Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json)
Hash identifier: CSCBz141S0l7OMlILI39CA13rnUUBVXkKtLaUGmPIz4=
Subject key identifier: A7:94:28:8F:1F:53:33:92:2D:4B:CE:8F:40:0B:A2:C8:F4:CC:8E:BB
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 01965801ED216F1C4CA063226139D564BE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
Manifest number: 147A
Signing time: Mon 21 Apr 2025 11:00:43 +0000
Manifest this update: Mon 21 Apr 2025 11:00:43 +0000
Manifest next update: Tue 22 Apr 2025 11:00:43 +0000
Files and hashes: 1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=)
2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: VPnST+PILpRjtGn4o4fYG2hhSIo86hC1HF3S/2G/13I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:ed:21:6f:1c:4c:a0:63:22:61:39:d5:64:be:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Apr 21 11:00:43 2025 GMT
Not After : Apr 22 11:00:43 2025 GMT
Subject: CN=a794288f1f5333922d4bce8f400ba2c8f4cc8ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:41:75:ed:da:3b:67:36:74:ff:b6:db:1b:
cb:1f:76:f0:1a:6f:bd:bd:38:38:27:8b:31:5d:2c:
d8:ea:41:ad:b4:4a:b3:8f:68:4d:5e:c9:a2:ae:5d:
35:95:d6:c3:2e:d7:ab:d9:86:58:1b:1e:15:16:ee:
9c:2a:e5:c2:bf:bd:01:b9:f8:86:fd:4f:3c:80:a5:
e3:dd:0d:6c:68:e8:06:36:c2:ad:04:a0:ee:07:21:
e6:4b:4d:bb:01:f3:98:d4:3b:cc:9e:3f:57:cd:87:
54:51:56:f1:70:a0:ab:f2:0b:bb:aa:c2:05:73:e9:
13:7d:e9:b1:7e:1d:95:df:5c:ff:ed:93:8c:12:05:
3c:8d:7e:ca:ad:c6:6e:84:b5:70:c7:39:53:b2:e8:
38:f9:36:f9:a9:bf:9e:0b:60:64:b7:f8:6d:26:80:
47:80:fd:4e:f4:ab:66:1c:9b:08:10:54:0a:cf:c5:
1c:12:5d:f8:c8:b2:49:aa:90:2e:e8:9e:80:6b:43:
ed:08:04:58:ed:aa:39:eb:c2:7f:f9:bf:a3:d3:16:
f4:01:c1:53:ee:2e:a6:2d:7c:44:7c:1a:45:af:98:
6f:30:82:a2:78:4d:88:4c:e6:40:a4:ff:53:59:66:
cc:82:d1:51:c0:52:9a:2d:a1:d1:03:82:33:ef:9f:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:28:8F:1F:53:33:92:2D:4B:CE:8F:40:0B:A2:C8:F4:CC:8E:BB
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:aa:72:6d:f5:40:08:ad:dc:63:48:de:0a:e0:a8:5d:82:36:
10:99:1a:f5:85:15:26:d9:56:04:5a:92:3c:30:28:5e:f7:51:
16:ec:bd:3d:b4:30:be:f2:c5:6b:bc:2b:18:c8:7b:0f:b3:47:
03:40:de:78:49:0b:ec:75:b4:58:a4:01:98:b0:ae:87:cc:48:
8b:4c:fc:b2:56:bd:8a:f0:e1:8d:de:39:9f:bd:c0:af:5b:d6:
92:f6:a2:c9:d1:7a:ca:d4:50:12:30:e1:36:4d:78:df:c8:72:
01:03:69:ca:39:cd:29:1f:8a:15:63:2f:be:be:39:a5:33:bc:
60:bb:94:af:bd:d0:57:cc:72:85:24:af:b3:03:4f:31:7d:b3:
b0:3c:e6:b8:b0:f6:a4:3f:10:e9:d5:04:74:11:a1:3a:e2:cc:
43:97:95:ea:3e:1b:f9:80:0d:9a:91:8e:82:b2:77:d6:e0:89:
0a:b3:a9:4e:ec:70:54:90:18:49:87:14:0a:a1:63:66:a9:bd:
dc:24:c5:83:2c:54:32:cd:ae:53:24:67:96:a1:f9:e8:33:49:
c3:c0:30:d2:5b:29:d5:66:a3:3a:e9:e6:28:3a:1f:d3:77:20:
37:b8:67:e2:ae:cc:8a:44:eb:38:93:5e:d1:58:fe:9e:fe:21:
c6:40:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:25:07 2025 by rpki-client