Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: Rg3ORXKhVkSAeBrViH5HOYwgRGKtvZ9l5GaxTEyhoZA=
Subject key identifier: C5:77:CE:22:94:24:A9:6F:EF:3A:41:40:CB:77:87:78:C2:C3:66:3D
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 019651243D0A811E8E1BA7B9F54EA7743E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 03:00:51 +0000
Manifest this update: Sun 20 Apr 2025 03:00:51 +0000
Manifest next update: Mon 21 Apr 2025 03:00:51 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: gFN1VZTE7MyV2BQS9bbSl/1TRsYNdOEHgeFZaMuYeCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:3d:0a:81:1e:8e:1b:a7:b9:f5:4e:a7:74:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Apr 20 03:00:51 2025 GMT
Not After : Apr 21 03:00:51 2025 GMT
Subject: CN=c577ce229424a96fef3a4140cb778778c2c3663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:51:2a:74:d9:23:ed:7c:9c:c3:e4:95:d3:
5b:78:77:66:1d:e6:13:e6:b6:84:7b:7c:34:3b:d1:
fe:f2:5e:84:08:9e:43:e9:3f:2d:2e:53:e9:37:9d:
7f:e0:1b:43:13:76:ce:27:7b:d3:fc:89:96:de:5e:
08:48:75:7c:91:00:5f:ca:4b:54:b4:5e:6b:54:2b:
12:b2:ef:03:fb:d1:f2:64:65:b9:5d:53:ed:e9:84:
a7:14:56:e7:ec:05:e3:b6:2e:d8:44:c0:84:72:b3:
f8:fd:b6:3f:5d:84:4f:35:91:c5:9d:4f:b0:0f:1c:
df:c5:6a:fe:cc:a5:90:f1:36:af:1a:2f:cc:4b:c6:
e8:87:59:b3:ce:d9:44:1e:49:71:c4:53:f7:43:ea:
52:9a:30:ed:07:2f:59:0d:b8:9c:f0:32:82:f9:71:
0a:55:34:cc:0c:d8:a8:33:cd:14:36:60:2e:85:33:
5f:56:2d:11:1a:8a:e4:8d:38:be:9d:48:98:d2:a4:
53:47:ed:6b:c3:4a:33:ef:49:e0:38:56:05:93:53:
68:fd:e4:3a:ec:8c:70:80:9c:90:5c:ac:a6:db:62:
53:8b:4c:ab:7e:0e:d3:be:39:40:91:31:5e:c4:0a:
6a:51:20:df:ea:8c:b5:02:48:7e:86:d3:f6:46:e3:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:CE:22:94:24:A9:6F:EF:3A:41:40:CB:77:87:78:C2:C3:66:3D
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8c:39:72:30:0a:90:47:be:f9:0b:0c:1c:85:2a:6d:8a:3a:
b2:39:18:95:6c:c6:54:ba:64:26:31:64:c2:3d:27:87:40:7b:
78:72:18:2c:6d:79:c1:c4:d0:b6:0c:d2:bc:92:ff:af:85:ff:
8f:b9:c6:c0:17:b4:e6:8b:fe:32:95:ba:94:43:59:b0:41:fa:
ae:11:81:fb:41:12:e7:50:c6:4f:41:ab:72:32:48:a3:c3:7e:
f5:ab:f5:40:ea:1e:2e:de:97:ee:06:c7:cb:be:28:d0:b8:dc:
91:5b:23:33:45:fc:de:26:38:8f:44:9e:90:16:c6:dd:ca:00:
2e:c3:01:a9:04:d5:31:32:3d:46:43:11:95:f6:d8:9c:9b:15:
a1:9e:e9:a2:f4:71:c9:d2:a8:59:89:71:56:d8:e8:69:c8:46:
93:82:d2:a0:b8:d7:7b:32:ca:2d:03:be:d6:77:a9:1b:93:df:
90:36:91:11:3b:95:37:3d:a7:9a:bc:24:19:9f:d1:73:17:65:
94:8d:9f:a8:f5:d9:59:79:00:a3:97:d2:05:9b:77:23:55:4e:
77:16:c3:f5:85:fc:f9:9d:ed:44:14:46:e0:3b:47:5f:f4:10:
f7:c6:dc:35:a7:7d:d7:9c:0d:51:f2:cb:71:8b:d1:80:2f:7c:
08:fd:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:51 2025 by rpki-client