Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File: WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier: A7mT9HY3j7kbW/zJyQELUMer8hPkuz4HXrvveCU0Okk=
Subject key identifier: 30:AA:4C:C6:03:EE:30:34:3C:6A:56:40:79:6D:59:85:EE:43:64:F0
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial: 019652368860F3AB52F7F7B1AEB88172C4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number: 0436
Signing time: Sun 20 Apr 2025 08:00:27 +0000
Manifest this update: Sun 20 Apr 2025 08:00:27 +0000
Manifest next update: Mon 21 Apr 2025 08:00:27 +0000
Files and hashes: 1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=)
2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: vTTI5WTc6qSlCvRV18rWMV5N7+z5ZY5KxMbC+Ilmoec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:88:60:f3:ab:52:f7:f7:b1:ae:b8:81:72:c4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Validity
Not Before: Apr 20 08:00:27 2025 GMT
Not After : Apr 21 08:00:27 2025 GMT
Subject: CN=30aa4cc603ee30343c6a5640796d5985ee4364f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:f9:97:01:2a:05:8a:b1:72:e3:fe:3f:b0:
1f:54:a8:fe:37:a3:fd:3e:22:71:73:ef:7a:76:73:
c2:c6:ca:00:4e:ca:86:4d:67:fc:d1:36:84:23:4b:
3f:46:31:57:72:04:b7:e6:59:f6:25:a9:4c:a8:3e:
45:87:09:64:26:fe:c3:e6:8a:15:00:12:1b:fc:a8:
7a:49:71:24:6b:2d:c1:e8:2d:eb:6c:c2:22:11:b0:
78:4c:a0:89:d6:78:09:e8:fa:9a:b5:5f:50:be:e1:
d8:32:3b:8c:55:15:a0:2f:b6:34:32:3a:88:48:1c:
53:ff:d9:63:4d:20:b0:ce:4a:36:81:00:c0:8c:4e:
d3:71:45:a2:90:82:0a:f0:38:ed:84:b8:f9:17:0f:
a9:dd:e6:18:2a:48:99:aa:ef:c5:95:b0:b0:bd:df:
14:0e:c7:28:da:0d:da:24:57:f2:d5:b5:7b:19:9c:
ea:0e:66:63:53:67:d3:78:dd:ec:03:2e:f5:9b:87:
a4:f9:6c:fd:f6:71:29:e0:1a:14:18:d0:12:36:55:
30:02:ec:5d:22:d4:4f:fb:15:45:00:09:db:d3:a1:
b0:d8:d2:ec:94:e3:fd:9f:06:99:33:bb:88:e9:40:
c5:78:86:09:dc:c2:33:77:2d:df:a7:a3:17:c1:19:
1e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:4C:C6:03:EE:30:34:3C:6A:56:40:79:6D:59:85:EE:43:64:F0
X509v3 Authority Key Identifier:
keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:20:79:d5:7a:c3:03:86:08:c5:84:06:e6:24:ae:c5:9f:da:
e5:74:f0:47:06:62:21:5b:9c:74:84:65:2e:e1:67:4c:c2:e1:
46:d2:0c:80:54:5a:7e:0a:9a:80:44:c7:60:8e:b7:e6:28:e6:
e5:b9:ce:ea:0d:22:a6:eb:b8:4d:16:5a:4b:2c:20:c7:c4:0d:
a7:c8:2a:f2:08:07:6b:d4:c8:65:7e:8c:0d:f2:6f:2c:d5:cd:
71:b4:73:fa:73:be:74:3f:38:50:44:86:51:be:a7:f9:cc:83:
e2:30:9e:78:ab:f5:04:45:ab:06:56:1e:68:d3:d1:be:8e:8e:
de:12:e3:92:3e:9a:88:8c:8b:d8:c1:c8:f2:52:4c:c1:11:0c:
5d:0c:9a:60:ce:85:eb:5f:97:38:f0:e1:27:17:d4:9b:74:64:
23:74:ba:95:1c:62:df:ba:18:fe:77:21:c2:0d:ce:5b:10:90:
a0:ce:49:05:07:98:c9:41:91:e3:ee:d0:82:55:45:bb:99:42:
f4:3c:ef:c8:e4:9e:ad:d5:e7:b2:58:c1:4f:c5:19:22:f9:98:
dc:a4:a0:a8:db:25:6d:2a:61:8a:56:dc:54:28:cd:42:0d:b0:
23:12:14:68:e2:86:10:20:6b:81:b8:60:44:08:55:44:4a:66:
93:56:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:51:46 2025 by rpki-client