Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: MHqoOKoMBx+d46p0LWWY3Q/QIdglZmuYbVdH3eKEToE=
Subject key identifier: 81:03:C6:37:C6:0F:F3:4C:7E:2C:68:E6:92:E3:D0:72:47:3D:CF:1C
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 01963EE6F7EA0A4211E41C4D081C54B50118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 14:00:46 +0000
Manifest this update: Wed 16 Apr 2025 14:00:46 +0000
Manifest next update: Thu 17 Apr 2025 14:00:46 +0000
Files and hashes: 1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: OJutf4H9p3NKHw2A8aVNID3WL2SIhgX266VnJYUblSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:f7:ea:0a:42:11:e4:1c:4d:08:1c:54:b5:01:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Apr 16 14:00:46 2025 GMT
Not After : Apr 17 14:00:46 2025 GMT
Subject: CN=8103c637c60ff34c7e2c68e692e3d072473dcf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:52:89:66:cb:19:28:d5:6f:c4:54:fe:5d:
07:de:73:eb:9a:63:7f:cb:fc:34:2a:fb:28:0c:33:
39:a3:e9:35:09:ce:61:c3:19:7c:6b:39:24:43:c3:
0d:08:a7:53:a2:36:c0:d9:3f:87:b7:a7:9d:67:6b:
99:b4:3d:b3:fc:cb:49:f9:c4:e9:ed:8a:6a:3f:da:
90:56:02:37:fd:56:e8:de:e8:6e:41:16:d7:4d:d4:
d1:09:d7:28:f0:2d:71:db:c5:7e:64:0f:72:9e:c6:
72:40:24:4e:22:f4:df:4b:57:37:7a:af:23:20:68:
8b:81:7e:48:fb:a8:77:9a:59:2c:9e:38:ac:c8:ff:
d9:9a:0f:36:cc:27:aa:c6:54:48:96:24:1f:8c:ff:
21:cb:ac:81:f6:b7:ad:41:81:18:f2:1b:1e:4f:93:
93:60:c5:60:b6:12:d6:b2:3c:92:f6:cb:b3:51:43:
4d:e2:ee:fd:46:0a:0b:99:07:7c:24:fa:a5:1b:46:
0c:fa:99:bb:95:a8:a6:c8:82:e7:c3:92:16:c5:68:
7d:ca:44:e1:ab:cb:8f:70:2a:a1:e4:0e:74:c1:c8:
23:8a:26:50:dc:49:72:de:b7:31:57:97:e0:db:62:
34:65:27:df:a4:8d:83:bf:4d:09:55:32:f1:da:e6:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:C6:37:C6:0F:F3:4C:7E:2C:68:E6:92:E3:D0:72:47:3D:CF:1C
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:df:2f:e2:fc:4a:7b:c0:59:88:12:c7:ca:07:f3:1d:b5:ae:
bc:85:9c:55:4e:b5:84:3c:f1:ba:44:fe:40:c7:a2:9c:df:48:
e3:1b:6d:a1:50:2a:5f:e1:58:97:3c:e2:20:3d:64:69:19:39:
e6:80:14:50:ff:bf:c2:1a:1e:c4:8e:d7:01:46:2c:34:61:18:
ce:b0:7d:df:31:32:34:5d:bd:3d:4f:4d:08:67:0a:df:80:45:
d6:a1:ee:d3:42:a6:32:fa:83:91:b5:de:98:a6:9f:ee:dc:e6:
55:f7:63:12:85:be:97:91:22:4b:0c:d4:16:d5:4b:07:05:68:
47:bd:22:8c:c7:b9:7f:8d:f5:d3:e8:fd:fb:0f:61:bd:22:d2:
b5:f5:3b:df:9b:92:97:da:51:d6:25:d4:91:c4:eb:e0:a4:1b:
64:bb:b8:12:e5:c3:2f:9b:0b:f1:47:52:3c:41:d6:28:c6:5e:
d6:d6:27:8d:4c:c1:c9:9f:b0:9c:3d:6e:3d:21:55:55:0b:02:
97:c5:30:78:d4:ab:9b:8d:45:bf:1b:59:f1:70:aa:53:2e:2e:
36:a9:ec:30:e8:10:25:c1:c3:30:8b:a7:89:28:df:d4:ed:bb:
2f:22:a6:ce:af:36:66:50:5d:25:f5:0d:dd:b0:1e:9f:cd:1f:
af:15:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:08 2025 by rpki-client