Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: ITbGbMdmQkxyJq+vFgqH+Drz4f3ocLKZTZU/ch9VUDE=
Subject key identifier: 68:01:23:79:1D:81:96:3A:B1:6A:2E:EB:D2:71:46:C7:CE:34:18:7D
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 019683FF7A24B572C4067933B1D4E4E222C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 073F
Signing time: Wed 30 Apr 2025 00:01:20 +0000
Manifest this update: Wed 30 Apr 2025 00:01:20 +0000
Manifest next update: Thu 01 May 2025 00:01:20 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: LnJfMp+F7aS3Z23lz0DOLvJ+RcSKrIMH40DlxH7sI6k=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:7a:24:b5:72:c4:06:79:33:b1:d4:e4:e2:22:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Apr 30 00:01:20 2025 GMT
Not After : May 1 00:01:20 2025 GMT
Subject: CN=680123791d81963ab16a2eebd27146c7ce34187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:6b:7a:09:98:85:17:89:d3:d0:2d:bb:48:
71:21:c2:e7:d1:14:0b:8e:e8:a9:61:c7:9e:9e:77:
7e:8a:bd:7c:cf:a8:08:bd:9b:ae:80:87:bb:73:1f:
14:ce:bf:90:4e:95:85:2f:64:82:32:02:d9:ec:b6:
71:49:53:05:64:df:92:09:27:1b:75:c4:95:2e:cf:
b7:2d:39:ab:27:94:e5:87:6e:c6:ef:51:99:84:10:
b0:36:56:fd:38:6e:47:3a:31:2a:87:83:0d:96:e7:
76:2b:af:e5:d9:29:e1:55:1c:98:8f:db:22:96:b1:
87:cd:10:68:eb:dc:20:c7:d9:d9:5f:43:6b:27:ef:
34:db:8e:8f:c4:0a:9c:04:69:4d:8c:51:81:29:45:
f8:fb:09:a1:53:00:52:49:3e:93:52:32:d6:bc:90:
1b:5c:73:4a:97:6c:c1:96:12:09:91:3c:9e:ce:48:
d6:7a:9e:a8:43:40:74:c1:1e:3a:1b:de:e7:58:91:
40:7f:6f:75:40:c0:51:6c:67:43:75:19:b0:21:49:
7c:13:09:06:e4:d2:b2:07:8f:5f:cc:5f:01:ca:ea:
eb:10:b0:8c:b7:46:f6:32:34:e9:54:21:a2:ae:20:
4b:50:58:c0:a6:2e:b7:17:2b:f6:d7:37:c0:e1:97:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:23:79:1D:81:96:3A:B1:6A:2E:EB:D2:71:46:C7:CE:34:18:7D
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:c1:c6:9a:55:99:89:62:66:aa:dd:63:ab:58:5e:de:ae:
ee:48:e7:2d:8c:bc:3f:e3:42:26:93:7c:8f:de:37:6d:b2:c4:
58:7c:4b:a7:58:bb:98:5b:bf:43:82:6e:80:27:67:08:18:bd:
13:5b:3b:50:89:08:fc:99:92:7e:85:1b:c9:41:bd:9d:a8:89:
39:e7:79:a2:58:d7:56:ce:9d:ac:d9:c8:ee:d2:a5:65:9e:7b:
64:7a:c5:3b:46:63:07:bd:c9:9a:25:40:06:13:1e:c6:1e:b8:
ae:d9:85:6a:6b:1e:da:f5:0a:3d:46:81:2a:a4:4f:af:c0:c1:
1d:09:18:bc:f8:70:cd:f1:72:ea:ad:93:5a:dc:a3:ab:07:ae:
b0:0e:85:72:2a:0e:2a:26:0a:d0:b3:67:02:f4:41:55:dd:62:
b5:84:46:62:91:17:6c:a8:1e:4c:6f:34:e8:ed:d5:47:c6:73:
d2:fe:18:59:77:c9:48:5c:ed:cb:c0:fb:67:47:18:9e:c8:bd:
f5:2a:5c:c8:aa:ec:b4:ba:66:8c:a1:e5:90:64:d0:09:e6:da:
01:0e:a3:4f:62:39:47:0c:67:de:f2:89:f8:9b:67:06:d1:40:
1b:6d:5f:e5:d4:77:dd:70:6d:0b:ce:2b:15:c1:94:df:eb:fd:
b2:df:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:41 2025 by rpki-client