Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier: mVSJ6o/OLR+yrB2XFkYKAEu0xd3RDOaErNo1YE4kAg8=
Subject key identifier: A4:10:74:41:85:60:15:70:39:E3:06:41:CE:E4:5F:86:33:4E:B3:B7
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial: 01965A26D469D207F35C39B301B94BE884E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number: 0E
Signing time: Mon 21 Apr 2025 21:00:16 +0000
Manifest this update: Mon 21 Apr 2025 21:00:16 +0000
Manifest next update: Tue 22 Apr 2025 21:00:16 +0000
Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: VknN7uK5W0dg7GLOcGgjX4DmC+10bY44y7pRFgOLx1Q=)
2: 42HdpJSIuZQYNL_T503F7T6tVtg.roa (hash: 2oMCOR0uoZknejKNMlu0g0SgSeLr17Imm1o0mXmKjiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:d4:69:d2:07:f3:5c:39:b3:01:b9:4b:e8:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Validity
Not Before: Apr 21 21:00:16 2025 GMT
Not After : Apr 22 21:00:16 2025 GMT
Subject: CN=a41074418560157039e30641cee45f86334eb3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:fd:ab:4a:27:9d:c0:1c:d8:8f:a9:53:40:
0a:43:4e:a9:ff:5a:0a:22:ce:61:c3:43:85:ab:85:
ed:35:57:29:7c:74:d3:32:1d:b8:0a:39:e0:b3:fe:
aa:5e:04:d7:d5:f0:da:6e:ee:b7:2d:f8:eb:7d:64:
7f:da:73:b5:2f:d5:77:d2:d1:9b:49:0d:fd:54:4d:
ab:d2:12:75:26:9e:fa:5f:b7:d2:a9:7e:e5:e4:fa:
bd:57:6f:99:d5:85:89:89:ba:aa:b4:36:09:13:b7:
85:d2:c2:6f:8a:a4:e3:dc:05:3f:ad:02:01:87:2d:
99:6a:0f:f2:55:65:5b:3f:7e:b6:9b:42:71:50:f1:
1b:56:5a:34:79:ef:e2:ed:94:cb:c0:3d:00:6a:99:
84:5d:46:8e:bd:75:d0:22:4b:f4:b4:8d:26:d9:f3:
2f:05:6a:e4:44:9e:c6:a1:55:b9:b2:a2:f2:cf:22:
99:8e:92:03:e1:4d:32:2d:2d:cb:b6:a4:5b:10:2a:
be:2d:f4:98:ff:18:68:e2:db:df:91:a8:9e:10:e1:
0f:fb:ca:c7:69:39:2c:c6:78:a5:a2:0a:fc:d4:65:
a3:00:f2:13:71:e0:27:64:6c:a8:96:4d:e8:82:cd:
d7:e5:33:dc:33:97:9b:25:74:f1:38:32:50:29:e6:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:74:41:85:60:15:70:39:E3:06:41:CE:E4:5F:86:33:4E:B3:B7
X509v3 Authority Key Identifier:
keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6e:36:7a:64:30:b8:86:4e:cf:d6:56:e2:85:03:22:20:9c:
9f:7a:ce:a3:27:e8:37:5e:27:5a:a1:ee:c6:6c:ef:da:a9:36:
28:3b:19:8c:79:52:91:e5:e7:a3:10:bd:6c:6a:5f:cf:5f:a2:
03:77:e1:df:f8:ed:ef:34:02:2f:70:97:a8:d9:10:5b:73:1c:
b5:2f:c1:8c:b0:c6:73:aa:ae:bf:ac:2f:2c:15:ae:75:90:5b:
1f:62:81:d8:07:b5:62:bc:f4:7f:60:6e:48:cf:bf:88:bc:23:
a0:59:e3:b9:52:18:1f:24:83:1d:fb:14:b6:72:d7:89:8c:47:
1d:5d:99:5c:6a:69:08:fc:b6:da:f6:7d:94:c8:31:9f:db:bc:
35:76:2e:a1:0f:59:20:2d:f2:82:d2:8d:d8:6a:a0:5f:ab:ec:
0f:dd:b0:f8:eb:15:58:e4:2f:a4:77:c2:f9:a5:7d:af:2a:3b:
c5:e2:f5:2e:5b:7f:55:80:ce:5c:38:fb:8e:f1:df:54:e9:26:
bb:a5:2d:71:a1:09:15:ce:82:19:7b:59:f5:aa:72:88:3f:c1:
0e:70:9a:8b:00:66:fa:93:ba:ef:c8:32:7d:91:e6:28:f1:86:
73:b0:1d:b7:b2:3c:94:03:3c:39:41:75:23:a3:bb:df:95:de:
10:32:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:45:25 2025 by rpki-client