Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: xQUUzYvKa90wV83MG3YfhdMvzwScviVBMz3eZdFBilc=
Subject key identifier: 6F:B9:FB:B8:5B:C8:98:1A:AC:A0:2D:1E:BD:A1:09:E6:3A:0C:6B:7E
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 0196586FC8E6BEDEFA2371348CBBA6A36A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 13:00:42 +0000
Manifest this update: Mon 21 Apr 2025 13:00:42 +0000
Manifest next update: Tue 22 Apr 2025 13:00:42 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: dEOeU4P13JdGIPPxPVf94I9HZYxhDQuKiZzgjt3Jstw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:c8:e6:be:de:fa:23:71:34:8c:bb:a6:a3:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Apr 21 13:00:42 2025 GMT
Not After : Apr 22 13:00:42 2025 GMT
Subject: CN=6fb9fbb85bc8981aaca02d1ebda109e63a0c6b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:cf:4d:e9:24:1a:bc:24:49:3d:e3:f7:19:
cb:72:b9:45:92:a8:d7:4c:8a:bb:62:a6:83:26:e4:
b3:b9:f5:09:ba:e3:f9:61:55:08:54:2d:bb:00:f8:
8a:b8:90:81:64:7b:d3:50:e5:92:28:42:64:ab:d1:
8c:03:a5:a3:43:e7:c2:b6:67:8d:02:34:3a:f0:ab:
01:73:2f:6a:99:a7:15:38:b7:9b:09:b0:d2:02:5e:
52:0c:f2:4f:8a:73:f1:09:e4:21:fe:41:49:99:45:
58:31:4a:c4:0b:19:4e:2b:d2:e6:88:d5:57:2e:1f:
08:6d:62:c0:a7:7f:44:3f:07:64:37:cb:5c:74:45:
e8:75:15:18:03:56:3f:cd:a3:a4:eb:3e:29:b8:b8:
04:f2:ad:f7:3d:31:10:b7:65:27:bd:f8:51:c4:ce:
ff:6e:8a:5b:2e:4e:5b:45:70:a8:0f:8c:c7:2f:53:
bc:b9:87:7e:8c:4e:37:7d:c3:c2:76:3f:a3:32:55:
af:5e:08:c5:9c:14:c9:04:31:8e:a7:3a:97:c7:c0:
97:e8:7c:35:5c:05:ca:cc:65:2a:bb:80:36:da:4c:
b8:c0:09:c8:45:af:94:52:42:1c:dc:fc:63:ba:ed:
a9:99:6e:7d:c8:e7:01:ed:73:d5:2b:af:4b:64:1d:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:FB:B8:5B:C8:98:1A:AC:A0:2D:1E:BD:A1:09:E6:3A:0C:6B:7E
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1a:34:d3:bc:88:b3:77:bf:5d:3a:04:3c:aa:01:8d:3e:28:
4e:d1:27:89:21:d6:db:e2:c1:9a:4b:de:58:2a:41:b1:a4:24:
1a:84:c7:c4:66:86:68:8c:40:21:7c:77:72:84:44:de:63:53:
aa:e1:86:8b:92:ae:21:56:76:1b:93:ed:bd:c3:06:c0:aa:6d:
31:71:3d:c3:3c:3d:25:bc:ec:81:b8:9f:e2:d2:b9:09:6f:8f:
72:eb:ff:47:31:05:fc:bc:08:e4:54:24:f1:9c:7d:60:13:e1:
34:1b:9b:63:34:cb:3a:5c:a1:e2:a3:c7:ac:2e:f3:fe:2d:b0:
fd:83:f4:13:7d:dd:dc:97:ba:0f:19:73:f7:a2:de:a7:1d:ba:
e8:d3:cf:f5:7b:e9:35:17:6e:94:e7:53:d1:ab:c5:c0:44:ca:
96:1e:ce:90:83:f1:d1:f6:5e:1f:dd:51:e8:f8:da:3f:60:df:
46:3f:bd:ae:65:9b:16:e0:ee:ad:a2:3f:97:23:88:7c:68:0e:
20:41:24:47:e6:72:ae:d7:80:4d:43:d8:8c:6a:9f:59:19:a0:
ef:f4:0b:c1:55:fd:0d:e0:a4:7a:14:7f:75:14:f1:16:c2:f6:
94:a4:d9:ac:53:7d:8f:c1:99:d6:4f:a7:41:07:e7:32:19:5c:
91:fe:57:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:51:47 2025 by rpki-client