Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File: ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier: snyn461rIoCNKLH4ly9loYp88mVSvwjnciQNEsmGuMw=
Subject key identifier: 73:A1:78:9E:EB:78:FD:DB:CA:5C:77:ED:5E:6D:24:9B:D5:53:82:17
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer: /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial: 01965236EE63C7E7C7410DA0C935426BCFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number: 0364
Signing time: Sun 20 Apr 2025 08:00:53 +0000
Manifest this update: Sun 20 Apr 2025 08:00:53 +0000
Manifest next update: Mon 21 Apr 2025 08:00:53 +0000
Files and hashes: 1: dOwtVPCk-WvN7ZMQPwT0i6o3PTs.roa (hash: iKLmmrkDgYTBybVLHZNcg/1f3W3OlockqL3lDqEGWGQ=)
2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: BQDHrHp4ntiVidaK0hl9zuDW5pQwhWfJwRXH3weDlCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:ee:63:c7:e7:c7:41:0d:a0:c9:35:42:6b:cf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
Validity
Not Before: Apr 20 08:00:53 2025 GMT
Not After : Apr 21 08:00:53 2025 GMT
Subject: CN=73a1789eeb78fddbca5c77ed5e6d249bd5538217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:68:7b:62:f0:aa:bf:0e:7d:b1:35:39:85:
a1:73:21:91:b2:75:b5:80:97:75:2f:32:ee:b5:17:
d6:3d:b2:d8:b2:56:70:c3:45:f0:42:ed:d6:c4:8b:
31:aa:65:2b:8e:83:45:72:f1:63:40:b3:dd:d8:ad:
29:5f:bb:6c:55:e3:bb:28:3f:97:17:4b:7e:8a:35:
54:61:cf:d8:be:3a:1a:0f:f8:41:a5:aa:30:03:3d:
42:fc:c5:78:1d:2c:9c:66:6f:c4:0a:91:a0:85:b5:
fa:04:d4:11:8b:3a:c9:9b:7c:63:58:6e:8e:73:71:
1e:b5:4c:ce:a5:8f:47:38:9d:56:25:71:3d:fd:b3:
43:0a:27:07:9d:be:c8:db:66:4b:d2:0a:f0:fa:5d:
16:4e:73:18:6c:db:06:7c:fa:03:c1:74:46:40:e1:
33:ce:28:db:86:16:e0:fd:df:65:aa:54:aa:f8:70:
3e:92:ed:da:7e:3a:21:97:37:00:2d:8e:2a:6a:57:
38:c9:60:94:dc:3a:12:2f:b7:cf:31:4a:64:37:0b:
ff:71:d6:26:35:ab:f9:61:00:3b:97:90:5a:e6:ad:
91:2e:18:f9:7e:07:69:53:39:18:08:da:78:a9:a0:
36:81:06:c2:0d:be:4e:4c:ff:76:5a:9f:d4:db:87:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:78:9E:EB:78:FD:DB:CA:5C:77:ED:5E:6D:24:9B:D5:53:82:17
X509v3 Authority Key Identifier:
keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9a:57:24:13:58:c7:26:51:35:4f:2c:9b:a8:37:b8:f6:56:
a2:04:94:8a:01:94:98:72:e3:3f:2f:bf:b7:0c:33:d8:a6:70:
64:94:e0:7b:fa:a9:e2:aa:95:7a:63:ff:c1:38:ce:fd:1b:a6:
4e:48:68:4c:b1:d7:d2:97:cc:4b:ee:0a:7f:ad:57:f2:e8:d2:
25:80:5a:27:fc:59:d6:64:3e:57:c0:0e:d0:82:a5:6f:48:01:
3a:fb:f8:d6:c9:07:ed:60:8b:41:1a:25:6f:08:60:ea:23:38:
8f:1b:77:36:d7:22:8f:ff:c0:14:85:e7:27:b9:65:44:92:b6:
ec:5c:32:52:64:a0:61:ea:cf:5c:47:fb:7c:51:03:c9:58:90:
9d:0e:69:b1:90:0c:32:95:34:d3:de:9e:90:a5:6f:73:47:b2:
45:e6:aa:04:9e:76:60:ad:05:c0:66:78:02:23:0c:4d:41:95:
b4:96:2a:f4:50:93:7a:ed:e5:1c:fa:3b:e9:d5:9e:1a:82:90:
ad:06:72:d5:63:24:5f:31:e3:62:1b:b9:c6:a2:b2:93:9f:a8:
16:6c:97:8e:a8:63:91:96:6e:29:3b:24:99:92:33:1c:6d:22:
97:ae:11:a6:1b:1b:7a:99:c9:b5:2d:01:98:45:fd:f0:32:0e:
54:af:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:41 2025 by rpki-client