Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File: wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier: Du/s9BZTXDCi8jbUphyADIACQMFAlNtifDTxR09nKZ8=
Subject key identifier: DF:21:A9:C1:26:FE:7C:42:C1:AF:FF:D7:7F:3D:FA:1F:B9:76:4B:BB
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial: 0196556E505E6024B03B5BFC83ECCF4F3CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 23:00:14 +0000
Manifest this update: Sun 20 Apr 2025 23:00:14 +0000
Manifest next update: Mon 21 Apr 2025 23:00:14 +0000
Files and hashes: 1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=)
2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: 9T23atal8mqsUOYFP/1DOpf9fh2iWIlNN++7ONt5QM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:50:5e:60:24:b0:3b:5b:fc:83:ec:cf:4f:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Validity
Not Before: Apr 20 23:00:14 2025 GMT
Not After : Apr 21 23:00:14 2025 GMT
Subject: CN=df21a9c126fe7c42c1afffd77f3dfa1fb9764bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:ce:24:a6:6c:21:69:18:0b:67:48:64:25:
83:b6:37:e8:d4:69:5d:19:81:e1:e0:7e:07:d8:41:
ab:f1:eb:82:ca:79:4e:4a:4e:3e:6a:ba:3b:dc:73:
a6:cd:e1:3c:4c:7f:88:eb:34:f7:94:fb:bc:bd:09:
18:84:65:2f:5f:6c:ac:b4:45:99:e8:e1:3f:dc:3d:
c4:06:82:27:79:e7:f7:a3:f0:57:d3:7f:49:99:fd:
d2:95:7a:c4:65:66:4f:c4:68:46:c7:8e:f8:e2:27:
ae:f6:84:03:16:d2:24:c5:f1:9a:c6:14:9b:42:8a:
2c:14:c3:a0:a6:c9:a3:e2:8a:99:46:b9:7b:d2:d8:
cd:3a:20:6c:7c:4b:86:79:7a:38:74:37:c7:1d:a2:
49:4b:aa:05:7a:10:fd:6b:e3:92:a6:78:29:14:6d:
ea:9e:00:13:93:59:4d:7a:f7:89:0b:a1:b8:be:06:
c5:8b:e8:17:09:a9:1a:b8:83:cd:5a:c8:ab:22:21:
16:8e:5f:56:64:9e:30:ae:3b:57:4b:93:cf:76:94:
5b:a6:3d:c5:e2:74:98:d6:86:3a:27:57:30:0e:cc:
87:f2:56:8e:93:1f:30:de:54:88:db:39:27:31:67:
d0:6a:17:9f:1e:e2:fb:50:4e:29:e7:7c:58:86:ed:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:A9:C1:26:FE:7C:42:C1:AF:FF:D7:7F:3D:FA:1F:B9:76:4B:BB
X509v3 Authority Key Identifier:
keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ef:38:c9:c1:16:c6:53:7e:67:fb:bf:70:99:33:ef:31:b7:
8c:fb:8f:a7:e3:2c:d6:5c:47:ac:ce:45:b4:bb:be:45:bf:e1:
9f:93:e4:c4:d1:0e:ad:cf:2c:65:12:e2:11:39:64:f3:3f:ce:
e7:5f:fa:20:d9:e2:47:17:2d:f0:59:74:3b:a9:bf:3f:2c:0b:
92:5d:b2:86:05:cb:97:3c:02:c9:fb:a5:9f:3b:48:a6:65:93:
76:d0:5e:1d:ab:e2:2b:24:31:55:cf:59:b0:8b:ef:0e:fc:fc:
9d:ae:ed:ba:22:fe:d4:2d:b7:11:6d:b3:c0:15:fd:3a:a6:a3:
5f:98:61:a4:ba:07:12:60:32:81:f9:94:12:04:11:68:6a:1d:
53:5a:c2:87:d6:ca:ff:7c:f2:8f:ef:97:28:ed:e9:74:7a:ba:
70:4d:0a:9c:ac:48:ea:34:19:8c:2f:e6:0d:77:d1:49:bd:b9:
2d:60:e4:b5:d6:14:69:00:a6:cd:5b:42:19:76:d8:7e:f3:3f:
ec:ed:8a:81:66:ea:bb:74:50:d1:bd:74:a3:a3:18:32:78:b7:
85:b3:80:bb:f0:1d:3b:14:1f:cd:10:ae:95:ca:22:86:77:e7:
19:c5:50:cf:f7:ce:b0:0b:a0:35:72:d5:ff:b7:4a:88:77:3b:
3b:99:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:13 2025 by rpki-client