Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: 5j605z+dlCJrmsT12juJ5alZeZc93frlfoiJQHN+TfM=
Subject key identifier: 34:6D:FB:79:07:53:D3:8C:78:41:52:46:93:44:3E:6D:7E:31:77:09
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 01965EDFA8798B07D1B2EFEF7223F4542A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 044C
Signing time: Tue 22 Apr 2025 19:00:37 +0000
Manifest this update: Tue 22 Apr 2025 19:00:37 +0000
Manifest next update: Wed 23 Apr 2025 19:00:37 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: gktrPpar80Yj3HO_xTl6-8tholk.roa (hash: 5YMgCwZjSTpe0kk7pnZdD0CkFN0NmRFgfWE0skj33rw=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: OLMMRF4oUDUhWvFCJZNFYQR15KYtMsjafWWlUHwWqRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:a8:79:8b:07:d1:b2:ef:ef:72:23:f4:54:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Apr 22 19:00:37 2025 GMT
Not After : Apr 23 19:00:37 2025 GMT
Subject: CN=346dfb790753d38c7841524693443e6d7e317709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:9e:ae:4f:dd:68:af:6b:36:80:4b:19:9a:
35:e3:35:fc:fc:e2:48:7d:5a:b3:6f:0b:17:04:98:
16:8a:76:f2:bf:d2:18:36:fc:da:33:64:c8:76:50:
ea:8b:5c:ba:11:04:ea:91:81:0c:44:de:3c:a3:13:
42:ac:aa:af:c2:4f:07:a7:85:d5:88:93:47:da:9f:
0b:20:c7:8d:78:27:2a:7c:f6:52:03:d2:1b:21:31:
0c:7f:3c:2a:88:c3:26:ca:04:42:9d:52:71:46:fc:
52:16:2c:ac:b8:bd:ef:ab:ef:c9:ec:09:23:ab:95:
38:10:7d:fb:16:28:1f:64:ff:cb:c4:53:b0:4d:fc:
f9:39:9a:78:19:09:9c:c8:7e:7a:67:c5:38:c9:47:
36:a0:01:21:da:8a:5c:93:03:d2:fc:66:de:7a:42:
20:dc:b0:5b:bb:5d:f5:7f:b2:90:ac:69:83:fd:68:
c8:9b:7f:ea:ce:94:cf:2a:12:fb:12:dd:7e:8b:9a:
41:a3:a4:49:2c:72:02:3f:6d:b2:f1:29:10:47:cb:
3c:4b:2e:f7:fc:34:40:36:35:d0:7a:64:de:3f:ec:
52:d5:7f:a1:c2:5a:c5:54:fa:04:12:22:c6:44:bb:
67:d6:b7:c8:1a:94:0a:05:68:fa:7f:f8:6c:ad:ba:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:FB:79:07:53:D3:8C:78:41:52:46:93:44:3E:6D:7E:31:77:09
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:82:76:14:4f:78:11:62:4d:3f:9b:0a:47:9e:b0:09:32:5f:
87:5e:f1:fd:5c:22:b6:f4:c1:20:f7:90:3e:d4:48:9d:f8:91:
af:90:da:f1:e4:c3:18:7e:0b:0e:70:e6:a3:36:9b:bb:02:f7:
26:a2:98:14:3b:c0:9b:27:67:b4:8e:75:60:c8:16:6a:e6:01:
98:d7:ff:67:45:d5:71:03:d2:b8:51:5e:43:69:69:3a:bf:1d:
18:b6:46:44:66:c3:a8:02:c7:60:7a:75:6b:06:98:08:2f:69:
ee:10:ab:1c:eb:04:4b:42:c2:8c:8b:a7:48:44:d7:80:0f:57:
94:79:85:22:d5:d2:b8:1b:48:dc:8a:85:7f:26:09:00:b1:e3:
9d:c9:24:da:99:6c:a6:34:f0:ec:8d:29:9f:d1:16:dd:f2:ae:
6d:09:a4:a4:95:c9:5a:b2:89:7c:db:84:c7:2e:c6:91:35:47:
07:13:19:c3:b8:30:48:29:45:30:d8:bc:61:28:8c:cf:82:d7:
f9:81:14:2b:b2:64:af:65:9b:10:df:b5:59:22:d5:3d:e0:37:
61:7c:a4:66:86:81:39:ae:aa:72:2c:60:d6:0c:c9:3d:bf:03:
27:38:03:a9:0c:bb:e1:b9:26:e2:4b:db:fc:c7:82:f2:0a:9c:
14:b4:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:40 2025 by rpki-client