Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: 8BnYhzJpY6F74N5EeBKaE17iym6giV3UMkZVhyKmlnc=
Subject key identifier: 5B:AB:AB:24:B6:C6:1D:4F:F6:76:3C:A9:AB:8D:71:38:4F:C2:67:F3
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 01968134C5E0F485268878D053ADC11070ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 1091
Signing time: Tue 29 Apr 2025 11:00:41 +0000
Manifest this update: Tue 29 Apr 2025 11:00:41 +0000
Manifest next update: Wed 30 Apr 2025 11:00:41 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: M/XxwLOwqOzPIp1zCHNqlQOWZTtzXzvV4eMnF9qG4Bk=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:c5:e0:f4:85:26:88:78:d0:53:ad:c1:10:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Apr 29 11:00:41 2025 GMT
Not After : Apr 30 11:00:41 2025 GMT
Subject: CN=5babab24b6c61d4ff6763ca9ab8d71384fc267f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:4c:33:79:26:3f:1d:a0:d1:af:bd:1f:7c:
d4:46:c1:0e:35:91:d6:5c:f4:da:de:c1:2c:4f:b5:
5f:f6:69:9a:1b:d1:18:f5:19:a3:f4:d8:e5:fc:74:
2d:96:af:fe:83:11:d5:02:2d:ba:5f:48:9f:94:6a:
4d:87:fc:0f:ce:53:d1:a8:6d:79:15:1f:fe:7b:3b:
3f:f0:2f:77:66:5f:46:11:7e:40:91:db:88:b9:52:
d2:a2:08:e1:a5:51:4f:7f:a0:d6:5a:bd:22:ec:31:
69:94:8c:f9:3d:f5:26:84:3f:7f:16:f3:33:06:12:
08:6d:9e:b1:f6:98:ce:2c:3a:5e:38:61:99:b5:ff:
57:42:36:d6:d9:7c:a8:f4:85:81:91:3f:2c:ff:68:
73:3d:ce:e6:5b:6c:18:c1:93:f6:99:5f:dd:f6:3b:
48:50:19:cb:f1:42:84:89:eb:fc:ad:57:10:4a:16:
6d:ae:db:13:65:b8:91:7f:b7:f1:40:85:41:99:de:
2f:83:8c:63:1e:e4:d9:fd:24:c2:b6:06:f9:da:04:
15:0a:56:86:b7:3c:6a:06:16:23:49:1b:b3:08:98:
8c:17:a2:ce:97:61:2b:1d:39:97:7c:54:46:d2:12:
db:56:4e:7b:7b:f6:f2:29:89:e2:cf:ae:93:94:a3:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:AB:24:B6:C6:1D:4F:F6:76:3C:A9:AB:8D:71:38:4F:C2:67:F3
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:72:69:38:76:44:f8:3f:32:4d:b7:c2:e4:60:c2:54:de:
b1:ad:14:04:82:06:74:48:e6:44:7e:26:cb:59:36:bd:47:ff:
1f:ee:8a:8c:d8:18:20:d7:7c:67:dc:4e:3f:67:92:b3:5a:67:
b7:9d:55:24:21:64:5d:3e:2a:ac:da:3c:d1:df:88:8d:91:d7:
15:24:f6:0a:45:47:71:38:24:d4:27:8e:8b:0a:cc:2f:0a:b7:
7f:01:ad:45:6a:e8:27:9b:98:55:40:1b:8f:27:e8:01:10:21:
0e:55:d0:48:9c:ad:1c:1e:c6:59:9d:a3:88:92:35:e1:a0:1b:
92:62:5b:bd:db:95:a9:a9:d1:67:45:16:64:c2:46:ee:e0:2c:
29:b2:83:32:db:ea:87:e9:01:4c:0b:58:6d:c9:fb:42:2b:41:
90:34:16:0d:88:d2:40:68:10:10:32:07:b2:75:1d:27:db:8d:
45:6d:79:c9:73:35:1a:d6:b1:3d:09:f9:b6:6d:88:94:76:1d:
b1:a9:f5:b7:47:e4:7e:5b:cd:03:47:34:c2:e9:c2:c0:12:13:
05:3e:4e:44:64:a9:3f:6b:06:4f:9b:1a:71:33:65:52:33:fd:
72:23:36:a7:2e:8f:a6:98:68:5a:3a:3b:eb:0f:d6:d0:06:7e:
4a:22:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:26:35 2025 by rpki-client