Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: B4j4UcfFTLV7pHCBT69jlzy4hLLpXuuqdMvimOqrEs0=
Subject key identifier: BE:A1:BD:B2:DD:DF:CB:ED:61:C7:80:F2:20:9C:86:77:03:E0:07:5B
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 0196542513ADA06159D409B7FEE5881B8414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0BCC
Signing time: Sun 20 Apr 2025 17:00:38 +0000
Manifest this update: Sun 20 Apr 2025 17:00:38 +0000
Manifest next update: Mon 21 Apr 2025 17:00:38 +0000
Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: ZXN6ZlIUwW6hClJL5LxA1UeOW1rkMOA+Ao7Uogn++zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:13:ad:a0:61:59:d4:09:b7:fe:e5:88:1b:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Apr 20 17:00:38 2025 GMT
Not After : Apr 21 17:00:38 2025 GMT
Subject: CN=bea1bdb2dddfcbed61c780f2209c867703e0075b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:50:4f:3b:91:02:73:dc:f1:f7:f9:5d:00:
d4:fe:29:65:42:85:33:84:51:54:f5:e8:7c:6a:e3:
0a:86:69:88:f6:e1:ac:e2:1c:eb:0d:14:7b:f0:2d:
a4:f0:1d:94:84:4c:69:2e:e7:fc:b2:cf:21:b3:1a:
86:c0:fe:d7:0e:5e:22:34:92:f9:c0:c2:10:68:89:
dd:19:d2:ec:f2:82:3e:7e:d4:21:59:94:6f:46:d8:
c3:6b:b1:a3:21:4e:81:f9:71:a5:2c:4c:2f:ce:78:
e2:40:cb:9d:cb:e8:a9:b1:56:43:4b:d3:15:60:db:
3d:22:0a:56:28:79:ee:9c:8e:f8:7b:25:5f:03:ce:
de:a1:84:10:d1:52:06:44:7f:22:4c:dc:41:32:c7:
c8:f7:f1:72:ba:b2:20:f6:c1:52:7f:48:9c:ae:ab:
b1:35:bd:5a:8c:60:e5:da:69:64:25:1b:35:b2:71:
df:2d:90:c4:26:91:d0:0a:9e:69:96:22:ef:1f:9e:
af:a7:fe:7e:2d:75:b4:fd:b1:c9:62:ba:e8:b8:3d:
99:4b:9a:5e:dd:bc:5e:31:1b:dc:85:32:e0:48:8f:
cc:7b:26:c8:4b:5c:60:be:b4:01:f7:97:29:23:3a:
4c:4b:c3:6e:47:fa:ea:e6:87:66:d3:52:25:93:c7:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A1:BD:B2:DD:DF:CB:ED:61:C7:80:F2:20:9C:86:77:03:E0:07:5B
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:59:2c:64:82:15:c4:2f:5f:bf:24:b0:60:e7:56:7f:c0:d8:
62:56:de:50:66:96:e0:2b:87:fa:6b:00:85:54:3d:f5:38:79:
54:9f:c0:93:ee:c4:00:23:34:2e:cd:b8:d8:de:ae:75:fd:f7:
3a:6c:bb:17:48:b4:58:88:5d:cf:a2:f7:b4:db:4b:0d:4e:e0:
e4:9b:e2:d4:65:4a:d9:6b:98:21:a3:45:db:3d:f8:7c:e5:d1:
f8:5a:de:0d:df:5a:16:ec:1c:bf:84:1b:68:da:ea:b4:b5:ac:
50:a1:43:5f:87:c0:2a:4c:ea:18:cd:0e:85:13:a1:78:8d:99:
2c:bf:9a:f8:78:29:75:74:96:aa:f5:56:5b:e6:54:94:a3:46:
35:3b:03:17:e2:0b:5a:b9:9c:2d:b1:63:61:6a:cf:61:ab:20:
41:b9:5f:33:ca:78:2a:d4:1a:09:ca:b9:e6:44:97:1f:06:83:
d9:de:62:03:a6:30:7d:4a:9e:f4:e1:a1:05:2a:eb:92:e0:4f:
68:15:5c:2b:7a:b4:4c:10:78:fc:e0:24:02:6d:9e:f4:48:36:
c0:77:55:5b:e6:c1:20:86:d2:b8:dd:84:d1:37:4e:c7:7c:c5:
19:26:ef:49:59:5e:11:f3:67:3e:41:17:87:b9:2f:b2:60:42:
22:52:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:01 2025 by rpki-client