Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: guWVta4MZdHFFkd5Mg0plys8VdMq/9CxoHEWJ134tVY=
Subject key identifier: 7B:8D:73:81:69:4E:AE:2E:CF:B2:DF:00:C1:39:E2:ED:37:3C:E1:71
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 019696E17A5425AF0CCD0BF1C32A9F3481DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 1520
Signing time: Sat 03 May 2025 16:01:21 +0000
Manifest this update: Sat 03 May 2025 16:01:21 +0000
Manifest next update: Sun 04 May 2025 16:01:21 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: MwkS/57iwLiGY5BRpizVu3jGaDs3NiqClaIUHHodNnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:e1:7a:54:25:af:0c:cd:0b:f1:c3:2a:9f:34:81:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: May 3 16:01:21 2025 GMT
Not After : May 4 16:01:21 2025 GMT
Subject: CN=7b8d7381694eae2ecfb2df00c139e2ed373ce171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:30:a0:5a:43:de:0d:bc:ae:03:19:97:b1:
c5:38:46:63:13:b0:8d:82:41:16:0c:20:76:4a:1b:
dd:d9:ae:f5:2f:f1:4b:df:6f:9d:9a:40:c5:de:8d:
00:f0:de:52:d9:f3:1c:e7:ee:e9:e8:2a:45:4c:8e:
1d:f1:3b:0e:cb:42:69:14:6f:97:51:ce:7f:a6:73:
7e:9c:31:dd:fb:a6:88:69:c3:85:40:70:bd:8f:79:
66:70:b1:42:07:c6:7f:b2:f6:1f:e9:5c:85:c0:30:
ab:ad:9a:bd:f6:8d:49:aa:ee:29:cb:8b:8b:7f:63:
66:53:e3:5b:47:c5:3b:b9:ca:7c:86:e3:57:9d:dc:
f4:d0:20:1e:a6:17:12:b3:f4:6a:25:68:aa:13:58:
2a:c8:0e:bb:13:47:cc:f7:46:41:0c:61:50:27:a7:
b0:98:e5:af:0d:08:3d:06:bf:b2:53:99:92:a2:a5:
60:5b:74:17:4b:0e:31:ca:e5:a1:9f:b9:38:c4:75:
31:20:c1:b5:6d:b4:78:22:8c:cb:3a:32:5d:ba:67:
ca:ce:7b:ca:e5:51:66:c9:25:aa:a4:98:f4:fa:9b:
88:ba:33:33:da:a8:0f:86:7d:b8:fd:0a:34:a9:4d:
7d:8e:70:5d:5b:5a:fc:10:6c:0a:f4:09:d0:44:20:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:73:81:69:4E:AE:2E:CF:B2:DF:00:C1:39:E2:ED:37:3C:E1:71
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:5e:af:7d:40:09:c4:e1:d8:58:89:32:80:70:9d:64:78:
0a:94:a1:eb:03:09:fc:32:0d:b9:5f:8f:98:6d:a0:01:28:75:
5c:c3:c4:4d:da:0b:38:e3:97:4a:f7:8f:f8:bf:46:b5:e1:80:
1f:d3:cd:c5:c4:22:0b:40:13:9b:e4:e6:5d:56:57:79:c7:21:
c4:d9:7f:29:11:06:a8:e7:00:34:a9:75:ef:de:20:46:61:3d:
06:08:46:b6:1d:74:b1:ec:b9:0c:c6:1d:5c:d9:ca:f2:59:e8:
5c:aa:38:4c:24:52:91:9c:79:3e:95:ae:93:f4:5d:98:36:ba:
03:6e:a6:c2:33:cd:9d:24:0b:f7:df:97:b5:5c:fb:6e:a8:09:
b4:fa:a7:04:72:bc:29:bc:b6:23:33:3b:18:83:37:aa:ad:d6:
5d:63:92:b1:4f:97:3a:d8:fb:e5:d7:76:f4:19:79:dc:68:dc:
95:0e:7b:6e:b0:32:a1:40:e8:b0:78:49:ec:1b:c1:21:90:98:
32:99:36:82:e3:3f:5e:2b:12:8c:9f:b9:33:25:51:92:ee:ff:
4c:9d:4f:26:7b:fd:19:b0:dd:83:68:6a:da:54:52:6a:eb:26:
31:82:b6:8f:83:48:a0:f1:80:13:29:9a:74:45:8a:4d:ef:54:
fe:16:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:34:49 2025 by rpki-client