Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File: WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier: iAkQFH0RErFC3nuhXC+iHqWFpol4T1MktlI4fwdwz2U=
Subject key identifier: 0D:A1:6E:B0:23:04:D8:CA:51:9C:4E:D8:5A:2E:D7:4B:D5:A8:92:AF
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial: 01964D0FEB33FEDE410A210CB429F8F8DAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number: 0A1C
Signing time: Sat 19 Apr 2025 08:00:10 +0000
Manifest this update: Sat 19 Apr 2025 08:00:10 +0000
Manifest next update: Sun 20 Apr 2025 08:00:10 +0000
Files and hashes: 1: THjGQAeNJPBtPCUTy4-J94YQkPc.roa (hash: F+YBL5AUhg2W6omBaT2Kp3w7xlj8utNYDQNQuh7FdXU=)
2: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: OfVT3Xg7DcpFW2qABe7I1Z6tQSBIoqF7mITAtZjfQCk=)
3: bHWPrUheTISW_XZwqIKxaRaFivE.roa (hash: ek7H7pyvxLeP4/K0w5pzvcUQRE5xOhHM0k+4ZCxv0OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:0f:eb:33:fe:de:41:0a:21:0c:b4:29:f8:f8:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
Validity
Not Before: Apr 19 08:00:10 2025 GMT
Not After : Apr 20 08:00:10 2025 GMT
Subject: CN=0da16eb02304d8ca519c4ed85a2ed74bd5a892af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:4f:75:f8:2f:31:e8:4a:12:ff:d4:6a:59:
14:b2:c2:c3:99:1e:14:82:3f:c8:7b:d7:d7:f0:42:
a2:86:90:24:cd:82:fe:e5:61:33:cf:d4:30:0e:3b:
71:a5:80:8e:29:c3:cf:24:7a:d0:7c:c4:66:47:d5:
6e:67:7e:d6:a8:8a:72:ed:f4:fc:47:5e:ac:8c:8c:
b7:9c:2d:89:47:3d:7b:9b:15:a8:fa:ea:c6:87:60:
b1:1d:3d:30:10:1a:a4:d1:4f:c3:f0:a5:ae:17:4e:
98:9b:76:a1:2f:ca:c0:74:06:76:32:a4:1d:9b:44:
ee:49:90:2d:db:09:11:47:5a:0e:77:8c:88:78:6f:
ad:24:d2:49:31:45:3a:a8:0f:ae:f2:29:e2:d8:67:
82:7b:fb:8c:31:59:91:ed:7f:cd:aa:12:e3:25:d7:
f9:e7:0f:89:9a:4e:a5:cb:3a:33:4d:f9:b9:23:0c:
88:68:59:33:7a:ce:fd:b9:4d:09:86:51:d4:ec:38:
d6:32:fb:35:61:06:4a:46:97:bb:36:04:25:3d:86:
fa:ec:8f:53:86:94:3c:48:ff:87:91:a9:54:8c:4a:
42:93:90:3b:8c:40:b8:65:0c:ba:13:f7:b8:9e:13:
2c:cf:71:a3:6e:d6:bb:3a:bc:5c:5c:3a:d5:89:71:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:6E:B0:23:04:D8:CA:51:9C:4E:D8:5A:2E:D7:4B:D5:A8:92:AF
X509v3 Authority Key Identifier:
keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5f:89:d9:1b:b0:c6:61:cc:e2:4e:54:a3:05:2d:38:f6:f1:
53:a8:ce:43:79:cb:f1:40:ae:a5:00:04:ab:18:6b:56:9f:4c:
2e:f2:77:fe:12:42:49:34:d3:92:18:c1:17:69:75:76:0e:47:
16:b5:ad:11:db:e3:a2:22:cf:86:31:cc:12:a4:9e:10:0d:2e:
d6:29:43:97:d2:af:2b:41:59:43:2c:14:c2:62:73:55:ed:5c:
f4:28:2d:cb:ec:76:68:3a:9a:db:52:34:13:78:ec:ca:58:14:
0d:cc:66:5a:c6:12:8f:49:8d:b5:7f:b5:a2:d1:ec:7d:93:e7:
2a:07:90:b6:32:bb:b3:aa:ba:bc:0f:db:d2:14:ef:72:b3:89:
b4:b1:68:25:d5:a6:8d:32:52:7b:9e:25:a7:2d:3a:a9:bf:9d:
8d:0a:49:ab:cd:0f:7d:f5:ff:00:54:73:47:b4:47:ba:a9:81:
31:05:17:f2:79:ed:93:41:c5:f6:f2:fd:9c:ec:9a:de:60:ba:
ca:df:81:e7:ff:da:d6:41:e9:75:96:62:eb:b3:69:b2:b1:87:
71:22:8d:50:f3:9e:4c:4f:d1:91:65:b4:3c:c5:23:54:4e:d1:
3a:ad:de:e0:c3:56:c7:54:7e:c0:9a:77:85:d5:eb:ae:d1:93:
ad:17:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:37 2025 by rpki-client