Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json)
Hash identifier: VFGZtMGGmr7SKMS5zYqjzIHARt/pohq+SfVgEasXfqY=
Subject key identifier: DB:63:AA:6B:97:DA:96:13:6D:6C:91:B5:0B:E3:2A:5F:80:88:7D:A9
Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Certificate serial: 01962B2A1ED5D745093BD40BA037FDF48F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
Manifest number: 1012
Signing time: Sat 12 Apr 2025 18:01:42 +0000
Manifest this update: Sat 12 Apr 2025 18:01:42 +0000
Manifest next update: Sun 13 Apr 2025 18:01:42 +0000
Files and hashes: 1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: UITFrHwRyJk2uoujLfRx8shPgUHuRFSZ/zEOeEWHuSM=)
2: mG96Y715wDIwvEKSq5Z-71rWs6M.roa (hash: Y3E3/3Utv7uEbR1MqLWFqsWoMU44kmtfUjplzEpgK2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:1e:d5:d7:45:09:3b:d4:0b:a0:37:fd:f4:8f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5
Validity
Not Before: Apr 12 18:01:42 2025 GMT
Not After : Apr 13 18:01:42 2025 GMT
Subject: CN=db63aa6b97da96136d6c91b50be32a5f80887da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:b9:54:42:a6:09:f1:e0:4c:b3:79:b5:20:
4e:9d:32:5c:1f:dd:dd:60:3f:e0:88:d2:81:c4:e4:
59:d6:85:a2:c5:e7:60:bb:e0:44:2a:18:fd:d3:87:
68:2e:0c:68:a7:b4:da:ad:d0:77:b4:a4:c1:70:6a:
05:9e:5d:1e:56:d7:34:dc:e4:14:56:29:49:bd:66:
bb:6d:64:83:83:45:31:e9:31:fe:24:78:78:f2:ce:
0a:5f:37:da:a8:5c:45:1d:96:0c:b9:b0:3b:d1:48:
7a:62:b9:b5:2b:f4:78:92:8e:4a:27:ff:5d:22:de:
47:24:54:cd:c7:8d:d7:c7:83:14:3d:62:b4:1d:a2:
bc:42:1e:64:3c:b6:1b:41:06:db:2b:bc:4d:ec:3a:
e1:6d:f5:de:c9:ba:7a:3f:09:dc:1f:b3:89:2c:8c:
6a:ec:ed:30:dd:3f:f7:d1:3c:b5:07:7d:c4:d4:ad:
cf:d6:71:fb:2c:da:d6:9b:db:16:25:c7:f2:09:27:
be:dc:a9:0e:5d:2a:85:4a:5d:9e:b1:8f:b4:ef:9a:
24:4c:b5:b5:22:31:90:7a:ba:b3:02:a5:0a:c3:7e:
43:2a:af:9b:ca:a9:36:b0:f9:7f:fe:57:7c:42:bb:
88:7d:c7:79:80:e1:9d:ed:f1:66:82:25:e2:21:ce:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:63:AA:6B:97:DA:96:13:6D:6C:91:B5:0B:E3:2A:5F:80:88:7D:A9
X509v3 Authority Key Identifier:
keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:1f:a7:76:a1:f7:8a:83:d0:89:3b:1a:25:fb:71:51:3d:
58:b6:22:a4:42:f0:fe:a0:05:1c:13:09:c9:de:2f:98:c0:c0:
4b:d7:7d:b6:ca:ec:d2:1c:77:e7:88:79:30:f6:1c:28:a5:f6:
bf:e7:73:d7:80:ff:63:22:24:df:74:df:36:8f:bc:ce:31:26:
d1:39:4b:75:cb:58:71:f1:cc:ee:67:e9:66:83:cd:20:76:b3:
2c:1b:24:83:22:f1:96:75:ee:1b:0c:4c:25:a6:b6:c7:b2:3a:
66:84:b7:dc:e9:43:c0:a8:5d:69:91:46:63:f6:40:9e:ae:2e:
78:ed:4d:8c:30:7a:b8:b1:2d:09:bf:d0:9c:6f:79:15:c5:a2:
ae:ce:05:52:5f:9d:7c:4f:f6:9a:70:99:aa:19:7a:9a:f6:9e:
6d:cb:56:00:de:70:9c:24:0e:a0:48:d9:c4:cd:26:7c:6e:59:
f5:ae:ce:8b:c1:72:63:e3:21:6b:aa:f7:b5:79:6a:dc:23:6a:
24:8a:bc:ad:44:48:7e:9d:22:24:49:71:fe:1b:20:fa:39:b3:
7d:eb:e6:d7:d8:ff:9b:2f:1f:9b:cc:46:0f:27:69:58:18:fd:
3c:44:53:e0:4d:b0:86:4d:d9:e3:4f:c5:67:85:c1:10:e0:2c:
8f:b5:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:36:30 2025 by rpki-client