Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier: SlDM/Cm2UqxGS7Mn3ozCbHeDZUq8op+O00CHTP6R0g0=
Subject key identifier: 6D:CA:08:51:0A:8D:8A:B2:10:CB:66:67:68:45:8D:CC:47:A4:29:02
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 01964B222FB995C230D6110075BB74585822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number: 0854
Signing time: Fri 18 Apr 2025 23:00:53 +0000
Manifest this update: Fri 18 Apr 2025 23:00:53 +0000
Manifest next update: Sat 19 Apr 2025 23:00:53 +0000
Files and hashes: 1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: n3+Afo+SN1DqGGrzMzemo/IlG6GfiV017CPUmvDp27U=)
2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:2f:b9:95:c2:30:d6:11:00:75:bb:74:58:58:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Apr 18 23:00:53 2025 GMT
Not After : Apr 19 23:00:53 2025 GMT
Subject: CN=6dca08510a8d8ab210cb666768458dcc47a42902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:fd:17:9a:e6:97:44:f6:fe:67:9a:57:76:
81:8a:b2:1e:90:7b:5d:ae:ca:d5:77:43:20:65:ef:
70:dd:7d:ee:7b:29:f8:ae:3a:55:7c:60:0e:34:b2:
b4:ac:b8:b9:d7:f8:20:dd:ad:f9:03:65:84:b7:a1:
2b:a4:01:b0:3d:fc:91:56:77:63:e9:a9:a4:97:9b:
79:86:32:19:2b:30:b3:08:d4:d1:14:36:3d:e2:be:
f9:2a:b7:e4:5d:dd:68:ac:9d:db:e2:55:58:2d:23:
84:15:f4:25:76:84:9c:2f:1d:4c:85:99:23:9b:3a:
7d:da:d2:05:e9:6d:d0:c1:80:dd:92:c6:42:4f:4d:
93:11:7d:0d:69:46:7e:2f:2d:84:1a:27:51:f2:bd:
54:9e:e0:46:a0:ad:09:92:be:ad:31:6c:31:02:68:
d0:d6:c7:18:c1:46:33:d8:76:83:36:41:62:2b:94:
be:d6:3e:8e:67:01:19:7a:52:ed:b4:ad:fd:41:b8:
f2:ff:5c:0e:92:e6:c5:85:15:dd:6b:a2:f4:b5:40:
a9:e8:4b:80:f2:a2:46:be:4a:a8:1f:30:eb:e3:0b:
6f:ac:a8:1c:8a:fb:25:35:3e:80:b4:f9:c0:20:e1:
c7:b4:1b:76:8f:c8:8e:69:ae:f0:6e:22:9f:ab:fb:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CA:08:51:0A:8D:8A:B2:10:CB:66:67:68:45:8D:CC:47:A4:29:02
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:ef:eb:f9:69:ac:92:de:08:5b:68:5c:33:0a:51:94:3e:
f3:da:98:38:00:37:ff:ee:c5:24:2a:de:e9:cf:c8:48:2a:d4:
7c:20:0c:81:3c:bd:71:0f:74:8a:d3:82:f6:18:b6:58:12:21:
8d:97:b8:3d:b2:82:0f:6f:2d:d9:85:d9:8e:75:92:11:ea:e2:
7c:90:d1:b0:c1:7a:21:9c:82:72:51:c1:fe:51:9f:b8:42:0f:
47:ef:bb:13:27:59:19:40:0a:8f:20:14:89:ab:4b:64:f4:0c:
ee:71:50:32:15:09:ff:d3:3d:4d:bc:98:41:89:af:1d:4f:37:
c1:42:d6:db:ba:13:04:5c:d6:2f:45:c9:58:6c:12:f4:6c:69:
89:21:6c:bd:e3:d6:33:47:61:b9:68:ff:c4:d7:cb:b3:dd:12:
f5:e8:b0:95:42:51:cd:3a:32:02:21:98:fd:6a:e8:7e:69:3a:
6f:1e:59:6d:a4:80:1c:1d:89:85:8d:ee:ac:e5:29:2d:ac:c5:
0d:75:56:47:88:51:9d:6b:e6:34:d7:c9:8c:b9:3e:02:e6:e5:
c7:d0:42:a4:f0:23:76:26:50:9d:f4:f1:6e:a1:57:38:02:89:
51:aa:de:ce:25:49:70:d8:5e:08:08:b6:56:0c:0c:22:f3:9f:
04:b1:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:43 2025 by rpki-client