Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
File: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json)
Hash identifier: ZAMswAwm/aUPdfY20IFfQjMSULo+aMNzKLS+bMbrDSw=
Subject key identifier: 46:A3:02:21:16:A5:5D:DA:5C:15:E0:D9:5E:25:C9:28:C8:A9:E5:1B
Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
Certificate issuer: /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Certificate serial: 019659822620372D899AB8C5165F7F9E83B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 18:00:23 +0000
Manifest this update: Mon 21 Apr 2025 18:00:23 +0000
Manifest next update: Tue 22 Apr 2025 18:00:23 +0000
Files and hashes: 1: KkzZdtSbSgev6F4EciFP374t71M.roa (hash: RKNA7btFBFTKM+7ILEeu2plNQgmHlkDMuCESaQkp038=)
2: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: 8w2E0pP/gFBz36oSZmZNUue6hEzhJr21RlOl8jShaNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:26:20:37:2d:89:9a:b8:c5:16:5f:7f:9e:83:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Validity
Not Before: Apr 21 18:00:23 2025 GMT
Not After : Apr 22 18:00:23 2025 GMT
Subject: CN=46a3022116a55dda5c15e0d95e25c928c8a9e51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:84:5f:d1:cc:f9:ed:28:09:88:75:0e:5f:
ed:1e:6b:8b:7a:be:7d:4c:99:5a:7f:1a:9d:83:48:
4b:e6:86:ec:d6:56:bb:69:61:5d:02:10:23:9e:21:
4a:8a:29:68:e7:6e:fe:7c:24:fd:64:3a:5b:ea:19:
47:79:f7:b7:87:cb:ed:51:38:fb:2f:90:fe:1a:62:
50:e8:87:5b:61:48:dd:49:5b:42:5f:e8:94:8a:d2:
ad:ae:e0:0b:0d:78:52:06:87:28:43:34:df:30:1c:
58:e2:31:d0:3c:b1:f6:81:55:a6:8f:58:18:69:95:
d6:30:5d:ea:ae:d5:c1:91:b1:52:f2:c7:9a:cb:24:
7b:1a:a4:7a:ef:c9:ed:b1:83:6e:67:71:7d:94:e0:
ab:69:4f:13:7f:32:23:0b:1e:b6:9d:c8:fe:f2:be:
4a:ca:f8:1b:81:21:ef:5d:1c:27:e0:52:7a:f9:16:
d2:36:12:1b:ad:bd:d1:fd:bf:74:82:f6:ad:a5:ba:
67:85:e7:a7:cf:23:ff:83:58:bc:bc:af:79:48:59:
c6:55:48:dc:53:e1:85:e4:5d:ed:40:82:e9:06:09:
1b:01:02:02:67:ce:33:99:f1:fb:1a:9a:f8:58:ec:
09:0b:93:ef:a1:0f:ec:86:67:0c:1e:90:07:30:7e:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:02:21:16:A5:5D:DA:5C:15:E0:D9:5E:25:C9:28:C8:A9:E5:1B
X509v3 Authority Key Identifier:
keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3c:35:5c:bc:59:f8:ff:29:ec:e7:15:ec:20:16:d5:4c:15:
59:ac:a3:bd:92:4a:be:f8:b3:74:82:b8:aa:0b:a6:2b:1a:f7:
0c:42:82:50:35:7e:65:3c:ed:72:d6:a1:79:d8:6e:58:b9:40:
72:a1:f5:32:d3:02:03:4a:8a:6f:a1:e5:09:4c:57:e3:30:01:
a3:fe:db:64:02:01:45:bd:99:b2:ca:14:05:4e:8b:91:8f:a0:
c4:2b:a4:6b:af:82:b3:ce:16:2d:13:45:c3:fb:4c:0e:5f:d3:
eb:9d:b2:c7:aa:ef:a3:19:3c:65:a1:94:a7:8c:bb:ff:f3:4e:
47:14:cb:e6:82:63:ce:95:3f:ca:b2:1a:22:fa:0a:11:22:de:
9d:b4:e8:31:83:cc:91:44:90:66:1c:a9:1a:e5:12:71:a1:93:
f2:27:41:d3:68:a7:10:c7:21:11:41:9f:29:a7:dd:7e:4a:44:
6c:78:ff:98:21:a4:cc:95:05:47:11:d7:df:d9:f4:b9:95:c2:
b8:89:24:15:86:fd:ef:4e:53:cd:85:91:35:82:42:f5:f7:c5:
2e:1e:fc:4e:b9:a9:44:e5:30:b1:bd:78:60:98:fa:35:87:30:
0b:23:bc:24:1f:ef:e6:8a:dd:d2:b8:a3:51:42:5a:d9:ce:d7:
f6:aa:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:28 2025 by rpki-client