Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier: Ml3TeOi0eZqCWwOu0+5WdSzEefwAXTjzw89NKCG01ms=
Subject key identifier: 99:F6:4D:C0:72:D6:B9:84:AD:A6:07:D4:40:48:73:B7:BB:0D:39:68
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial: 0196A0BF72C6B9B5055E7887CCC22648F5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 14:00:23 +0000
Manifest this update: Mon 05 May 2025 14:00:23 +0000
Manifest next update: Tue 06 May 2025 14:00:23 +0000
Files and hashes: 1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=)
2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: 3fOfbR78KLxEsXOD4a6LeAMwX1mya0k5tjH/f92UQWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:72:c6:b9:b5:05:5e:78:87:cc:c2:26:48:f5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Validity
Not Before: May 5 14:00:23 2025 GMT
Not After : May 6 14:00:23 2025 GMT
Subject: CN=99f64dc072d6b984ada607d4404873b7bb0d3968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:43:90:85:37:20:4d:87:e3:d9:24:1d:6b:
d9:b0:e7:09:2a:95:68:cf:ab:4e:4d:66:57:64:58:
ba:c2:60:61:a0:19:8c:38:09:f0:51:94:13:ea:9c:
a2:4c:24:a9:2d:14:db:07:66:bf:d0:45:11:63:cc:
89:6e:95:f0:c0:19:99:77:ac:b9:bc:09:4d:dd:cb:
54:8d:e1:1c:11:ef:1a:cd:25:99:b8:c9:9d:da:4e:
bf:52:09:08:47:73:63:a7:99:24:fc:87:69:01:9d:
32:f4:37:36:17:e8:ed:38:32:71:81:9a:1a:2c:49:
e2:c9:3f:4c:cf:9c:ab:fe:31:ff:ee:54:f2:03:d4:
0c:75:85:01:d5:a6:42:39:63:fc:95:b8:4a:b1:df:
04:1b:f2:72:d5:0a:19:cd:cc:e5:2a:1b:b1:a5:9c:
5d:7b:ca:8c:8a:61:4c:a2:3c:aa:f5:f7:61:76:ac:
b7:55:c7:19:ea:d7:70:85:b2:4f:63:ed:8c:97:06:
ac:9c:7b:b8:0e:95:e1:8f:4e:a2:eb:39:5f:45:0a:
05:c7:68:5a:29:4d:81:f9:ae:ef:1c:3b:e7:a1:fc:
e0:20:66:34:18:ce:cb:da:54:73:17:0e:a7:19:8f:
e6:cb:15:4b:3e:27:c1:e1:56:03:42:c7:9e:13:d3:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:4D:C0:72:D6:B9:84:AD:A6:07:D4:40:48:73:B7:BB:0D:39:68
X509v3 Authority Key Identifier:
keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:af:ac:ea:5a:20:85:3a:19:93:73:62:1e:da:df:17:ac:
d3:96:4b:56:c5:d2:ca:1f:d6:50:c2:2d:29:fd:3d:e6:cb:d5:
6e:b5:8f:0b:e9:1c:1b:62:19:47:02:34:bd:f9:e5:ed:f4:40:
e7:4e:80:05:43:f9:61:73:d3:a6:f4:63:7c:2e:8e:c7:67:43:
79:ad:3c:99:85:f1:d7:56:e8:36:91:7a:52:ea:50:e7:1e:29:
fd:43:12:8f:61:d9:04:fb:b0:77:93:4d:da:56:f2:7c:8a:5c:
07:fb:28:16:0a:89:b2:ef:f3:09:c4:43:73:35:c8:be:74:b7:
f0:c2:51:1b:02:b5:37:37:37:ff:81:69:5e:2d:ed:b6:83:9b:
6e:e0:a4:8d:74:ea:a3:11:f6:4b:7b:5e:2f:26:2c:fc:a4:1d:
c0:e5:c9:21:42:6e:dc:98:bf:27:bc:f6:04:22:2d:9d:48:cb:
b2:93:56:28:25:7d:f4:86:84:48:2d:b8:8c:68:1c:2f:27:c9:
21:16:05:62:0e:d0:fe:89:75:8b:28:cd:a0:a5:cb:e2:56:ad:
2e:4f:bd:20:e5:b4:80:0e:60:8f:25:73:60:82:94:dd:a2:97:
03:fc:b8:16:34:15:af:ef:7b:c5:dc:d1:ab:b7:7d:05:5c:fd:
98:d0:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:40:52 2025 by rpki-client