Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
File: w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft (raw, json)
Hash identifier: 7IMTczhpbfvYTqeA4I0+XBxvXSiWcuDGe0Oje+R6tmk=
Subject key identifier: 22:9E:26:2F:EA:5E:11:F5:E0:FF:A6:9B:8A:BB:94:98:D8:70:E0:CF
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Certificate issuer: /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial: 01967F0F9EFB1FCBD00D949314355B710ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
Manifest number: 0B68
Signing time: Tue 29 Apr 2025 01:00:52 +0000
Manifest this update: Tue 29 Apr 2025 01:00:52 +0000
Manifest next update: Wed 30 Apr 2025 01:00:52 +0000
Files and hashes: 1: 6bwL5YHScOT2TjF50UOzWmSHFbM.roa (hash: J7fubjulsksJL2y5CCyjiA6636klGKicCVaiq1Tvfs4=)
2: w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl (hash: Kb3EEX9IwtOqNzxOVSHgcaCbls0t64bfhlziBuRwvfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:9e:fb:1f:cb:d0:0d:94:93:14:35:5b:71:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Validity
Not Before: Apr 29 01:00:52 2025 GMT
Not After : Apr 30 01:00:52 2025 GMT
Subject: CN=229e262fea5e11f5e0ffa69b8abb9498d870e0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:19:23:54:d3:d8:f4:ab:44:fd:7f:74:da:
77:c7:5e:8b:ae:3f:ee:6c:ea:bb:64:93:a6:5f:ff:
1e:ac:7d:ab:cd:59:43:a7:9e:f9:eb:af:92:3b:a0:
47:68:88:4c:1a:c6:63:34:90:67:6a:a9:62:89:a5:
9a:7a:2a:59:f5:34:3c:35:aa:6c:34:9b:50:e2:62:
c0:c6:9e:db:1f:6a:b9:a9:dd:6a:d0:cc:56:78:c6:
84:97:34:2e:1a:df:ec:e0:29:f8:d0:ee:0c:24:f3:
e0:ec:55:0b:90:a4:c6:de:2f:df:16:09:a0:7b:8a:
82:18:25:fa:7b:50:1f:3f:53:da:18:05:20:1d:cd:
99:fa:85:c9:43:3c:dc:8f:98:35:e2:57:e5:18:16:
7f:1b:ff:1a:95:0d:e6:19:2e:0a:63:b7:e9:55:02:
fa:8d:8c:43:59:09:b2:eb:35:85:42:2e:0a:bc:3c:
af:84:ec:3b:b0:bb:7d:af:4d:b9:9a:08:ec:9c:54:
3d:01:3b:82:17:37:08:8c:a7:48:6c:ef:fe:41:f5:
40:14:22:32:4b:41:cf:f8:7a:18:7a:f1:dd:bb:37:
6b:a5:fb:6e:c9:90:03:3c:0e:8a:90:71:24:42:57:
0f:8d:01:66:c5:f4:c2:c2:27:40:37:78:0d:d8:de:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:26:2F:EA:5E:11:F5:E0:FF:A6:9B:8A:BB:94:98:D8:70:E0:CF
X509v3 Authority Key Identifier:
keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f8:91:40:d3:50:cf:d3:53:b9:30:9a:ba:a5:65:d3:39:91:
65:97:e2:30:65:33:83:41:bf:7f:62:46:97:20:00:ea:f4:3c:
9b:68:a1:39:e9:be:54:11:41:9d:9e:33:e4:60:48:3d:c3:2e:
55:da:96:04:3d:ea:a4:1a:45:3f:94:51:4e:9c:b6:f8:de:59:
c7:ac:99:ad:f6:c4:86:37:6e:7e:c8:b6:07:25:30:05:13:b5:
d2:29:38:a2:54:1a:b0:65:3e:af:93:ab:1a:1a:6e:d2:e5:8d:
36:87:1e:89:40:05:6d:81:c0:4f:18:90:e1:a3:00:59:c3:26:
f0:6e:ce:05:5b:17:13:27:0e:ae:36:48:fb:56:37:2a:b5:8a:
33:51:00:7c:4e:bb:23:e0:c8:cd:a4:c0:d0:62:45:be:e0:88:
2f:c6:c7:b1:c7:fb:f3:c9:a4:05:be:61:35:ae:9a:23:80:f1:
82:fb:ec:56:ff:23:82:59:ac:79:51:4c:fa:22:77:c9:73:92:
ed:e7:d5:0c:9a:19:f6:84:a3:fc:55:1a:86:e5:b3:a2:eb:df:
af:b8:9a:8b:6b:57:a5:71:01:ae:03:86:2d:33:6b:c5:57:2b:
85:9d:ba:a6:fa:d3:d9:7b:31:99:58:fa:b7:ef:23:4d:58:14:
24:29:8c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/D577H8vQDZSTFDVbcQrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTBlOWY1N2MzYjA4M2NiNjhhOTg2MzBmOGE2NjE1ODQ0
NjhlM2QwHhcNMjUwNDI5MDEwMDUyWhcNMjUwNDMwMDEwMDUyWjAzMTEwLwYDVQQD
EygyMjllMjYyZmVhNWUxMWY1ZTBmZmE2OWI4YWJiOTQ5OGQ4NzBlMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDEZI1TT2PSrRP1/dNp3x16Lrj/u
bOq7ZJOmX/8erH2rzVlDp57566+SO6BHaIhMGsZjNJBnaqliiaWaeipZ9TQ8Naps
NJtQ4mLAxp7bH2q5qd1q0MxWeMaElzQuGt/s4Cn40O4MJPPg7FULkKTG3i/fFgmg
e4qCGCX6e1AfP1PaGAUgHc2Z+oXJQzzcj5g14lflGBZ/G/8alQ3mGS4KY7fpVQL6
jYxDWQmy6zWFQi4KvDyvhOw7sLt9r025mgjsnFQ9ATuCFzcIjKdIbO/+QfVAFCIy
S0HP+HoYevHduzdrpftuyZADPA6KkHEkQlcPjQFmxfTCwidAN3gN2N5FUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKeJi/qXhH14P+mm4q7lJjYcODPMB8GA1UdIwQY
MBaAFMPg6fV8Owg8toqYYw+KZhWERo49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hNWI5OTktZjFjNy00YjBlLWEzZGUt
NTM4M2FhNjI2NzI2LzEvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hNWI5OTktZjFjNy00YjBlLWEzZGUtNTM4M2FhNjI2NzI2
LzEvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPiRQNNQ
z9NTuTCauqVl0zmRZZfiMGUzg0G/f2JGlyAA6vQ8m2ihOem+VBFBnZ4z5GBIPcMu
VdqWBD3qpBpFP5RRTpy2+N5Zx6yZrfbEhjdufsi2ByUwBRO10ik4olQasGU+r5Or
Ghpu0uWNNoceiUAFbYHATxiQ4aMAWcMm8G7OBVsXEycOrjZI+1Y3KrWKM1EAfE67
I+DIzaTA0GJFvuCIL8bHscf788mkBb5hNa6aI4DxgvvsVv8jglmseVFM+iJ3yXOS
7efVDJoZ9oSj/FUahuWzouvfr7iai2tXpXEBrgOGLTNrxVcrhZ26pvrT2XsxmVj6
t+8jTVgUJCmM3g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:33 2025 by rpki-client