14:99:93:ce:53:9e:02:92:9d:5f:10:fe:e8:
a3:a5:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:15:38 2025 by rpki-client