Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: 3FQb4hijl/OtBEbuRpd8C8z3LoWWDPPRyvkbICo9M0I=
Subject key identifier: 91:43:73:54:76:69:A1:7B:E7:D7:9A:98:6B:E3:79:CD:0D:AC:A7:92
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 019652365419147F4C5BF3B4B311B44E6642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0DD0
Signing time: Sun 20 Apr 2025 08:00:14 +0000
Manifest this update: Sun 20 Apr 2025 08:00:14 +0000
Manifest next update: Mon 21 Apr 2025 08:00:14 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: 2yHWPgHddNdP2Ij9A5e4OMF4t/r1wpls9YGW3Y8Vjjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:54:19:14:7f:4c:5b:f3:b4:b3:11:b4:4e:66:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Apr 20 08:00:14 2025 GMT
Not After : Apr 21 08:00:14 2025 GMT
Subject: CN=914373547669a17be7d79a986be379cd0daca792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:4f:02:4c:5d:a1:c3:35:7f:7c:5e:d9:ea:
11:84:72:49:8b:81:18:9e:6d:1f:6b:48:52:42:9f:
c7:65:f0:16:fe:a1:ab:94:1e:17:22:20:c6:7f:94:
7f:3e:b1:9d:32:c5:51:73:56:bd:71:6d:44:f5:92:
44:0f:45:44:e8:9b:a5:46:f8:f9:2b:7f:59:88:8f:
cd:a8:27:5f:c6:a3:d2:08:b4:08:e8:13:fe:6f:f9:
93:69:77:5e:59:96:b8:24:69:98:f3:d6:1b:69:6d:
ff:f5:ca:57:cc:a1:15:43:f4:21:75:c6:53:13:e7:
63:3d:b3:b5:1c:d4:00:f3:1e:e1:d8:61:01:48:39:
e3:86:a9:8d:9d:a5:ea:b9:59:95:2f:df:38:bc:33:
c6:35:58:20:1e:43:e0:cf:3e:bf:40:a7:05:06:ae:
fb:65:60:c6:85:1e:fc:73:3e:67:bd:10:fe:8d:d7:
eb:8f:0e:ad:5c:c8:01:23:c9:67:f7:0a:34:63:c0:
ff:84:7a:2d:9a:2c:be:e6:fe:82:8b:82:80:cd:20:
d2:e0:9d:86:87:75:79:6d:4b:c2:fa:c3:ab:27:41:
9a:c6:ae:5f:30:8b:c0:72:6e:c2:01:5a:03:c1:5e:
63:ce:0c:17:ef:8a:7d:5f:32:1b:b6:24:ea:e1:2e:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:43:73:54:76:69:A1:7B:E7:D7:9A:98:6B:E3:79:CD:0D:AC:A7:92
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:32:43:f9:ac:a5:d2:ba:a1:dd:d5:bc:2c:cb:21:41:85:01:
07:3d:97:54:ae:b9:79:6a:89:e5:b1:ad:80:62:37:ed:a5:98:
ab:16:6a:04:19:70:ee:82:43:8f:82:ad:59:7c:80:46:f5:4c:
aa:ab:e4:83:08:fd:35:d9:15:21:92:9b:f5:6f:2e:d5:e1:40:
86:c0:2f:27:5a:16:7d:92:89:1d:d8:28:fe:f8:cf:63:a3:32:
48:12:74:2b:03:48:e1:f4:80:fe:33:48:ce:36:02:73:18:53:
63:51:ef:9b:b2:b0:fd:7d:e6:2d:20:35:7a:1b:26:51:00:db:
eb:09:fa:88:87:a9:62:bd:1b:62:07:3e:fa:3d:7d:bf:9c:b2:
aa:18:c7:d6:63:72:83:c8:79:bd:5b:93:2d:f8:60:00:3c:39:
fd:a6:2e:e9:72:5c:a2:3e:3b:27:e9:bc:41:89:f3:bf:54:f3:
61:4e:a7:83:8f:08:68:1d:be:43:ff:ba:39:c6:f7:75:17:cb:
cf:d9:82:c6:72:4f:67:88:f8:d7:6e:10:91:ab:ea:fd:ca:c0:
00:6f:5d:cc:d6:6a:4c:62:cf:92:52:35:32:1f:a8:bc:af:5e:
a6:e0:74:32:68:c7:77:43:00:18:8c:ee:4e:9d:0b:e8:a2:af:
f0:a5:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:26 2025 by rpki-client