Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: zq15qq3D29YGufC1j0fKwMTVyI+VrJcE9YM0/WGpeUw=
Subject key identifier: 21:B7:8A:57:A7:5A:66:52:06:7A:03:B5:08:71:A5:B2:D7:9A:E3:64
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 019688129218EBF0B08921CB032808BC9829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 0486
Signing time: Wed 30 Apr 2025 19:00:40 +0000
Manifest this update: Wed 30 Apr 2025 19:00:40 +0000
Manifest next update: Thu 01 May 2025 19:00:40 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: VvyrRXb1sbbuk/AfQSAbghPdez1gFcASysNwj8HDnu4=)
2: mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa (hash: A++zVXL1KytgjPo0U8Uvn5ms+5UtCdFa04StDMBXv54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:92:18:eb:f0:b0:89:21:cb:03:28:08:bc:98:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Apr 30 19:00:40 2025 GMT
Not After : May 1 19:00:40 2025 GMT
Subject: CN=21b78a57a75a6652067a03b50871a5b2d79ae364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:d6:74:73:64:13:13:70:51:52:e2:a9:11:
87:06:87:db:19:0b:23:f8:22:22:d1:51:5e:55:dd:
5d:c4:0d:d1:0c:4e:9c:1f:5c:ab:60:90:0b:8e:1e:
bb:53:43:42:bd:14:64:75:94:7c:54:01:3f:1d:23:
5a:c3:29:d5:4f:a9:60:35:8d:fe:a0:e0:3d:14:82:
57:b7:9a:65:c0:27:7e:4e:6f:28:58:dc:79:d5:84:
83:2d:e7:b2:2b:b3:77:fd:49:4c:88:2e:7e:13:f4:
d5:6e:49:f5:89:34:06:05:d5:5c:cf:d4:5b:1a:6f:
63:ee:f8:8a:0a:4b:28:49:ab:73:48:76:78:71:c3:
ad:74:9d:8b:8d:51:9b:9a:89:22:fd:3f:d2:04:bf:
74:67:e3:21:89:15:ad:2d:75:15:50:af:89:98:81:
8f:d5:57:d9:6a:40:9b:b2:18:f3:b6:61:84:62:ff:
59:24:43:bf:5e:34:fb:e8:7f:94:d4:d6:52:50:5f:
ec:46:ea:38:2e:4f:17:37:3f:9e:8b:5c:97:88:6c:
17:4f:7f:93:36:fa:47:80:41:22:bb:b5:fe:8f:e3:
70:40:eb:71:fb:ee:53:41:ff:bc:ca:e2:af:84:ba:
da:7e:9b:f4:0a:7a:4d:c8:dd:1c:36:c1:e8:e0:b1:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:8A:57:A7:5A:66:52:06:7A:03:B5:08:71:A5:B2:D7:9A:E3:64
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8d:74:a0:99:6e:8b:56:82:bd:68:1e:c9:e9:58:cc:01:54:
9f:a8:1b:33:96:a4:38:a5:5c:d3:2b:e8:20:7f:d7:1e:ce:5a:
04:a6:e0:16:54:4b:11:17:d3:70:4e:11:66:a3:ff:c4:79:97:
16:a0:37:0d:09:8c:5f:f7:2e:06:b6:2a:9c:f4:ef:a5:90:8f:
0e:91:b6:d8:9a:70:aa:7b:d8:94:9c:de:fb:29:96:2d:5c:af:
c6:49:a6:91:ed:96:7a:06:cc:06:3a:37:8b:a5:70:2b:92:38:
ed:55:9b:22:1e:8c:0d:de:5f:13:27:2a:38:4b:b7:90:1a:6a:
d8:b2:84:fb:57:49:46:c0:5b:43:fb:71:8c:36:90:db:e6:5c:
36:c4:0b:fb:90:bd:79:4c:9a:ca:2a:ff:5f:f1:da:dd:6e:49:
3f:e9:72:af:86:a1:f9:5f:44:49:fd:dd:98:9e:cb:2b:eb:47:
63:22:f2:30:21:8d:d4:5a:1b:6a:ea:6d:0d:25:ef:e3:02:28:
12:7d:b2:04:99:3f:ec:97:68:5e:15:e7:28:96:51:db:cc:fc:
64:e6:e8:aa:9a:21:0c:98:8c:4f:d0:fc:c0:fc:08:d3:bd:6f:
2b:65:7e:cd:10:54:10:bd:45:3f:5c:d5:7a:0d:2f:47:f0:ed:
89:32:4a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIEpIY6/CwiSHLAygIvJgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0
YjlhY2UwHhcNMjUwNDMwMTkwMDQwWhcNMjUwNTAxMTkwMDQwWjAzMTEwLwYDVQQD
EygyMWI3OGE1N2E3NWE2NjUyMDY3YTAzYjUwODcxYTViMmQ3OWFlMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI3WdHNkExNwUVLiqRGHBofbGQsj
+CIi0VFeVd1dxA3RDE6cH1yrYJALjh67U0NCvRRkdZR8VAE/HSNawynVT6lgNY3+
oOA9FIJXt5plwCd+Tm8oWNx51YSDLeeyK7N3/UlMiC5+E/TVbkn1iTQGBdVcz9Rb
Gm9j7viKCksoSatzSHZ4ccOtdJ2LjVGbmoki/T/SBL90Z+MhiRWtLXUVUK+JmIGP
1VfZakCbshjztmGEYv9ZJEO/XjT76H+U1NZSUF/sRuo4Lk8XNz+ei1yXiGwXT3+T
NvpHgEEiu7X+j+NwQOtx++5TQf+8yuKvhLrafpv0CnpNyN0cNsHo4LHkcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG3ilenWmZSBnoDtQhxpbLXmuNkMB8GA1UdIwQY
MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt
MGMwMjQ2YzZmNjIzLzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz
LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf410oJlu
i1aCvWgeyelYzAFUn6gbM5akOKVc0yvoIH/XHs5aBKbgFlRLERfTcE4RZqP/xHmX
FqA3DQmMX/cuBrYqnPTvpZCPDpG22JpwqnvYlJze+ymWLVyvxkmmke2WegbMBjo3
i6VwK5I47VWbIh6MDd5fEycqOEu3kBpq2LKE+1dJRsBbQ/txjDaQ2+ZcNsQL+5C9
eUyayir/X/Ha3W5JP+lyr4ah+V9ESf3dmJ7LK+tHYyLyMCGN1FobauptDSXv4wIo
En2yBJk/7JdoXhXnKJZR28z8ZOboqpohDJiMT9D8wPwI071vK2V+zRBUEL1FP1zV
eg0vR/DtiTJKJA==
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:56 2025 by rpki-client