Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File: _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier: /zSudvFlwkzdIg5fY0wCbR96d3O31LmlUXpz+cCZYw4=
Subject key identifier: 4C:0E:C2:BF:AA:0D:82:E7:44:29:E2:1F:89:18:FC:DC:6C:3F:50:02
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial: 01964DEC6CFE149E19BD54326926E26C09E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number: 0377
Signing time: Sat 19 Apr 2025 12:01:02 +0000
Manifest this update: Sat 19 Apr 2025 12:01:02 +0000
Manifest next update: Sun 20 Apr 2025 12:01:02 +0000
Files and hashes: 1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=)
2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=)
3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=)
4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: lSidFP/5zFPTxAdbckGGZ2Rlzc1Q3nLmwdPYNk/44Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:6c:fe:14:9e:19:bd:54:32:69:26:e2:6c:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Validity
Not Before: Apr 19 12:01:02 2025 GMT
Not After : Apr 20 12:01:02 2025 GMT
Subject: CN=4c0ec2bfaa0d82e74429e21f8918fcdc6c3f5002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:cb:d5:9b:5d:7c:29:4b:a6:83:b8:91:8c:
0c:dd:32:fc:73:3d:70:95:ba:5d:2b:1f:1c:6a:47:
00:47:1e:eb:4d:a7:bd:e1:43:5d:77:0f:f0:8c:b9:
e0:67:6c:ac:0b:ad:46:77:e5:eb:70:40:81:ff:b8:
b1:b3:d3:9b:c6:a3:fa:b0:85:df:9e:7d:f6:7d:b5:
7e:2c:ff:2d:7d:0f:71:4e:7b:8d:88:88:eb:42:81:
21:37:2a:16:92:f0:66:14:d8:48:a4:31:93:12:cf:
6f:3c:2f:11:67:43:b3:7b:25:74:a1:07:79:11:1b:
d2:e0:ba:4e:72:08:76:9c:57:34:a4:1f:87:39:25:
71:71:a7:cc:17:b3:ef:e1:6b:91:53:df:83:9e:ba:
92:93:2e:1e:26:ae:02:66:22:ff:5c:bc:42:b6:52:
d5:4a:78:5c:ac:8c:2b:cc:69:6a:db:9c:55:38:25:
26:10:6d:ce:0d:49:75:b9:63:bd:d6:7d:ba:af:05:
f2:53:74:e2:68:e6:76:aa:e9:7a:1a:78:82:10:d5:
6e:0e:91:8c:fb:01:0c:db:65:70:b9:a1:26:3e:98:
48:aa:83:62:de:74:86:22:b6:68:a6:a0:b5:77:62:
7d:87:83:b8:7f:69:92:8d:3c:a3:c3:ff:66:55:a7:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:C2:BF:AA:0D:82:E7:44:29:E2:1F:89:18:FC:DC:6C:3F:50:02
X509v3 Authority Key Identifier:
keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:49:b5:54:44:33:b6:55:8f:b5:fb:55:d8:34:9f:e5:56:9b:
be:47:dc:c8:0a:ba:47:8e:fe:fc:d4:ff:a0:d6:15:4b:c2:b9:
af:01:ec:a9:df:33:50:39:b0:94:25:79:8f:d5:7c:e5:29:2a:
db:72:85:7b:12:b8:dd:75:4b:60:68:b6:0e:4a:04:ac:01:7a:
58:29:ab:8d:0c:12:a5:9e:83:49:50:6a:fa:34:de:22:b8:b7:
52:36:b4:4a:aa:64:41:f1:d6:cd:50:06:ae:5e:db:a4:aa:93:
71:22:55:d1:2e:90:35:5b:f2:c7:ab:6e:20:f6:4d:6b:53:b9:
73:f3:0d:a6:57:ab:71:07:cf:d9:52:6d:51:cc:52:52:f3:29:
8d:5c:19:1a:62:04:c1:98:1d:d8:8b:5f:8d:c2:42:d1:7b:ea:
65:d7:a4:fe:71:b8:5f:40:22:9c:88:a0:8e:74:91:1b:e0:83:
a7:9b:79:7c:e5:a1:5d:7b:f3:63:7b:cf:aa:0e:27:c4:83:16:
11:02:65:ab:5c:a1:65:59:97:1e:98:9a:2a:63:0e:dc:3a:9e:
3d:9a:1a:a7:4c:93:bb:f2:1e:6f:68:6a:c9:ce:6a:2f:f1:ac:
d1:22:9b:bd:f5:5c:d1:a7:0f:53:be:88:1f:82:e6:a9:2d:89:
be:fb:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:05 2025 by rpki-client