Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: Ne5ozWUUZwf+GO/lixdLKn0GuBUL1P69P5Z7uuPT4s4=
Subject key identifier: C2:A1:77:A5:41:0E:C9:F3:52:5A:25:3B:1F:B4:CE:5D:11:5D:EF:CD
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 019696E087517A3195D61143D22A1B4568D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 0361
Signing time: Sat 03 May 2025 16:00:19 +0000
Manifest this update: Sat 03 May 2025 16:00:19 +0000
Manifest next update: Sun 04 May 2025 16:00:19 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: JuVanYa+uSumA+JQHIT8j7uv9UVXOtKSbMM7GIbBc/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:e0:87:51:7a:31:95:d6:11:43:d2:2a:1b:45:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: May 3 16:00:19 2025 GMT
Not After : May 4 16:00:19 2025 GMT
Subject: CN=c2a177a5410ec9f3525a253b1fb4ce5d115defcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:ab:a1:c8:50:34:0a:5c:6d:a8:a0:3a:29:
b4:b4:20:91:6f:83:49:ee:99:8e:e9:85:31:fe:b3:
bf:e4:a9:bc:22:78:00:01:27:e3:5a:46:4c:90:3b:
4b:2c:05:4b:ce:29:21:65:00:d1:ad:71:13:88:bd:
d8:f0:22:fb:4f:64:1b:18:20:df:3f:af:47:a3:ec:
5b:26:18:de:96:71:97:37:f9:90:96:28:48:7a:6f:
fe:13:9c:bf:d8:3a:e6:84:86:ab:68:26:4a:f0:9a:
61:bb:ce:ec:62:e9:0c:b7:0b:a0:b2:1c:f3:14:b7:
88:2f:ee:a8:e4:73:08:c7:11:09:86:51:31:0b:fe:
81:dc:d1:c6:60:ed:06:b5:77:1d:98:fa:44:82:e5:
3a:97:78:0c:c3:8c:01:58:95:ad:a9:1e:5f:9c:73:
1e:02:f8:06:be:80:51:5e:92:7a:e9:31:5a:8e:56:
88:39:c5:80:3c:e6:e1:e5:e1:81:c5:8d:ad:de:bd:
74:80:e5:81:b7:ad:6c:fa:60:d7:44:0e:c9:dd:26:
1f:d2:d7:8c:3f:aa:c1:10:8c:2a:c0:78:c8:4a:1e:
97:46:10:b0:b4:ae:21:d0:45:60:b8:18:39:bb:a5:
96:56:86:c3:60:56:e0:b2:e6:1c:23:27:4d:c8:c3:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:77:A5:41:0E:C9:F3:52:5A:25:3B:1F:B4:CE:5D:11:5D:EF:CD
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:36:11:0a:33:c5:b2:1f:c8:0b:d3:5b:e8:31:8b:c1:b7:9c:
34:ed:69:92:d0:4c:b3:a3:26:6c:da:42:b6:18:c4:97:49:c1:
69:c2:bd:bd:5f:30:c2:c6:19:ac:da:cd:08:80:d3:1c:68:55:
df:94:96:d2:87:78:97:25:ae:9e:fe:e0:61:fe:49:54:bb:41:
72:76:90:82:d5:01:99:63:57:2c:a8:54:b2:9b:d6:3c:5d:e0:
66:61:8e:77:1b:c3:7f:3f:e2:fd:49:b0:85:00:57:14:90:ce:
f0:69:d6:7c:e3:71:12:d0:97:32:a2:a3:27:c0:c0:1a:48:67:
fc:ee:d5:9b:86:6d:66:b3:74:22:ac:80:8b:5b:3c:c5:c6:19:
2f:93:44:30:eb:4d:53:a4:c9:da:83:91:5d:65:96:22:bd:e6:
c3:63:31:64:33:f6:71:dd:a8:02:78:38:66:0d:d4:f5:70:eb:
07:d7:ab:8a:78:b1:d9:48:1f:50:56:0c:42:05:f4:1b:67:3f:
21:5e:1d:c7:a6:45:1d:e7:cb:d7:6a:7d:b3:76:ff:fd:85:07:
c7:b1:18:67:a8:01:59:40:74:ee:f7:ad:3d:2e:af:55:06:85:
15:29:d8:f0:45:a8:01:f9:09:c1:f9:3a:c8:af:a1:6c:e4:e3:
84:41:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:26:58 2025 by rpki-client