Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: StwCG7WRbSEte9stfBl41anKvRjl7j2ForsuY9sr1NQ=
Subject key identifier: 54:13:E1:A9:A7:EA:B3:FA:CE:48:A3:8B:7A:90:41:B3:1C:01:27:EE
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 01963F8BA521884D037581D14510C01973C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 075B
Signing time: Wed 16 Apr 2025 17:00:38 +0000
Manifest this update: Wed 16 Apr 2025 17:00:38 +0000
Manifest next update: Thu 17 Apr 2025 17:00:38 +0000
Files and hashes: 1: BJ4VFOskRK3bBiJBpHiT_tAzA5A.roa (hash: UXn6LX6IgvE9frtcP3dcRwG57JPhrEUAXhgX1T/Y+PE=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: HD31LWYwC1bkbLnoDM/StJJJHeKRgSWWBHeoTi0TZ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:a5:21:88:4d:03:75:81:d1:45:10:c0:19:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Apr 16 17:00:38 2025 GMT
Not After : Apr 17 17:00:38 2025 GMT
Subject: CN=5413e1a9a7eab3face48a38b7a9041b31c0127ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:c2:64:da:e4:93:81:7c:16:5d:d7:bd:cc:
94:9a:67:99:99:2b:5c:c7:0d:2e:91:06:ac:ac:b9:
e7:7f:c4:8d:43:96:e3:22:65:23:4b:74:f2:b0:4a:
75:76:c2:39:f9:0f:0b:be:a2:5d:c1:c0:8e:f2:64:
bd:e1:ac:71:47:a4:32:95:33:b4:ba:63:be:a3:e1:
8e:2b:f6:6f:2e:be:18:8c:c6:b2:7f:5b:f6:ce:c1:
9d:31:26:2e:b9:f8:41:f0:ec:93:a3:37:56:aa:f3:
c3:8b:9b:0a:ff:9d:f1:43:c1:1b:ad:58:27:f1:e0:
38:98:00:e8:d5:8d:23:4f:43:77:f7:5a:d6:9b:6b:
06:fa:f7:a5:49:6d:59:77:a6:ec:00:2f:5a:6b:1d:
fe:0a:53:e6:31:38:e5:69:39:1e:14:3d:79:90:07:
54:71:65:98:38:ce:e9:b7:63:4c:5c:8c:8a:61:d9:
4d:dd:bb:96:b4:5c:99:c2:18:5b:c7:8e:92:70:e8:
90:a9:5c:eb:4a:70:01:8e:15:9e:f6:07:99:2e:b6:
3b:06:b0:8e:42:e5:e5:3c:0a:41:06:3e:16:5c:49:
0c:4f:d9:11:78:16:de:b3:33:ca:fe:7d:be:3a:41:
c6:12:2b:a9:32:94:a8:31:f5:1d:84:ee:b6:ec:7c:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:13:E1:A9:A7:EA:B3:FA:CE:48:A3:8B:7A:90:41:B3:1C:01:27:EE
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f4:b9:d5:88:1b:69:d9:5d:ef:31:91:b4:97:0c:04:33:73:
7f:4c:e0:ab:73:d7:eb:07:6e:48:d9:69:b3:8d:5f:5e:13:ee:
ab:0a:17:e1:5d:74:00:10:94:69:59:35:d7:58:f7:6e:51:b6:
dc:4e:cd:e2:33:76:a8:d2:9b:33:64:56:da:e9:9f:56:40:12:
0e:77:21:54:66:b0:5d:05:9f:56:cd:ff:e2:80:91:68:65:55:
49:05:c6:32:c3:91:55:cd:b4:25:14:30:4c:a1:25:cd:e2:76:
3e:05:92:43:c3:fd:07:5c:cd:43:ac:64:79:6d:36:df:af:d1:
17:d2:5d:6b:c5:68:be:b6:af:46:7f:d3:8c:a1:bd:18:3f:52:
c5:4b:d6:13:99:b0:4b:e1:67:9b:e9:3c:63:af:27:09:2d:fd:
9d:ac:4b:96:a3:8f:26:aa:00:18:84:d5:54:b6:06:42:0f:42:
f9:87:b0:13:bc:5f:df:03:4c:ce:63:2a:56:13:39:b3:b5:b4:
2d:a4:0e:cd:e7:ac:5c:0a:1f:93:dd:d8:7c:3d:ad:2d:a5:ff:
84:b7:a0:9d:39:76:2f:8d:9a:8d:a5:bb:c9:f1:99:ed:c5:c1:
c8:61:86:99:a3:07:26:57:9b:67:b6:85:29:ce:c6:47:8e:36:
f7:fa:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:06:26 2025 by rpki-client