Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: 0+l1osgTj4FhuKjdT38rdrqb9B5jqa8ele1Ug8IGNC8=
Subject key identifier: FB:7B:1F:D7:AA:F6:0F:57:DE:0F:45:EC:73:B1:47:73:03:00:AF:F6
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 01964E9093D9C4101C8DD183FB23A6D49C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0771
Signing time: Sat 19 Apr 2025 15:00:19 +0000
Manifest this update: Sat 19 Apr 2025 15:00:19 +0000
Manifest next update: Sun 20 Apr 2025 15:00:19 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: XkxvqJNn2aFJytKqrIJhlQCrn2ls1H+w9Gldc0vH3zk=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:93:d9:c4:10:1c:8d:d1:83:fb:23:a6:d4:9c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Apr 19 15:00:19 2025 GMT
Not After : Apr 20 15:00:19 2025 GMT
Subject: CN=fb7b1fd7aaf60f57de0f45ec73b147730300aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:67:96:29:6b:32:7d:85:f7:ef:e4:20:61:
80:d4:a5:c8:b9:88:28:5f:89:0a:f0:4b:9d:60:7a:
26:9f:d0:c2:26:0d:af:2b:a1:0b:c7:ed:6d:ce:c4:
c9:3d:99:33:47:da:2b:7b:3f:e9:1b:2b:a5:40:37:
5a:30:56:b8:bc:6c:27:9a:79:78:09:bf:e7:d8:20:
40:da:ae:15:b6:86:32:58:4d:ed:2f:fa:2e:1c:f3:
c2:8c:a8:9a:7f:9e:da:a7:95:6d:74:8c:11:fb:a9:
e6:de:0a:87:da:b8:fe:0d:e6:1f:3b:88:0e:6b:27:
53:6f:02:c3:da:4e:18:00:ab:ce:8c:27:c4:1b:ec:
a6:5e:8f:55:82:69:fa:c5:31:58:dc:e3:b0:dd:7d:
78:8b:cc:7e:b6:6d:2a:2d:c6:c6:d8:0c:31:5a:21:
77:c9:cc:e4:09:e4:d1:b9:30:98:d2:81:c3:79:08:
0b:3a:53:74:38:35:a0:fe:ac:8c:9c:79:bd:ae:c4:
4c:59:67:23:72:45:6b:7e:a5:0e:f0:58:bc:b9:bf:
4d:52:af:1e:9e:45:15:a7:f4:4b:83:42:81:4e:e7:
7b:75:76:93:fa:b0:45:13:de:4c:11:b4:39:b7:2f:
e5:3b:a3:2e:87:44:c3:c5:d3:92:06:7e:42:e9:82:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:1F:D7:AA:F6:0F:57:DE:0F:45:EC:73:B1:47:73:03:00:AF:F6
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:7f:4e:62:5e:f7:56:0a:19:97:46:84:a4:90:87:34:4d:78:
0f:43:ab:c5:87:c3:17:c2:8a:47:84:6e:dd:1c:18:e4:50:67:
a7:a8:45:fc:12:88:40:fa:5b:23:d1:8a:5b:34:87:95:38:94:
68:51:26:00:00:cd:00:76:3c:01:73:2f:0b:3e:00:1e:96:9e:
46:e7:ea:09:dc:db:f2:8e:1f:d9:1d:52:95:62:7f:a3:e6:7a:
28:8a:6b:9e:02:ca:d4:05:ce:67:67:7d:4c:ee:38:3c:99:7a:
83:e3:d9:54:21:3b:82:07:32:49:14:71:ac:be:08:e6:67:a6:
a7:a8:4e:c8:e0:fd:a8:9a:60:e2:d2:8c:21:53:fc:ff:5d:5b:
eb:3a:5b:50:2e:6d:c5:f1:60:dc:cb:92:36:84:d4:ae:f6:cc:
72:b3:a8:ad:18:7a:e3:53:bc:f1:0d:03:db:aa:de:d2:ad:ce:
1a:c8:ec:8a:b1:4d:d9:2b:45:7c:58:5f:e8:b7:4f:27:e3:d4:
3a:c1:39:8c:03:ae:ef:94:30:ae:a5:f2:35:a0:87:e2:e0:3a:
9c:c2:40:38:e1:5f:67:ad:e5:3f:0b:49:52:32:d4:43:97:8e:
30:07:1d:ff:16:f0:ac:e9:d1:36:ff:1a:36:68:c1:ea:92:86:
d6:b1:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:44:40 2025 by rpki-client