Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: rbqEfBkSL7ZMcw9SiaqN0U+26WLWy1qQC8F0A46yCnU=
Subject key identifier: 25:36:A8:0F:A7:14:11:FE:EB:D3:4A:DA:C4:44:DD:0E:41:70:21:A5
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 01964FDA988275E76E81227072B960D6DF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 36
Signing time: Sat 19 Apr 2025 21:00:48 +0000
Manifest this update: Sat 19 Apr 2025 21:00:48 +0000
Manifest next update: Sun 20 Apr 2025 21:00:48 +0000
Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: +3sxN9NWX2GesSYGNCLvsjy8sygPlOIchipn+fPlHh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:98:82:75:e7:6e:81:22:70:72:b9:60:d6:df:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Apr 19 21:00:48 2025 GMT
Not After : Apr 20 21:00:48 2025 GMT
Subject: CN=2536a80fa71411feebd34adac444dd0e417021a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:dd:f3:85:d2:ea:4a:c7:c8:31:ad:d5:3b:
77:96:95:e9:2c:b7:47:70:e0:4f:ce:71:72:aa:6e:
8f:3d:e0:f8:29:d0:74:10:d2:7e:77:e1:3f:c0:03:
20:d2:ff:bd:b3:20:5a:9c:17:92:8a:97:41:40:ec:
cd:3c:66:77:ad:4e:7d:04:5d:6b:6d:5e:dc:68:4c:
68:64:5a:9d:ac:a9:1f:8a:e9:92:b0:01:22:7d:74:
22:6d:f4:e0:81:52:70:7e:2c:c3:75:1f:66:34:42:
fd:64:63:1c:07:3d:8a:68:95:db:4a:7c:99:d2:4a:
c1:ea:78:e1:8f:fd:96:c7:9a:f9:2a:ea:d9:32:cf:
ed:ad:7a:e8:db:f6:57:7a:77:0e:46:35:95:3c:8a:
a8:ce:75:56:75:cc:90:a9:aa:20:03:07:ff:7a:84:
d3:d7:06:52:f8:5e:48:96:7b:26:8f:a6:5e:a5:c1:
95:c8:f2:1c:fd:f7:85:52:6f:1c:1e:f6:b9:c9:29:
b3:c0:1d:a9:7f:cc:78:dd:cf:e7:ed:1a:3c:b3:9d:
08:05:94:e9:48:dc:ab:3f:49:ae:96:b2:98:80:46:
54:c5:ef:9d:e8:b9:a2:33:6b:ad:b1:33:6f:77:35:
ea:a4:4d:25:9f:22:0c:a3:09:b5:8e:68:b2:a4:24:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:36:A8:0F:A7:14:11:FE:EB:D3:4A:DA:C4:44:DD:0E:41:70:21:A5
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:55:30:76:53:6b:48:04:11:00:39:5e:df:2c:6f:95:50:3b:
b4:d7:28:2a:f8:25:38:e1:67:0a:d9:95:bd:a6:a3:07:3a:57:
55:80:eb:77:37:97:94:3d:39:a2:7b:ac:1b:ac:7c:73:2a:78:
c6:74:88:75:53:eb:f7:8d:ce:ce:16:32:5d:d1:4a:a3:18:55:
a7:02:e6:47:4f:7c:66:e9:c9:e4:fd:f7:de:f9:88:f2:ab:a8:
92:be:73:58:4e:69:e8:9b:57:ad:72:3f:6a:7e:52:4b:45:be:
53:77:5a:71:60:7e:5a:48:b6:2c:fa:3d:48:6a:aa:7a:55:23:
32:63:da:19:a6:35:9c:62:15:19:85:0e:ad:61:52:53:d5:86:
4f:0a:1f:be:19:f4:df:20:53:7d:04:85:7a:04:e4:5b:4b:88:
40:ce:4d:42:14:d2:c4:1d:cf:24:67:5a:b1:a5:9d:bd:c0:d9:
a9:a4:f4:c1:d2:97:a9:6c:c3:67:60:41:6b:0d:67:99:b1:23:
a4:4d:72:ef:d1:d5:c8:17:1e:73:ea:04:ab:33:0d:1e:c1:98:
c4:00:09:66:03:1f:ff:88:81:23:3c:c1:5e:fa:94:ba:72:b7:
4c:f7:7d:21:51:a7:dc:fd:75:94:99:f5:95:92:bf:c8:01:ef:
41:d2:ef:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:33 2025 by rpki-client