Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: jXJqF4VlJOgDTquSVSOUYAPtZjEyfz4+NP8zgRrcwO4=
Subject key identifier: E3:97:66:C7:D8:0E:1B:40:95:B3:17:A9:EB:88:E9:A7:77:96:9E:6C
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 01960F0DF49B020E4A3117370955E0EFCD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0702
Signing time: Mon 07 Apr 2025 07:01:34 +0000
Manifest this update: Mon 07 Apr 2025 07:01:34 +0000
Manifest next update: Tue 08 Apr 2025 07:01:34 +0000
Files and hashes: 1: PbquhIW9zV3GTwFfHVfvcLv6xJw.roa (hash: aemUH4PS/FSjfL3HdRU+EJA2H9Gd9sGg3EwGKTMzK9w=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: GGlBifiYaTl1ODONAy9R2Womh2ZoPbI/InTQ1BMEEbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:f4:9b:02:0e:4a:31:17:37:09:55:e0:ef:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Apr 7 07:01:34 2025 GMT
Not After : Apr 8 07:01:34 2025 GMT
Subject: CN=e39766c7d80e1b4095b317a9eb88e9a777969e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:15:e0:48:ea:87:3a:9c:aa:e0:1c:dc:b0:
cb:3b:ac:50:f0:24:2e:35:a2:ac:fa:59:a2:e7:d0:
a0:c7:e7:e5:49:f3:dc:7a:1a:8a:54:21:c7:84:09:
2d:a3:79:c6:fe:0a:86:6f:ad:29:6b:44:fa:7b:c1:
83:bb:6c:4a:7b:bc:de:8f:90:87:14:9d:f1:40:fc:
f5:05:a9:e4:68:ea:55:9b:7e:ce:a6:dd:26:1e:2d:
bb:2e:31:d2:78:e8:51:78:12:3c:67:2f:ae:64:c0:
85:16:cf:7f:33:cb:87:fb:59:39:92:b0:47:53:59:
4d:6a:15:7d:04:fb:c9:eb:a2:30:e1:7c:db:d1:96:
36:46:25:a1:f8:88:fc:f5:4e:2f:42:e8:16:47:9e:
87:78:0f:61:b8:97:81:18:67:6d:95:94:37:af:5a:
62:31:2d:ab:e2:f9:88:57:b8:df:ed:c6:52:72:54:
48:65:f4:cf:25:a5:e9:61:5d:b7:40:8d:c0:87:9b:
53:48:99:49:92:cc:1d:20:87:c4:d5:58:2a:f6:0c:
a5:9a:78:db:57:3a:82:0d:ed:0f:1d:29:21:be:89:
3c:ee:d1:ff:2d:ea:4e:79:e1:f2:56:93:49:8d:7a:
de:d8:60:7a:3d:55:e0:95:df:35:97:5a:8c:fa:e2:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:97:66:C7:D8:0E:1B:40:95:B3:17:A9:EB:88:E9:A7:77:96:9E:6C
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c4:93:f4:2b:a1:7d:69:80:54:95:58:66:b1:3a:8d:0a:cf:
36:4e:27:57:10:e6:f9:3d:cd:7b:06:3c:f0:f4:20:d9:87:4d:
d7:29:15:1b:7a:39:26:67:5a:a2:39:9c:10:6f:d3:93:58:24:
cd:c5:f8:07:9e:70:7a:cf:51:66:ea:bb:50:dd:05:6a:1a:2a:
71:02:d4:32:a2:35:d4:5e:db:f5:e1:b5:db:68:59:3c:3b:23:
28:48:6d:dc:e8:f8:c7:ec:ed:91:e4:a7:7f:65:e9:57:dc:fc:
d3:3a:48:43:e9:d5:7b:78:9d:61:cb:d1:e0:16:13:4b:f8:b1:
83:e3:be:e3:67:2e:b4:77:dc:7a:02:dd:27:d1:65:3e:d3:88:
6b:8a:07:b5:53:98:8b:e9:39:c1:c8:a2:4e:56:2a:50:91:b1:
75:a6:e4:fa:03:dd:1f:fb:92:36:d8:7b:5b:a3:47:1f:41:e0:
9b:5e:c9:31:df:f9:c7:d0:1e:e9:c8:51:73:e4:b8:2c:d0:52:
94:1b:5a:11:26:54:5a:61:05:b0:16:0f:12:65:0e:f4:e0:41:
23:4d:0e:da:78:58:ba:28:36:f5:39:43:14:cf:6d:82:de:fe:
00:85:e2:b0:7e:5c:a5:17:7c:42:89:f0:61:c6:88:c9:93:76:
1a:a5:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:43 2025 by rpki-client