Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: JBoAJ7RbarrUKPdo1Lu+J1TWPgxsNDamSjaZLxHUUNc=
Subject key identifier: 12:32:07:C0:3D:B2:F4:59:81:74:2A:E7:28:BE:1E:44:F8:EA:AC:C0
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 0196507F2E74E5060B8CD2D9F34AA33078FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 0974
Signing time: Sun 20 Apr 2025 00:00:34 +0000
Manifest this update: Sun 20 Apr 2025 00:00:34 +0000
Manifest next update: Mon 21 Apr 2025 00:00:34 +0000
Files and hashes: 1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: vH1UB84YY6PC+ZWfDysqPVFSJVxtJx9VqPLKZjQfpCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:2e:74:e5:06:0b:8c:d2:d9:f3:4a:a3:30:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Apr 20 00:00:34 2025 GMT
Not After : Apr 21 00:00:34 2025 GMT
Subject: CN=123207c03db2f45981742ae728be1e44f8eaacc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:6a:e8:f5:7f:be:9f:32:c5:30:46:b8:7d:
e3:e7:10:74:04:8a:22:6d:a6:ee:48:31:61:81:17:
e7:04:ce:3e:7c:df:33:41:d6:95:d3:55:ad:82:62:
38:58:d2:48:2e:67:4c:df:dd:d2:ef:87:e0:78:cf:
20:a4:26:f1:aa:26:66:d1:35:71:95:85:d6:89:ab:
aa:82:ff:2e:a3:42:6c:f2:bc:80:9f:9f:5a:a0:fd:
38:21:d4:86:86:20:d5:2a:15:0e:87:14:b3:f7:77:
b0:32:c4:04:1b:35:30:42:1c:bf:77:cb:fd:d4:6e:
09:fe:1e:32:7d:23:b1:28:0e:c6:81:1e:fd:56:09:
35:ef:07:5c:9f:b8:c9:61:39:99:93:c4:52:b4:12:
75:b6:37:af:c3:64:7f:a8:67:b0:6e:4b:9a:fd:4b:
a5:37:47:db:1d:a0:ce:22:52:37:ee:8f:1f:81:7f:
b1:42:b1:e0:00:6e:f9:91:3f:51:3c:d8:a2:d5:f6:
56:23:a8:55:bf:ed:8d:18:6a:a7:b5:62:ac:6c:59:
7d:7a:5d:c7:f1:ba:e2:6d:80:97:f1:3f:30:98:b3:
14:2c:2a:09:28:f4:37:6c:ea:80:b0:02:e2:29:b5:
69:6b:89:aa:1f:42:21:e3:dc:bd:77:92:1a:ab:e5:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:32:07:C0:3D:B2:F4:59:81:74:2A:E7:28:BE:1E:44:F8:EA:AC:C0
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7b:5a:a6:9b:bd:a3:eb:4f:ce:25:75:63:78:a2:c4:c5:df:
9b:dd:c3:af:89:38:c7:ae:52:17:30:f5:c6:48:fd:f8:9d:04:
1a:5d:33:cf:c7:b2:d3:e5:6d:b9:44:24:09:3e:ee:ba:b2:bf:
09:9b:aa:b4:b5:d2:41:0c:24:52:1f:ae:cd:fa:a9:fc:9f:1d:
b1:48:4d:ec:98:45:49:8e:57:ba:d0:58:f3:df:36:ab:11:1f:
1d:7f:fa:9c:22:97:15:57:32:fc:51:03:97:6d:29:a6:0b:eb:
cd:f2:ed:30:6e:12:ec:21:35:d0:8b:f3:81:f2:6d:86:b6:d1:
71:b1:44:d9:d4:d8:bb:53:32:d2:44:35:d7:43:77:b4:76:43:
56:b0:bb:a5:db:cd:9e:13:61:46:00:a4:79:f7:6e:98:bc:1e:
41:08:65:18:2e:c8:1c:3b:23:e8:d5:4b:94:6d:94:3a:f0:d3:
a3:9f:b1:d4:53:43:20:41:fc:e0:2b:7e:a8:87:46:fc:8d:5c:
fd:29:cf:08:0e:d4:3f:69:43:14:bb:3c:58:a4:b0:18:7f:0f:
7f:19:c1:01:14:f4:2f:b2:f0:fd:52:01:66:8a:ca:38:a0:21:
7e:d9:de:b3:f3:7c:36:71:3b:ee:81:fb:b9:17:bb:dd:79:a1:
65:8b:82:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfy505QYLjNLZ80qjMHj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1
ZGRhOGUwHhcNMjUwNDIwMDAwMDM0WhcNMjUwNDIxMDAwMDM0WjAzMTEwLwYDVQQD
EygxMjMyMDdjMDNkYjJmNDU5ODE3NDJhZTcyOGJlMWU0NGY4ZWFhY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv5q6PV/vp8yxTBGuH3j5xB0BIoi
babuSDFhgRfnBM4+fN8zQdaV01WtgmI4WNJILmdM393S74fgeM8gpCbxqiZm0TVx
lYXWiauqgv8uo0Js8ryAn59aoP04IdSGhiDVKhUOhxSz93ewMsQEGzUwQhy/d8v9
1G4J/h4yfSOxKA7GgR79Vgk17wdcn7jJYTmZk8RStBJ1tjevw2R/qGewbkua/Uul
N0fbHaDOIlI37o8fgX+xQrHgAG75kT9RPNii1fZWI6hVv+2NGGqntWKsbFl9el3H
8bribYCX8T8wmLMULCoJKPQ3bOqAsALiKbVpa4mqH0Ih49y9d5Iaq+UlFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIyB8A9svRZgXQq5yi+HkT46qzAMB8GA1UdIwQY
MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt
ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi
LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPntappu9
o+tPziV1Y3iixMXfm93Dr4k4x65SFzD1xkj9+J0EGl0zz8ey0+VtuUQkCT7uurK/
CZuqtLXSQQwkUh+uzfqp/J8dsUhN7JhFSY5XutBY8982qxEfHX/6nCKXFVcy/FED
l20ppgvrzfLtMG4S7CE10IvzgfJthrbRcbFE2dTYu1My0kQ110N3tHZDVrC7pdvN
nhNhRgCkefdumLweQQhlGC7IHDsj6NVLlG2UOvDTo5+x1FNDIEH84Ct+qIdG/I1c
/SnPCA7UP2lDFLs8WKSwGH8PfxnBART0L7Lw/VIBZorKOKAhftnes/N8NnE77oH7
uRe73XmhZYuCKA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:21:30 2025 by rpki-client