Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier: 0ONHIx+ISfDgPhutIu+/G9//ecbthiBUUTbc84Us5No=
Subject key identifier: 42:F4:BB:D7:84:B8:21:9E:5A:7B:D6:AF:84:9C:7E:8B:77:EA:B2:14
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial: 01967E340DBC73991373BBB83E2F759D3F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 21:01:02 +0000
Manifest this update: Mon 28 Apr 2025 21:01:02 +0000
Manifest next update: Tue 29 Apr 2025 21:01:02 +0000
Files and hashes: 1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: e8jnu0moAMLabrPt+BQlaROYJ3ELbFJn0r+tT4d2H2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:0d:bc:73:99:13:73:bb:b8:3e:2f:75:9d:3f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Validity
Not Before: Apr 28 21:01:02 2025 GMT
Not After : Apr 29 21:01:02 2025 GMT
Subject: CN=42f4bbd784b8219e5a7bd6af849c7e8b77eab214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:4c:6a:99:84:4c:3e:75:a6:01:c1:39:6c:
12:d3:47:67:4c:c2:6b:e7:af:b9:13:82:4b:a0:b7:
cf:68:e2:31:55:8e:e8:ad:cc:46:e6:49:d8:03:92:
ea:07:1a:2d:05:01:08:19:2d:d7:fb:c6:99:ac:e1:
1b:26:b3:43:ea:6e:37:45:bc:42:b9:90:6b:5f:ab:
93:1e:86:f7:ee:7c:85:c0:fe:1d:0d:65:46:08:ff:
3d:ca:db:30:5f:3c:05:7a:47:5f:59:35:a6:2f:9a:
fa:d7:25:90:1d:c2:a7:a3:c4:13:7a:f2:8d:62:56:
2a:29:7f:b1:ac:f3:d9:8a:35:c9:1d:00:35:a9:54:
20:62:ce:95:66:26:20:5e:c8:62:5e:02:cb:ec:e9:
e1:0e:22:c0:9b:f8:81:b7:5c:c2:c7:e3:88:a2:e6:
35:d0:bf:51:a0:3a:45:67:4c:a5:06:d8:96:16:49:
01:1b:24:7d:12:36:02:a7:a4:cc:33:fb:3e:4d:b9:
2d:7e:b8:0b:13:90:36:af:dc:29:d9:b6:02:c3:ad:
10:e6:18:b8:08:ab:e6:2e:62:da:b6:3d:61:e8:b3:
3f:84:eb:cb:17:a2:14:ab:5c:f3:f1:c5:6d:a7:72:
c4:4d:17:38:0b:be:01:99:78:6e:11:1c:a1:67:bf:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:BB:D7:84:B8:21:9E:5A:7B:D6:AF:84:9C:7E:8B:77:EA:B2:14
X509v3 Authority Key Identifier:
keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4c:99:b3:f8:7d:7a:df:c0:9c:a1:35:ce:4c:98:cf:89:30:
60:b9:51:c8:90:11:da:cc:ba:7c:13:71:9d:42:ff:f7:ad:c5:
20:79:8f:b3:48:5e:86:77:c5:37:7b:c7:bf:3e:76:5f:a1:c9:
e2:e5:cf:fe:35:90:f9:49:61:61:c3:d5:e6:ee:5b:12:b7:1b:
89:c0:12:e2:e8:e6:ae:f7:26:3f:db:89:c7:bb:12:46:ae:48:
2e:5b:7d:0f:c1:a7:71:38:8e:70:51:68:9d:5c:ce:05:60:8c:
f0:34:02:62:a9:2c:cc:0e:b4:62:55:9c:d5:a9:35:ed:c1:87:
4f:87:b6:3c:f3:50:57:2b:b3:a9:97:32:9d:73:95:10:87:f1:
7e:21:57:09:2c:bc:d6:cf:53:e6:aa:60:04:0b:61:c2:87:28:
81:63:34:e3:3b:d0:4b:69:0f:b0:cb:70:ba:be:8d:00:08:96:
d8:cf:72:21:57:98:1f:f5:fb:14:36:f1:68:d7:41:0a:f6:c6:
59:2b:21:ae:a3:60:27:ad:34:1e:7b:0e:e1:19:38:99:c6:9e:
75:6a:80:5a:e9:dd:91:f4:5d:b5:c1:79:4e:73:c8:1e:67:5c:
ad:67:97:39:a0:43:50:87:f7:0e:f1:34:2e:fa:24:6b:b1:ac:
1e:aa:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:26:11 2025 by rpki-client