Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
File: wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft (raw, json)
Hash identifier: XayNZLc6MfIyzaImvjg4G1XPkLuoGDhwuO+aZjCS1DU=
Subject key identifier: 8A:27:99:C2:5B:CC:0D:B1:72:7A:FD:A7:6A:68:B9:6A:81:54:35:88
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Certificate issuer: /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial: 01964FDA0AE7287542400BBA4A2E406A9665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 21:00:11 +0000
Manifest this update: Sat 19 Apr 2025 21:00:11 +0000
Manifest next update: Sun 20 Apr 2025 21:00:11 +0000
Files and hashes: 1: uOmu1u-0cx95qJdb2F6OqNW0AyI.roa (hash: T1ZCPSydqXCfxYKH+M6++cGYvIdpSTMuo8K8u6PSUYU=)
2: wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl (hash: JzaOn+FXzdFXA+SLxFMuqaLOCgv1S7Y1AXsenES42bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:0a:e7:28:75:42:40:0b:ba:4a:2e:40:6a:96:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Validity
Not Before: Apr 19 21:00:11 2025 GMT
Not After : Apr 20 21:00:11 2025 GMT
Subject: CN=8a2799c25bcc0db1727afda76a68b96a81543588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:a3:2b:f0:f8:ea:fa:1a:77:0d:ef:0e:7b:
39:42:49:9f:cc:4c:45:52:7a:cb:7a:98:11:bc:c5:
cf:30:ce:83:9d:06:2e:10:7e:70:7b:6b:33:93:30:
f8:a5:69:33:d8:69:14:56:04:2a:05:a8:52:e1:7d:
fe:c8:0f:5b:4f:ee:3a:dd:42:bb:f0:64:7d:25:ca:
2f:a7:c7:8a:6f:25:b2:78:90:52:3c:7e:d4:d0:50:
dd:22:1a:85:09:45:33:e2:aa:7d:8b:89:b3:aa:ea:
27:12:00:58:ca:2c:aa:49:d5:8b:27:d6:ff:02:f7:
91:ba:dd:91:dd:fd:4c:d4:d7:6d:33:8d:e3:95:9a:
c1:0a:73:66:a1:c2:ce:32:3f:57:c7:13:5e:f7:b6:
a3:b1:19:91:d3:7f:34:0b:e9:07:ee:34:c0:0a:8e:
79:74:3d:92:31:6f:0e:a0:e0:15:49:21:ed:2c:69:
c6:bc:c2:dc:cc:71:f7:9c:ff:29:53:bd:51:87:0b:
53:85:82:c9:7c:00:51:0c:82:8c:5f:a2:db:a0:8f:
45:85:70:39:19:eb:da:81:55:e6:ed:33:cf:df:2e:
4e:0e:bd:5e:59:b2:2e:9a:c6:95:71:3d:26:8b:bb:
66:87:1f:16:f8:8f:f7:30:94:73:f6:74:78:3d:91:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:99:C2:5B:CC:0D:B1:72:7A:FD:A7:6A:68:B9:6A:81:54:35:88
X509v3 Authority Key Identifier:
keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:04:90:4d:f7:fc:7c:1b:2b:66:16:fe:eb:ab:09:a8:34:99:
09:67:f8:9a:de:9f:d5:6f:d8:fc:04:b1:2c:e5:d8:ea:09:c3:
be:b7:6b:a5:b5:7e:3e:05:ff:7b:9e:22:e1:52:a1:d1:c6:73:
4b:f0:b1:6e:4f:e8:ec:0e:04:a7:c9:d2:44:7a:04:33:48:c7:
af:0a:e7:a0:b0:3c:f3:44:77:81:be:2d:34:5c:ce:86:2c:ee:
e1:e0:70:38:61:eb:f7:31:2d:3c:18:9a:ae:65:05:d8:bc:bb:
63:12:b5:da:55:bb:3f:cc:ef:84:0e:ae:8b:4e:13:d0:56:57:
4a:ef:0c:99:95:92:73:38:92:85:d2:ab:8b:54:f1:f6:81:2b:
62:df:45:f1:d2:42:1f:23:fd:fc:00:93:4c:2f:24:96:a9:9e:
e1:b9:04:ca:eb:63:5b:de:4e:6f:d9:40:76:01:d8:55:e4:a3:
86:b4:5e:c4:fc:4d:02:e4:2d:a1:83:8e:be:6c:95:49:a5:45:
2c:62:03:70:88:00:ce:63:6a:55:b8:2c:b9:c8:05:56:53:9f:
b1:f7:e1:44:e7:c0:ed:41:91:56:f8:ce:a9:f4:e2:aa:62:07:
26:06:5f:d4:e3:cb:dd:41:aa:d2:cc:4c:77:53:60:0e:06:1c:
39:01:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:18 2025 by rpki-client