Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: fYzNR3TJzqpyb6y2/D0BoC5yxVs1AjgBiLzCr7zsXuU=
Subject key identifier: CB:FF:C2:CA:EC:FF:93:AE:14:6F:0A:AC:40:24:D1:56:B1:17:50:62
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 019656B815028A86C48E89BE1272A2E6C3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 107B
Signing time: Mon 21 Apr 2025 05:00:26 +0000
Manifest this update: Mon 21 Apr 2025 05:00:26 +0000
Manifest next update: Tue 22 Apr 2025 05:00:26 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: 9oUyOhRwR/hLdJVnanH4d6lH71zwykug/cxtAFDYODc=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:15:02:8a:86:c4:8e:89:be:12:72:a2:e6:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Apr 21 05:00:26 2025 GMT
Not After : Apr 22 05:00:26 2025 GMT
Subject: CN=cbffc2caecff93ae146f0aac4024d156b1175062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:5d:34:ab:96:d6:0a:4d:4d:b9:8c:ca:5e:
e4:29:ee:c0:6a:55:d0:24:b1:ef:a3:36:5e:62:7e:
0e:92:21:56:55:d5:34:ef:a3:b4:c2:64:ff:f9:91:
e4:8f:5e:0b:c2:f1:6d:ee:b0:52:48:e7:09:39:00:
fe:03:85:17:47:58:2f:72:59:ff:29:0f:17:3e:e2:
ad:f5:e8:b0:1a:c8:13:9c:6b:6b:71:b9:bf:ed:27:
9b:7c:bc:20:a6:57:eb:3f:ab:19:a9:a6:b6:31:89:
0e:68:e3:72:ad:5e:54:ae:04:28:d1:d4:7a:06:96:
3e:3f:17:aa:df:eb:86:7f:5b:b7:01:fb:00:82:1f:
93:40:91:1d:dc:bb:7f:de:5d:9f:3d:45:fe:e9:ef:
d3:b4:83:a8:67:41:2c:86:13:a2:46:7c:d7:99:39:
61:dd:e6:19:f5:4d:05:30:6d:44:a1:91:1d:db:4c:
fc:60:51:d4:07:f1:a0:09:bc:df:46:b5:d8:d6:7c:
76:3a:c2:ba:1b:fe:c4:b6:71:3f:df:4f:4b:18:99:
4c:c9:e3:47:45:bd:85:c1:73:9a:7f:54:38:ca:15:
9b:67:4e:13:79:17:6b:87:6d:d6:31:34:8f:e4:ea:
3e:84:72:89:7e:71:f8:ac:72:91:9b:53:3f:2b:98:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FF:C2:CA:EC:FF:93:AE:14:6F:0A:AC:40:24:D1:56:B1:17:50:62
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:46:e8:b0:0b:87:02:90:f1:c1:41:4f:f4:01:c8:1d:df:
00:e4:03:3e:ea:65:49:e0:2b:d3:46:78:45:15:55:94:a6:cc:
28:f0:ec:9a:d4:c4:25:d0:08:9d:f1:63:8e:9b:60:4f:a9:de:
d7:aa:96:84:5d:e7:5e:61:e7:97:33:ba:76:50:bc:a7:5d:cb:
88:44:e3:cf:ab:7a:1c:b2:d8:12:bd:fd:66:b9:08:17:65:7b:
a7:0f:aa:f7:0c:56:8b:2a:b8:51:35:9f:c7:19:75:7c:c2:58:
d5:7d:fe:72:cc:1d:32:87:8d:29:23:8a:40:78:c7:b3:dc:04:
d5:23:15:82:8c:41:d9:f7:7c:55:88:45:ba:c9:53:d3:31:6b:
93:cf:15:6e:79:76:c8:d3:df:b5:19:07:8f:79:cf:03:8a:18:
08:91:82:13:d6:37:14:13:47:ac:ca:0e:4c:f9:91:3a:8b:51:
92:2b:f5:1b:e2:25:b3:d8:e9:63:37:f2:9a:83:e0:43:f0:78:
b3:43:78:53:1c:cf:ef:dd:b3:8e:fc:45:56:d4:26:5f:6d:35:
6b:5b:61:a9:13:ff:bd:7e:fd:df:09:9c:0f:bc:ea:93:68:e0:
5d:c4:49:62:dc:a3:55:98:71:2a:0c:b1:79:6d:b3:20:b7:2e:
d4:b3:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:45:56 2025 by rpki-client