Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: cQX0EG1huxYQrxao6UItfGigkb2e6O5Ik+iSsU5LeR4=
Subject key identifier: 79:56:68:9C:BC:4D:A3:30:8A:1E:38:7E:A8:94:5C:31:AA:4F:99:B4
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 01959005FD619B81B2DCF01E7A131C243BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 1294
Signing time: Thu 13 Mar 2025 15:01:06 +0000
Manifest this update: Thu 13 Mar 2025 15:01:06 +0000
Manifest next update: Fri 14 Mar 2025 15:01:06 +0000
Files and hashes: 1: 1-NHXjtqrvVrRCtlhC4QnYQDdZPQ.roa (hash: 5tQ4LpDD9EcQQczJTsl4dpwzoP4ak/HQs6biLiGOV3E=)
2: 2UCbDoS3ycyYJJre1asZT-TvgMA.roa (hash: DT/mBjBdX0oTgiUzQgQuXZrljdo+CoIj0mpOVzjBOfI=)
3: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: DQ5d1h55kMVSomxlz/lEZkv6Blw2Pq9InBoi3Tz2+D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:fd:61:9b:81:b2:dc:f0:1e:7a:13:1c:24:3b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Mar 13 15:01:06 2025 GMT
Not After : Mar 14 15:01:06 2025 GMT
Subject: CN=7956689cbc4da3308a1e387ea8945c31aa4f99b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:4a:ec:39:81:51:ac:c1:c7:44:c5:f0:8b:
86:bf:7f:6c:69:dc:ab:84:51:b6:4e:3c:29:80:10:
30:47:62:8d:89:16:ac:a2:a1:4b:00:d8:b8:a8:8e:
1b:dd:75:96:de:e0:70:ff:8a:f1:6a:56:93:94:47:
4c:b6:e5:a7:75:f0:cc:2a:a2:46:33:22:22:a0:0b:
e8:a4:6f:92:f6:d7:b0:3a:d4:b9:78:25:d2:25:20:
e6:f1:b4:0e:1a:56:6a:7e:3b:b3:de:77:c9:72:39:
43:f4:8c:b0:89:91:90:f5:5d:35:12:74:8d:ff:d9:
24:fe:0d:f3:a5:fe:85:de:13:8b:02:65:9a:04:b0:
58:a9:1e:54:0e:59:5e:0e:32:5b:45:d0:fe:18:da:
36:fb:18:95:c5:f7:4b:08:b3:17:c6:22:b9:27:60:
5f:a6:4e:7c:9d:43:83:10:86:1d:f4:3a:d8:f3:15:
d5:62:98:7c:96:73:87:2b:d0:e2:44:0d:e5:13:9e:
cc:97:6a:95:93:bb:44:ab:42:89:ea:b8:2b:3a:0e:
7a:3b:e1:0b:1d:3e:9d:c1:12:12:09:1a:3f:1d:50:
09:f0:cb:6b:f3:34:c6:ed:56:c1:1a:08:9c:5a:a4:
25:0d:cd:4d:65:94:5e:bb:45:92:8a:6d:7b:8f:9c:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:68:9C:BC:4D:A3:30:8A:1E:38:7E:A8:94:5C:31:AA:4F:99:B4
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:74:cf:8e:a9:ad:7b:b4:6b:18:0c:6e:f6:2c:46:e3:fd:83:
1c:e2:47:6e:77:c7:49:28:68:0f:23:a7:59:d2:02:8c:e2:5b:
17:72:a9:fc:a4:52:2b:cb:6e:b8:14:66:04:ad:60:e0:a8:42:
2f:9c:37:62:5c:d7:62:7d:0b:f6:30:f7:8b:dc:a7:9e:d5:49:
47:6d:7e:98:3e:b2:c5:68:ad:df:27:ed:00:2e:cc:33:a0:29:
8b:54:d1:f9:f7:2f:22:0c:ff:7d:3c:1a:b4:e7:3b:50:e0:0e:
d8:18:59:c2:9a:e2:98:af:81:a8:bb:e7:3a:3f:d9:66:5c:21:
e1:bf:6d:cf:1c:9e:b8:fb:87:e6:1e:6d:ce:71:1f:4e:ec:5a:
4e:fd:fe:cd:e6:8c:68:60:bd:50:fa:98:a0:59:d6:37:6b:39:
5f:39:0d:06:8c:48:15:f4:26:01:79:74:10:67:b4:bb:42:12:
1f:c2:c9:14:95:00:8a:3b:62:18:a5:59:16:db:fa:b6:9a:87:
58:74:83:e2:22:81:f5:bc:98:58:0a:1c:ed:82:b0:14:49:5c:
50:14:f6:af:bb:06:ae:93:72:88:eb:9c:48:ee:a1:e9:f2:6e:
ff:e1:05:5c:c7:35:e5:f0:a0:80:b5:96:4e:77:a5:26:0c:7d:
9c:09:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:52 2025 by rpki-client