Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File: wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier: KvEok2e3C/C367kOI82OZ75pVPyY/1uy3f5cpZ6bJSA=
Subject key identifier: 8E:03:24:EC:23:FA:AC:1E:D5:4D:12:55:E5:76:08:87:C1:76:83:81
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer: /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial: 01964D7EE3E08B1AA12CB27F4108E2BD7DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:01:23 +0000
Manifest this update: Sat 19 Apr 2025 10:01:23 +0000
Manifest next update: Sun 20 Apr 2025 10:01:23 +0000
Files and hashes: 1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: O7HFakQeJwUsertZ1WU06lvhxutjjFyYrh4KRDSeyW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:e3:e0:8b:1a:a1:2c:b2:7f:41:08:e2:bd:7d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Validity
Not Before: Apr 19 10:01:23 2025 GMT
Not After : Apr 20 10:01:23 2025 GMT
Subject: CN=8e0324ec23faac1ed54d1255e5760887c1768381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:5b:9f:74:30:51:d1:b1:2a:2c:ee:36:81:
e5:be:0a:d5:4e:11:00:f8:00:88:fb:17:5c:55:2c:
21:04:23:04:a8:5b:0f:83:66:31:69:41:42:d4:59:
e0:88:dd:f2:41:2e:6d:f1:a9:a8:5a:f6:a3:71:02:
8f:aa:ed:48:fc:54:32:49:3e:e6:e9:1a:87:b9:d5:
25:c9:89:85:10:01:db:a8:a4:fa:1b:fe:06:9e:69:
a8:39:cf:53:06:a6:46:b9:9f:f1:96:ff:b7:e5:cf:
0a:d8:d4:e8:95:f8:da:26:03:96:ff:40:db:a7:d7:
b1:e8:f6:6c:39:38:1a:e8:e8:e6:96:d9:ea:7f:79:
44:13:f4:18:fb:a4:9e:fc:c4:7e:e0:80:45:88:f4:
c2:9e:73:20:39:72:7e:a8:0b:13:b1:bb:f9:36:bf:
88:ac:b7:63:21:e5:b2:cd:c0:30:74:4d:ca:0f:05:
6f:e9:70:0e:5b:92:eb:27:df:6e:91:dd:0e:8f:08:
6d:50:50:30:90:0f:f1:90:57:74:a3:7f:1f:8a:37:
76:32:9a:7b:06:c5:01:d8:44:3b:93:d5:ad:e0:64:
71:d9:89:91:75:43:26:8f:ff:b3:ed:35:c2:c4:d6:
0d:ae:d7:e2:02:23:db:96:68:55:54:3c:66:51:ec:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:24:EC:23:FA:AC:1E:D5:4D:12:55:E5:76:08:87:C1:76:83:81
X509v3 Authority Key Identifier:
keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ce:ab:28:58:ac:64:cb:a6:4d:08:ba:29:11:68:c3:a7:3f:
bd:e2:5e:dd:49:a9:cd:11:99:c0:f2:f7:06:dd:81:2d:f8:e9:
5f:57:90:56:f7:21:67:e3:dc:61:bb:f0:05:a2:d7:1e:5f:d1:
ac:92:7c:bc:04:93:23:80:ef:2b:24:79:b8:d4:19:9c:97:3c:
4d:d3:95:df:56:5d:fd:88:82:63:14:cc:f4:e9:23:5e:69:da:
5c:82:61:26:7e:9c:44:6b:c3:78:1c:bc:c3:df:22:08:aa:93:
a0:1c:56:3e:f1:fb:91:d4:61:e8:41:2e:43:db:a8:1d:5c:43:
f8:5b:6e:69:39:5a:11:09:a1:e6:1c:0c:74:4e:07:7c:01:1d:
ad:44:84:c1:81:fe:45:33:62:83:b0:66:73:19:16:e0:cb:11:
ce:c9:38:a6:0d:15:ff:a6:cb:5f:9c:62:ee:72:e9:4e:cb:5b:
b2:55:38:ec:3c:47:0d:83:b2:cd:32:1f:10:5d:ca:88:30:71:
42:32:9b:7d:6c:79:26:3e:ad:7c:ef:2e:8a:90:d9:10:d8:ef:
a0:2d:a1:b1:cd:00:f5:04:08:fc:65:fa:55:95:7f:a1:c3:e5:
72:1a:92:cb:fd:78:b4:12:0e:ed:08:d7:91:80:8a:45:8a:ad:
7b:1c:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:31 2025 by rpki-client