Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: q3cDXYz2I6zW1gnP58oD1R8kN8aCTrdqSdMt8xkDklQ=
Subject key identifier: 89:F7:86:E9:AE:C9:B4:1F:00:90:82:BA:F6:B9:5A:6A:8C:3F:4C:A2
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 01965613AFEB39B5FB6CDC30FE8FA01190A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 02:00:52 +0000
Manifest this update: Mon 21 Apr 2025 02:00:52 +0000
Manifest next update: Tue 22 Apr 2025 02:00:52 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: 3ORIwpGZmr9sLl12RXu9Ano13w9ndwrv+Qw0gozy0lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:af:eb:39:b5:fb:6c:dc:30:fe:8f:a0:11:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Apr 21 02:00:52 2025 GMT
Not After : Apr 22 02:00:52 2025 GMT
Subject: CN=89f786e9aec9b41f009082baf6b95a6a8c3f4ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:cd:6e:5d:0d:c3:aa:d3:a3:d0:c3:77:b4:
89:62:74:d1:6e:34:a2:08:8e:48:92:b9:a3:a1:f8:
e2:85:6c:b2:9b:3b:02:1d:6d:c8:2a:5a:3b:03:d2:
11:5b:a0:08:92:e9:87:91:0d:80:a4:01:b9:f6:b0:
7c:02:45:fe:9c:b6:f7:6a:89:06:8a:7e:74:32:e5:
0b:69:f4:3b:35:c0:00:7c:ec:55:87:3d:4c:9a:df:
30:fd:7d:0f:09:7d:0b:1d:9d:66:44:22:cb:ea:76:
98:96:f1:02:db:7c:e5:d7:ec:0f:b7:d4:3f:a7:69:
db:73:36:07:66:43:83:25:43:21:11:20:cb:42:b2:
32:f4:70:57:86:e3:8b:44:9e:99:c8:d8:b1:e7:07:
ce:f8:55:03:c5:8e:51:dc:34:4a:f2:9d:eb:17:53:
e3:83:be:bf:3b:c2:a0:26:6b:cf:57:81:f9:04:b4:
d5:83:fe:bb:c6:e1:dd:62:46:59:6b:45:6a:de:41:
bc:fa:e3:e5:76:25:6b:d9:1b:3d:59:5c:58:1a:90:
7c:dc:d0:c4:9e:56:c0:b7:97:49:e2:56:1c:75:7e:
90:07:87:d6:e4:11:bc:00:50:2c:36:ec:05:a0:bd:
f0:d2:88:a5:80:ac:2f:e9:81:c3:e2:d2:40:4b:27:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:86:E9:AE:C9:B4:1F:00:90:82:BA:F6:B9:5A:6A:8C:3F:4C:A2
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:23:8c:26:3c:19:11:c7:23:6e:16:a6:22:6f:d6:9c:d1:
65:8d:8c:85:3c:5d:50:4e:7d:58:fd:30:d2:70:84:0e:7b:95:
f7:de:e5:d5:0c:2b:91:c8:9d:97:95:8e:d7:53:78:16:93:a1:
ee:6c:e3:9f:d2:89:63:71:c9:09:5e:11:ee:b2:da:78:1f:bc:
74:91:bf:9a:68:e3:b2:4e:81:d5:20:b1:ff:fe:c7:54:92:c4:
93:80:2c:51:31:f5:5b:bd:a4:a7:28:43:31:ec:b1:49:b7:1c:
c7:30:76:61:81:88:d8:de:b8:85:88:22:d0:8d:88:0a:72:b8:
97:00:b5:3e:24:05:5e:d2:fb:a2:9f:6f:ca:e1:c8:b1:52:55:
c1:ac:77:b2:30:5c:b3:0b:03:9f:24:0c:80:f3:45:28:9d:04:
b7:e3:23:51:e8:7e:2f:2f:ea:de:d4:77:80:cb:11:7b:3d:bf:
63:6f:57:fe:52:16:01:2f:7d:1e:69:4c:21:11:c2:62:f7:f7:
cb:f6:93:b1:0e:fc:0c:d9:a9:44:d3:28:3b:97:94:49:ec:79:
c5:e6:70:27:39:6d:06:13:af:e6:d8:11:2c:db:ae:03:c5:62:
03:1d:4a:77:1e:96:85:1a:56:38:be:ff:aa:19:6d:80:49:f4:
f7:2d:03:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:29 2025 by rpki-client