Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: IYy4eDNM43Yv0laPcYApupMol3G/UYR68rtRp3kb7tU=
Subject key identifier: BA:10:83:C5:DC:B1:2D:68:50:50:79:36:A5:F4:50:60:A7:6D:18:CD
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 01967378D521F0F740A7E7676A63BBEA8E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0736
Signing time: Sat 26 Apr 2025 19:00:20 +0000
Manifest this update: Sat 26 Apr 2025 19:00:20 +0000
Manifest next update: Sun 27 Apr 2025 19:00:20 +0000
Files and hashes: 1: PbquhIW9zV3GTwFfHVfvcLv6xJw.roa (hash: aemUH4PS/FSjfL3HdRU+EJA2H9Gd9sGg3EwGKTMzK9w=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: 2IiEWHCUNwVjfVkyE2YXEN3Jxkm3flr24LdojTINrgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:d5:21:f0:f7:40:a7:e7:67:6a:63:bb:ea:8e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Apr 26 19:00:20 2025 GMT
Not After : Apr 27 19:00:20 2025 GMT
Subject: CN=ba1083c5dcb12d6850507936a5f45060a76d18cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:d3:39:ec:f0:00:d3:3f:33:a1:eb:f9:ca:
6f:e3:fc:12:bc:33:76:aa:5b:e7:5f:71:2b:7d:d0:
37:6c:44:44:b8:c5:aa:e7:a1:00:cb:72:cf:70:3d:
45:f3:96:e7:d7:96:ba:f8:9e:3b:4d:8b:c7:45:56:
29:04:bb:dc:6b:92:88:9f:ae:d5:09:80:a8:67:6d:
72:de:8a:1f:9a:46:a5:9e:7b:00:86:84:34:67:87:
7d:ff:d7:2a:bd:12:27:28:fc:39:49:9d:63:3e:f9:
e2:d7:4f:e8:b6:81:88:b5:a0:eb:02:44:6f:2e:66:
2f:2a:de:e1:20:83:a0:67:12:6e:dd:60:94:7f:c3:
6d:72:dc:8b:88:d8:c1:f2:5e:bd:f9:b8:cc:b7:7e:
01:3b:18:8f:02:e6:cd:8a:3e:24:42:05:06:c3:3e:
dd:97:ec:18:16:10:62:a8:3f:cf:7f:d8:76:95:d4:
4c:ee:67:11:d2:7e:dd:1b:41:00:1a:76:30:ed:ca:
00:b6:5a:46:c6:a2:3f:96:2b:75:34:4d:ab:94:8e:
8d:96:ca:d3:46:d2:27:61:b6:5a:3c:a1:57:99:2d:
4b:23:ec:3c:67:25:a2:92:47:d3:0c:58:48:2e:de:
b2:c0:2f:9d:fe:37:52:49:39:9d:c4:fa:30:c8:09:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:83:C5:DC:B1:2D:68:50:50:79:36:A5:F4:50:60:A7:6D:18:CD
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c8:0e:14:21:15:0c:cb:28:b1:34:d4:23:93:46:a3:f9:d4:
a4:eb:03:75:e3:cf:f2:c2:bb:04:8c:cb:2e:02:dc:16:20:9d:
7b:55:85:ca:39:f1:9f:83:d5:9f:7c:84:1a:f4:66:3e:16:41:
4d:b7:42:5c:f3:7c:af:aa:73:28:f2:d9:d5:f2:2e:cd:6b:ca:
bf:00:3e:3b:21:ef:d7:ca:e2:63:e8:a6:53:5c:11:4a:b6:0d:
2f:e9:9a:40:8e:bd:e8:d2:13:61:e5:cb:df:26:3a:9d:2b:ac:
23:dc:d4:48:13:eb:aa:8f:3e:78:0d:a6:c9:cb:38:38:3b:a4:
85:32:bf:ad:ab:e6:95:8f:7c:88:40:f8:42:3e:1b:27:c8:5c:
d1:82:48:dd:1e:73:63:50:ac:84:09:aa:f0:67:eb:38:65:18:
49:db:c8:c4:db:c3:0a:e4:99:5d:90:b0:70:98:29:b4:0a:8c:
67:27:2f:7e:11:5e:70:2b:ca:c6:4b:91:c6:dc:1a:e5:7d:98:
2c:46:02:c4:71:53:49:35:91:4e:21:dc:f0:c3:55:3f:02:9f:
c4:7b:7f:94:97:4f:9e:14:d8:24:1d:05:d0:3b:d1:e9:b3:61:
69:05:1a:a1:cb:65:12:dd:7e:66:dd:f3:9e:41:5b:19:ff:bd:
e5:8e:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:24:16 2025 by rpki-client