Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: qsbOu0/t17oA+WatyF4/u9IHMkEHvrlxm7qQD3yzGbM=
Subject key identifier: 0E:36:F9:D8:39:D8:43:FD:2C:CB:C4:9B:B0:FA:86:63:F7:A5:2F:71
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 0196760C3CE87BA0B9671FE3EA50E2F09DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 0421
Signing time: Sun 27 Apr 2025 07:00:35 +0000
Manifest this update: Sun 27 Apr 2025 07:00:35 +0000
Manifest next update: Mon 28 Apr 2025 07:00:35 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: cMIiJ1JVVTaJwACF+XaUJ6bMqdrKzy7CzFPTbk1C0Ss=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:3c:e8:7b:a0:b9:67:1f:e3:ea:50:e2:f0:9d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Apr 27 07:00:35 2025 GMT
Not After : Apr 28 07:00:35 2025 GMT
Subject: CN=0e36f9d839d843fd2ccbc49bb0fa8663f7a52f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:d8:ce:ae:d1:57:91:7b:3e:1f:19:c8:b9:
9f:09:66:4d:c2:44:c9:e8:b4:fb:cf:cc:b6:ae:c6:
21:e8:47:b0:70:89:13:d6:72:91:30:27:29:21:29:
3e:2d:4a:31:cc:82:55:ba:56:fb:0a:cd:4b:69:a4:
86:1c:f7:d8:58:0f:45:ca:93:a8:03:9d:80:0e:5f:
df:7f:1b:ff:ec:04:2b:07:ae:5c:72:13:66:c3:c2:
5f:93:03:eb:51:6c:cb:46:82:33:ab:7b:ed:02:0c:
1b:d9:0d:e1:9f:49:b1:99:03:20:cb:69:83:fe:ef:
56:66:93:b0:8a:64:54:0d:4f:72:0e:3e:e9:2a:2b:
8f:24:04:af:af:de:d0:97:4b:46:e9:b3:81:a1:8a:
fd:0a:ee:6e:56:15:56:3d:cf:9f:4d:5e:77:62:af:
59:34:dc:e8:cc:de:0d:51:e8:40:f0:ac:a9:be:17:
29:73:58:22:c8:74:af:bb:9b:36:09:ec:9e:63:5e:
6c:55:8c:24:df:7e:ad:b6:05:42:c9:95:5e:14:af:
50:63:51:58:dc:77:76:92:a6:ef:8f:36:b5:ec:83:
5b:6b:23:44:5e:74:b8:c4:2e:8c:57:c5:73:c0:d3:
df:66:d0:22:d1:29:4f:ff:39:c9:38:7f:3a:2d:59:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:36:F9:D8:39:D8:43:FD:2C:CB:C4:9B:B0:FA:86:63:F7:A5:2F:71
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:74:25:ab:dc:dd:5d:c8:13:dc:d6:f5:fb:1e:23:43:2e:
ad:3d:97:ab:da:9e:bc:c6:20:69:da:64:94:8d:27:29:fc:2e:
d2:3b:d0:0d:58:f9:ff:76:fc:17:d3:89:63:57:25:52:16:fe:
8f:8f:00:65:f7:09:7d:2c:b7:0e:d0:53:4b:63:28:00:80:2d:
c9:d4:91:54:3b:c8:fa:41:da:d9:b8:90:8f:74:c9:38:0c:2f:
d9:27:93:eb:66:99:03:9c:52:87:50:3c:4f:4b:63:03:b8:b1:
74:85:39:e2:d2:8f:5c:77:16:ed:34:05:40:28:42:96:c6:4c:
b6:d1:1b:94:aa:af:5a:90:ec:d5:62:db:19:25:ac:6f:c5:76:
08:82:de:ae:a3:dc:95:e3:fa:f6:4d:28:33:91:06:7c:d0:93:
47:f1:05:de:bf:30:83:62:ea:dc:aa:7c:5a:ac:2d:e5:3c:3c:
c3:b7:96:e5:d1:a3:fc:f4:17:59:f3:0c:44:b1:2c:f7:72:5b:
04:ff:bb:a3:58:ea:54:02:5f:1f:1c:76:61:4c:5e:ee:ea:fe:
4e:e1:c5:42:06:42:0d:1f:8f:56:6a:6d:34:07:51:b6:b9:26:
cb:08:71:d7:19:6e:2e:69:16:1a:fe:31:eb:0b:cd:3a:38:19:
66:5b:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:31 2025 by rpki-client