Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: Ik6uHy2l5ArX52XAXlGlwLxFcrHim6UesPVmY13djzc=
Subject key identifier: 64:33:52:9C:91:4F:B7:48:FF:A9:89:40:5C:48:94:6B:B8:AD:8F:DA
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 019681D99DF8366F2522E0118277DE6FF44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 089E
Signing time: Tue 29 Apr 2025 14:00:44 +0000
Manifest this update: Tue 29 Apr 2025 14:00:44 +0000
Manifest next update: Wed 30 Apr 2025 14:00:44 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: +ukqE7t2dESQFsWymzbiXW3gf5glwjapkwbIaigx+o8=)
2: zKInD_uJ0MzVuNFZ1nxujfzo5eE.roa (hash: ywKe3EUqcRYUSRMVsCEquUk7tolOVlQ1ahf+CyiEesM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:9d:f8:36:6f:25:22:e0:11:82:77:de:6f:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Apr 29 14:00:44 2025 GMT
Not After : Apr 30 14:00:44 2025 GMT
Subject: CN=6433529c914fb748ffa989405c48946bb8ad8fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:e1:9a:88:b4:4f:8b:30:7f:8b:07:2d:8d:
ea:b3:1f:78:ba:c4:72:43:07:49:3e:f3:df:1f:92:
10:13:2c:68:1a:86:01:d3:06:70:91:ca:9f:1d:65:
8e:2b:ce:30:83:9b:96:40:62:e3:50:46:4d:6e:9e:
2c:29:9c:6b:3a:62:8d:eb:fe:59:ba:aa:e5:6a:49:
60:27:2f:1a:81:34:ec:27:0a:0f:bd:a1:7a:c1:fc:
7f:45:37:09:4d:93:57:53:d6:18:69:ab:a4:75:a5:
57:c8:d2:ad:fa:0d:fd:e0:63:66:43:e1:a4:7a:28:
45:bc:7b:61:8f:a0:b4:2a:24:d0:b3:e4:7a:45:1a:
0b:3c:d8:7c:b7:c8:e1:69:8d:88:77:56:c1:33:07:
05:af:15:dd:2d:f0:05:2c:dc:84:a5:90:26:ee:85:
54:b2:82:56:43:0b:af:95:a5:46:ab:11:32:fe:58:
af:aa:35:48:59:83:d8:0e:bc:0f:41:df:29:0d:24:
c3:15:0f:07:a4:b5:09:eb:ff:02:b4:4e:60:47:b3:
82:a5:64:31:ed:35:71:c9:77:82:cb:37:93:12:c3:
0b:30:df:a6:f3:64:c7:d2:ea:e0:e4:c7:de:de:2d:
40:bc:99:8b:cb:e6:6d:81:e7:f7:1f:33:c0:12:d1:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:52:9C:91:4F:B7:48:FF:A9:89:40:5C:48:94:6B:B8:AD:8F:DA
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:42:f2:c6:56:54:52:6f:2e:72:b7:d1:30:63:ef:06:f7:7b:
8e:72:b5:88:45:63:02:dd:e2:f4:15:cf:b7:87:3c:9c:f3:1b:
ae:38:c7:14:36:81:19:5a:ed:d8:50:12:8c:0b:e9:64:9a:84:
e6:c6:4c:32:d3:be:e8:6f:96:d2:1a:ad:70:89:84:ce:38:72:
72:26:3e:fe:c9:b3:c6:ab:3a:9d:69:5a:f2:46:d7:b1:2f:aa:
1d:82:4a:9d:e3:0b:ff:01:92:a9:80:ca:2e:d7:11:50:2d:fc:
b8:b5:de:72:35:14:44:bf:f2:74:de:07:25:ad:d8:7e:fd:c7:
3b:0b:aa:c4:aa:10:2e:74:b6:45:18:d0:97:9c:2e:05:40:90:
f2:00:a2:95:e4:b3:54:f3:17:0c:8f:02:94:09:e4:fc:74:0e:
98:91:f6:8f:a4:27:e5:9f:6d:70:a2:77:47:1e:af:4d:4b:7e:
0f:b2:24:d4:83:3f:fa:22:9d:a3:9c:68:f5:7a:d4:d3:66:a3:
b7:80:b5:4b:00:3f:57:aa:58:a8:30:7a:c1:b1:99:e3:46:83:
5e:7e:dc:78:81:8d:f6:d3:22:a0:ff:20:19:6a:d3:57:08:ff:
4e:e0:d4:e9:8f:2d:09:6d:05:4c:c4:42:f4:ef:b4:f1:ae:87:
88:bf:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:28 2025 by rpki-client