Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File: wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier: xU276JeSTwrkmrf9SbEtPsFvNJ7VW1+sDezTt29EnjQ=
Subject key identifier: 68:CF:B3:33:B8:F3:C5:E8:B6:1E:57:EE:43:7B:2E:42:4A:54:17:EC
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 0196839132DE69C13A85410B6F170B1940B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 22:00:53 +0000
Manifest this update: Tue 29 Apr 2025 22:00:53 +0000
Manifest next update: Wed 30 Apr 2025 22:00:53 +0000
Files and hashes: 1: 2JIOSCKb1yPGO4sxkBE8Pq2m1SI.roa (hash: 6wJtQ966GopPabKniSig2Pa6Q5RXd/Jr37kv2JhiMao=)
2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: GlUOej/JIEDl0khezVqrprIQsRqng/S2tFa+UasG6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:32:de:69:c1:3a:85:41:0b:6f:17:0b:19:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Apr 29 22:00:53 2025 GMT
Not After : Apr 30 22:00:53 2025 GMT
Subject: CN=68cfb333b8f3c5e8b61e57ee437b2e424a5417ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:5f:ea:5d:59:de:25:78:e0:64:57:9c:fc:
aa:63:18:77:69:13:18:9f:e2:4c:1f:5c:64:8f:62:
b3:fe:8d:6d:3d:1c:77:c0:e1:e8:b9:e0:ef:16:53:
34:ab:13:28:ff:e8:40:29:c7:b9:17:d1:79:b6:95:
85:f5:42:13:2d:75:88:ca:73:2f:fb:a8:82:a9:f9:
25:18:21:a4:35:12:14:98:f3:94:e6:98:55:ff:d8:
98:2b:c7:54:44:00:66:1e:1e:30:36:6f:3b:e0:44:
50:61:c4:a1:67:d1:b1:c6:e3:1f:50:a6:fc:33:f4:
88:16:c8:8b:5b:d3:9e:88:d0:39:1d:4a:11:76:2d:
1a:74:f6:0e:99:c5:27:3d:af:af:02:db:4e:8c:b7:
5d:8c:4f:c7:21:f3:24:35:90:00:6c:f5:00:15:93:
4f:c8:7e:83:3d:d1:d8:ce:d6:fc:52:98:83:70:29:
f0:97:a7:e5:59:62:54:95:90:84:0f:8b:92:5f:4c:
fc:a6:e2:43:5a:cb:dc:be:43:9d:83:af:1f:53:40:
95:b9:2a:af:9f:5c:56:e4:7b:b1:be:a3:24:48:ff:
f5:65:59:30:21:95:9e:8a:9d:4d:27:e1:a9:cc:29:
62:30:77:fc:06:da:2c:c4:56:18:4b:54:dd:89:8d:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CF:B3:33:B8:F3:C5:E8:B6:1E:57:EE:43:7B:2E:42:4A:54:17:EC
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:19:8b:d7:22:1c:b0:53:be:65:97:66:ff:73:52:be:8a:fc:
2e:9e:4d:50:10:8a:4f:f1:d8:7e:07:c9:88:cb:d5:a7:cf:a0:
a1:7b:06:79:e4:bf:8a:cf:0a:a7:35:48:ce:fd:0a:be:8d:8f:
d3:f6:a7:81:f1:49:b2:c8:60:b5:69:7c:1c:71:43:fc:ac:df:
33:22:bb:a6:3e:6d:50:fe:fb:2c:0d:2f:12:8e:2f:35:79:d4:
6b:33:78:b2:53:80:dc:02:32:e5:01:2c:a4:93:19:e5:62:fd:
cc:e6:7b:a1:42:93:d6:bb:e8:d5:63:43:03:ba:c0:27:4b:c4:
a2:8e:a9:3b:25:30:38:10:29:99:b8:68:08:6d:ea:08:40:63:
90:2a:e1:71:16:42:d6:d1:c7:99:5d:e4:cf:00:eb:4c:ba:66:
b6:d4:a1:f7:61:b8:6e:8d:38:c6:e6:2b:b1:5a:8d:64:19:0f:
7a:74:78:80:c4:ca:6d:5e:b8:b2:c2:25:55:9d:26:fe:30:90:
f7:4b:b2:26:33:19:2a:82:5b:28:4d:ae:0c:1f:aa:a0:44:da:
ad:e9:ac:d2:f2:ff:0e:7f:93:e0:7e:19:0b:dc:2f:f6:e0:a0:
48:37:91:ef:c5:cc:42:8f:7c:38:00:32:b6:5f:7b:56:f2:8c:
f4:df:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:48:26 2025 by rpki-client