Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: Kyv8Y+g31AgGzbjZ/di3LlbGG/i9wawYok9AAQsjVnU=
Subject key identifier: F3:93:70:6E:35:06:67:6C:04:3A:71:BB:61:33:42:6B:CE:FC:EF:A5
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 01969D5137ABD3D93AF2FE7B29F6CD653187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 133B
Signing time: Sun 04 May 2025 22:01:07 +0000
Manifest this update: Sun 04 May 2025 22:01:07 +0000
Manifest next update: Mon 05 May 2025 22:01:07 +0000
Files and hashes: 1: gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa (hash: LB2ZQVKXYnVtOl1GjrynJ1NY20hqhQVioGRUarT0MgI=)
2: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: 3NuXITHbmXlZ+FRCD2fRLn/RxFQPL2IPIEqquhcTmMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:37:ab:d3:d9:3a:f2:fe:7b:29:f6:cd:65:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: May 4 22:01:07 2025 GMT
Not After : May 5 22:01:07 2025 GMT
Subject: CN=f393706e3506676c043a71bb6133426bcefcefa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:49:ff:67:6c:3d:40:68:53:15:31:7e:7f:
52:22:c8:b1:c2:38:a9:61:54:10:3f:91:a8:53:c9:
b0:5a:40:5b:a0:b2:97:8f:ae:49:4f:fc:92:62:a0:
f9:39:fd:f2:a2:b3:cc:75:91:0a:fe:da:21:d0:f7:
fe:92:64:44:da:19:d5:b3:da:0e:64:c6:ba:31:ce:
18:f8:43:8b:fc:3f:41:a5:b0:d1:22:fd:cd:87:f7:
de:60:9d:fc:1e:88:7a:c4:2b:ae:ba:8e:99:0f:b3:
2c:05:82:90:49:61:ec:0a:cc:af:cd:66:40:87:73:
4e:5f:db:b4:0c:6c:d0:27:2e:5d:da:c4:b4:af:8c:
9c:1c:ff:9f:09:2b:2e:b3:35:bf:90:4c:d4:a4:bf:
83:41:e2:b3:fd:6b:f9:7f:a8:7f:ff:bb:34:fc:1c:
a2:75:a1:3d:0d:30:2a:1c:e4:a9:2c:02:c1:1d:e9:
10:d2:f8:97:ab:75:47:8d:b6:62:2b:21:cb:a9:ad:
98:a0:26:fc:ed:a0:30:b8:6e:4e:07:3f:6e:2c:4c:
8f:b8:ad:28:68:a8:51:5e:7c:38:4c:c0:33:f9:88:
a3:c5:c4:9b:2e:5e:46:95:88:3e:e4:52:fc:f6:a2:
ca:36:8b:7b:fb:19:b0:7c:b4:cf:05:f1:a4:31:c0:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:70:6E:35:06:67:6C:04:3A:71:BB:61:33:42:6B:CE:FC:EF:A5
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f6:5b:92:52:ef:64:ce:50:f4:72:be:4a:bc:25:65:06:fb:
04:3a:63:56:16:8d:d2:21:eb:10:64:17:22:a8:6b:17:38:86:
12:e8:b2:84:86:a8:c1:5c:df:98:c5:84:65:d3:90:95:0e:6e:
57:2f:58:72:e1:02:30:33:95:5b:98:b8:69:1b:74:2a:c6:a6:
f4:af:74:a5:c3:87:7a:30:82:0f:7f:bf:22:b6:0b:bc:61:37:
78:b9:47:9c:c8:b6:29:6b:25:6f:e6:81:b2:c0:25:4e:cd:74:
0a:60:0f:3d:e4:7d:78:74:35:36:2a:48:f1:ae:e0:5c:01:1a:
70:58:1b:31:a8:dd:16:3a:55:d0:22:a8:f5:65:0f:c1:81:77:
b3:68:c0:21:8f:30:01:bc:82:d8:85:b6:62:1a:7f:de:dc:72:
0f:ac:60:5d:62:6b:4d:08:ad:c4:1d:58:13:49:aa:12:6e:86:
83:ea:cc:8c:0a:fb:bb:bc:70:e4:eb:d5:28:a7:9f:96:41:a9:
f9:c9:29:c7:d9:57:8c:ed:24:a5:93:a7:35:a9:a4:2f:de:31:
19:0b:4d:6e:5a:00:5d:ae:cc:dd:8a:6a:f1:95:61:e9:3c:db:
57:61:da:69:1e:69:5d:54:95:30:d9:8e:29:5c:68:f8:ea:ef:
fa:6f:b9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:31 2025 by rpki-client