Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: mpX67RESEO/YBujUfNEHD5MSL99TqKkyP93ArnzazCQ=
Subject key identifier: 9E:14:7F:AD:9F:6D:8B:8C:68:B7:BA:4E:F1:91:61:D0:6A:B7:18:AD
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 01958EF39676EAB137F346661A46E85C12C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 0322
Signing time: Thu 13 Mar 2025 10:01:23 +0000
Manifest this update: Thu 13 Mar 2025 10:01:23 +0000
Manifest next update: Fri 14 Mar 2025 10:01:23 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: vrC+IdxTzuokIBOWEPHW4jegz4hC18kXdnrQGbOm+q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:96:76:ea:b1:37:f3:46:66:1a:46:e8:5c:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Mar 13 10:01:23 2025 GMT
Not After : Mar 14 10:01:23 2025 GMT
Subject: CN=9e147fad9f6d8b8c68b7ba4ef19161d06ab718ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:1f:41:f9:87:81:9b:cb:30:1e:b8:44:5b:
00:ac:e1:a2:db:ab:f0:7b:e6:c7:29:11:8e:26:81:
97:8f:e4:eb:9d:f6:e7:9c:5a:f1:11:e5:e9:08:26:
a4:b6:e0:f6:ab:41:0a:45:9e:f0:eb:db:df:19:5f:
c2:d8:68:50:a6:c2:c0:f7:28:61:72:cc:37:19:94:
a8:1a:20:45:70:7f:43:31:96:12:2f:54:51:66:ab:
35:06:c0:82:4d:fb:4e:04:3d:69:83:44:72:ee:95:
ef:86:01:8e:a2:8d:98:5b:c3:d3:40:0d:d0:9d:09:
d1:d8:ea:6c:e5:c9:4d:d3:90:85:23:b5:07:98:51:
83:d9:c4:ab:f8:ea:58:bb:4b:d6:9c:ab:13:b0:83:
50:2d:63:b4:2b:c5:ab:69:74:78:97:73:77:cf:6e:
3c:0c:4b:d9:c0:74:66:05:30:a5:d4:e0:7d:dc:e3:
1a:0d:67:a1:7c:f8:0b:65:23:39:29:bc:cd:cc:d3:
90:1c:e2:26:b4:6b:86:ee:c1:9e:c6:4e:ba:c4:ea:
48:00:c4:2b:35:c9:89:d0:bf:58:0b:ae:9e:11:63:
54:2d:51:c6:90:12:2e:31:99:78:04:58:06:38:ad:
ca:e7:bc:03:e5:e4:0d:84:7b:74:27:61:a5:cd:4e:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:7F:AD:9F:6D:8B:8C:68:B7:BA:4E:F1:91:61:D0:6A:B7:18:AD
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:36:94:09:a6:36:24:e3:3c:80:ed:2a:0b:19:6c:2e:ea:8c:
38:e8:96:d5:43:a7:50:9a:26:98:6b:34:dd:20:e0:50:0b:e2:
df:92:d2:9b:10:0f:80:49:cc:ff:7b:6c:b7:f2:24:f8:74:c5:
fb:94:d8:ba:5f:aa:6a:c0:5e:de:e2:aa:91:e5:d9:1c:97:32:
53:ef:3e:16:0a:9f:d7:aa:86:89:e8:ea:06:ea:54:ef:74:1c:
94:df:7c:78:b6:1d:08:c7:00:7b:b0:db:66:f5:aa:ac:45:1b:
af:ea:23:86:9b:b6:7b:08:58:52:1b:68:ba:c0:e2:2f:8b:e5:
ec:18:e4:fd:d0:1c:ee:a6:35:18:36:a5:1a:82:94:56:e5:7e:
3d:73:96:80:07:06:9e:90:5d:c9:4a:1f:c8:21:41:7c:c7:95:
0e:bc:9d:9a:9e:3d:aa:59:28:71:1d:c1:ee:a9:c1:17:89:03:
db:f7:24:b3:dd:fc:cf:c0:e3:d3:e0:0f:1a:f9:0f:ea:5f:5a:
bd:18:11:ed:b0:77:9f:ba:6a:4e:e3:33:a4:1b:e5:87:7b:e3:
04:fe:28:a7:04:16:2f:d0:48:f9:9a:68:b0:55:9c:a8:85:48:
a7:11:e7:47:88:6a:07:16:a4:02:4d:90:0b:fb:b3:48:33:94:
8a:cc:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:49 2025 by rpki-client