Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: wrEcuPes4EPoJBQDPkESQdA4/qdvxXYZ8edWKrl0Nko=
Subject key identifier: 65:FB:9B:E9:40:38:7D:27:24:DE:5C:D5:21:CB:CD:FD:5E:43:10:0C
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 019674F98628A5EA766CFFA7C948104B49F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 02:00:31 +0000
Manifest this update: Sun 27 Apr 2025 02:00:31 +0000
Manifest next update: Mon 28 Apr 2025 02:00:31 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: 1k7J9AlTbiRIdwUCJJtzJdwD/0Z5EbuzrOS/JNzFjak=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:86:28:a5:ea:76:6c:ff:a7:c9:48:10:4b:49:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Apr 27 02:00:31 2025 GMT
Not After : Apr 28 02:00:31 2025 GMT
Subject: CN=65fb9be940387d2724de5cd521cbcdfd5e43100c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:e9:67:f6:85:e2:cf:e3:28:cb:53:2d:0a:
ce:26:46:0b:89:49:05:b4:85:57:9b:3e:2d:bd:1c:
6e:a6:07:d0:e8:cd:16:b3:e8:0f:53:de:24:0c:11:
27:5c:f0:a6:74:72:d1:82:a9:de:97:7f:74:ac:c2:
df:52:09:ba:23:4a:c5:ed:ad:81:ff:eb:ec:91:05:
56:ca:e3:3e:68:0d:94:fb:71:aa:c1:02:44:2f:c2:
ae:31:fb:a5:bc:4f:be:41:5b:c4:fe:04:61:0e:9d:
c8:8c:0b:7f:a3:6a:4e:cf:6d:01:d4:85:95:35:ed:
78:1d:9d:c8:8d:3f:35:63:5e:32:c9:b1:1f:b3:4c:
61:a3:5f:ef:b7:f6:3f:cf:1b:f4:d3:35:0b:05:86:
9b:9a:57:9b:02:e3:56:a0:3e:f8:35:62:30:a4:ba:
6b:7e:15:2b:77:a0:0b:7f:17:67:d9:b6:d9:bc:19:
17:79:a0:12:e4:e6:4b:4c:fd:fe:9c:2f:7f:54:c2:
0b:58:43:87:c5:88:be:ac:76:98:25:82:ed:35:3f:
01:c4:c4:72:bc:99:33:e2:04:6c:ce:f8:78:5e:36:
4c:a4:ce:e9:c7:26:9e:2b:e0:16:8c:7f:6c:30:3e:
ee:a4:cb:ad:a7:49:fb:89:88:cd:3a:05:35:c7:88:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FB:9B:E9:40:38:7D:27:24:DE:5C:D5:21:CB:CD:FD:5E:43:10:0C
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:82:85:a5:2e:68:f9:f4:63:25:c1:3e:ec:55:ff:9e:b1:
8c:1d:40:72:28:d2:9e:17:3a:27:a0:85:d9:2c:ae:f3:0e:d6:
1e:46:2e:8b:f4:2e:31:c4:89:68:e9:36:a6:b9:a4:a9:b3:0a:
4e:f4:c4:21:f7:99:e8:9b:c8:83:66:64:cb:95:2f:98:a5:c6:
35:06:35:2b:dd:cf:1f:dd:65:22:d0:0f:0e:11:35:a2:66:eb:
2f:f2:87:a2:00:fc:6b:5b:39:a7:bc:d6:65:54:a0:6f:a2:e6:
ba:ad:c9:05:31:1e:4c:92:44:81:9a:3e:4b:41:c4:54:a2:f0:
f5:2b:61:54:2c:de:3a:77:28:c2:7a:5f:02:88:30:51:8f:54:
4f:ed:62:9e:4a:22:9e:19:67:01:ac:0c:53:c5:77:26:ae:2f:
5d:87:09:d5:bb:0d:eb:c6:f9:61:d0:41:54:f6:e9:8e:49:8d:
6c:35:af:cb:6a:30:48:9e:2d:29:38:c6:bb:3e:20:32:be:01:
eb:42:f2:f1:9d:2e:cd:bd:71:6f:64:23:71:ea:26:26:f6:e8:
a7:9a:f5:34:38:02:b3:b1:7b:e2:dd:8c:51:52:4b:77:d8:b1:
de:0f:94:9a:76:6f:4d:28:56:6a:3f:ab:4b:6a:9e:40:d8:d4:
ac:26:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:32 2025 by rpki-client