Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: DToqJ/3Eqzljym7vDpvo6zMAHjSuAMgILSB15z3/7MI=
Subject key identifier: 77:17:0E:4E:95:E9:00:EF:BB:09:C9:AC:4B:7F:16:A1:DC:32:47:12
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 0196846C9131E4468F5BE5E2695EA98FB833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 14EB
Signing time: Wed 30 Apr 2025 02:00:29 +0000
Manifest this update: Wed 30 Apr 2025 02:00:29 +0000
Manifest next update: Thu 01 May 2025 02:00:29 +0000
Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: uApUu+2QeetOTxEyu1JdiQoiaT0oIN7B+UqfGQwGoRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:91:31:e4:46:8f:5b:e5:e2:69:5e:a9:8f:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Apr 30 02:00:29 2025 GMT
Not After : May 1 02:00:29 2025 GMT
Subject: CN=77170e4e95e900efbb09c9ac4b7f16a1dc324712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:40:8e:66:58:81:44:b5:b4:9d:f0:a6:77:
80:23:1e:a2:54:23:55:7c:5c:e4:14:31:12:0b:51:
31:26:16:75:cf:ae:b5:a1:33:f1:94:20:7c:ae:f5:
d4:c0:16:13:66:78:bf:26:11:e3:91:d7:04:7a:ba:
cb:e4:20:00:6c:a4:c9:9f:d1:45:c5:0d:02:9f:37:
f2:4f:9a:57:06:ef:df:51:8f:94:a0:cc:4d:bc:6b:
fd:61:34:6a:5a:84:be:c3:9f:66:2f:56:15:89:39:
88:1d:1b:94:92:64:5c:91:14:52:7f:85:37:de:c0:
15:b4:c5:4f:89:01:15:b0:df:72:7a:a7:ab:51:fe:
7e:c1:20:c2:f9:23:59:fa:60:21:a6:ee:32:ee:ad:
a6:72:e2:9c:40:57:90:ca:5d:80:c8:c4:be:9d:ee:
fc:18:e6:b6:54:46:d9:60:af:b9:03:17:3e:bc:01:
2b:ef:ea:46:8f:cc:a0:ea:66:f5:a7:dc:bc:c8:99:
ec:6d:9c:91:07:2f:3d:81:fc:f2:b2:2d:6d:03:61:
f6:71:a7:ac:2d:61:95:cf:52:c3:97:b6:d8:d7:43:
bf:48:f4:5f:11:11:b9:b5:7d:94:db:00:60:d5:03:
10:7b:fe:df:fa:c4:63:39:92:a9:f4:1b:9e:a1:c5:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:0E:4E:95:E9:00:EF:BB:09:C9:AC:4B:7F:16:A1:DC:32:47:12
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:74:7e:ba:d5:fc:58:0e:cd:c7:51:16:7a:ba:72:8f:07:
4d:ce:f8:3e:02:31:4a:b8:22:77:02:9e:84:59:81:73:20:2e:
87:d7:76:51:84:a2:94:31:03:ee:45:32:8f:49:64:77:b5:eb:
de:27:d1:68:ab:8f:b4:e7:90:3b:87:58:ff:34:ad:54:e9:80:
4f:cd:61:c1:3d:73:22:00:ad:40:2a:a0:94:26:58:d5:6d:8d:
49:b9:6c:00:00:28:3e:e0:24:d2:f9:2b:6f:72:17:22:fc:60:
4c:1e:6b:48:7a:7a:09:09:48:7c:a7:4d:0f:27:28:76:4e:1a:
6a:5f:e6:65:c6:f9:9c:1a:00:be:c9:be:df:e1:07:16:e7:d0:
64:9c:c4:72:1c:e9:ef:84:dd:7f:3e:ce:ea:8a:13:f8:25:98:
7a:92:e5:6b:20:af:34:ba:a1:08:f6:8a:64:b9:f1:da:03:41:
e1:dc:ea:d6:13:1b:b7:a1:7a:9f:c6:90:f4:bf:84:9d:6d:aa:
33:73:23:fc:41:f1:dc:22:87:c3:70:82:07:f1:33:3c:43:a6:
48:12:d0:09:06:67:1a:6c:f7:44:d1:3b:f1:28:cf:d6:17:7e:
0b:e0:14:01:f2:31:61:a9:dd:4f:60:db:57:90:3e:83:6b:d5:
0b:95:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:12 2025 by rpki-client