Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
File: wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json)
Hash identifier: UlELYEBbLDPBC/j1gODeFRrgyqTUqs75LFwElSXLrOA=
Subject key identifier: 7C:3B:97:31:D2:04:83:A4:A1:C9:BF:38:F0:BF:B1:84:47:56:D4:12
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01967A56A947A3A4E8B7495FAC3BFBD79DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
Manifest number: 1640
Signing time: Mon 28 Apr 2025 03:00:21 +0000
Manifest this update: Mon 28 Apr 2025 03:00:21 +0000
Manifest next update: Tue 29 Apr 2025 03:00:21 +0000
Files and hashes: 1: MXzzmJpwK0AnQmtnN3WOYLsCRv8.roa (hash: RsDSP/EJFDLzHQNpwCzmZg3FD2FDNn4XU1KplfHlLUU=)
2: stJA80yW4F1cSrmOzRPbXub7b1g.roa (hash: 5o9FX/sobhwcx2zWjhXbG+VgB450Fn7x7FoBORm3XUo=)
3: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: uW/9bc0APVBK7CxxRmpyQisOick+0KmU6lSiTHrQ1Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:a9:47:a3:a4:e8:b7:49:5f:ac:3b:fb:d7:9d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 28 03:00:21 2025 GMT
Not After : Apr 29 03:00:21 2025 GMT
Subject: CN=7c3b9731d20483a4a1c9bf38f0bfb1844756d412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:29:d8:ce:2b:73:a1:25:42:78:a2:e9:b6:
83:fa:a7:1b:d6:30:8a:0a:e8:0f:1c:bf:5e:d4:97:
a5:9c:97:50:5e:47:cb:3a:f3:27:34:6c:34:5e:83:
aa:f8:99:93:7e:e9:e9:d2:4d:0c:14:68:3f:3f:2c:
c5:42:a8:9e:f9:dd:d6:73:9a:3f:38:5f:ef:5c:38:
28:ea:04:df:77:81:cf:70:44:b1:9a:85:12:94:7a:
a8:15:5a:a2:99:15:99:e9:0f:6c:50:3a:b3:47:4f:
6d:47:d3:75:ca:94:9c:74:52:58:be:74:8b:7a:e9:
f8:87:a5:17:92:25:ff:0b:ae:11:23:f4:ab:29:5c:
37:1e:40:aa:a7:85:a5:b2:9a:2d:27:20:d5:34:74:
44:d5:01:fc:60:05:12:2f:8a:89:12:87:20:80:33:
37:17:4e:fe:ae:86:5d:41:14:d9:b1:ba:86:2f:09:
23:a8:81:72:35:00:7e:12:30:60:5d:6d:50:ee:d3:
e0:ff:bc:0f:9a:58:06:da:f4:b0:20:d3:79:14:57:
74:f2:51:6e:b5:55:05:91:56:04:af:0a:f9:1c:b1:
74:30:77:bd:cf:54:10:9b:e6:ae:14:2a:00:9b:84:
d9:67:38:df:48:4c:c1:3d:56:c6:7d:76:6e:44:12:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:97:31:D2:04:83:A4:A1:C9:BF:38:F0:BF:B1:84:47:56:D4:12
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:96:6c:b7:18:a8:69:84:91:5e:73:de:40:f1:57:96:64:53:
80:eb:1e:95:89:d4:13:b2:b5:2c:57:8f:15:7d:f7:eb:33:06:
fb:8a:fe:3e:0a:2a:7c:74:8b:56:e6:3b:86:c9:86:b2:e4:28:
35:6f:2c:27:4e:02:7b:a9:15:a3:78:a4:96:70:ca:15:c1:2a:
2a:12:cd:02:f1:1c:25:2d:92:84:05:87:4f:92:7a:18:69:b8:
cc:6f:9e:d2:91:d8:48:de:a8:78:8e:0c:92:7d:7f:67:79:cf:
2a:a9:06:67:2f:d3:6d:1a:8a:47:89:4f:a0:fb:d5:39:37:83:
94:ce:46:26:66:ce:c6:f0:12:e0:c2:8e:49:1f:d6:10:7c:db:
83:6a:f3:1a:ff:18:18:ea:46:f6:26:bc:c5:06:24:38:0f:5b:
f5:11:8f:36:14:24:f5:47:e7:cb:3f:7d:20:30:d2:65:9d:6a:
c9:67:86:f1:ae:85:0b:12:5c:d3:5a:2f:e6:d4:c8:aa:60:07:
73:6f:6a:f4:bc:a5:39:82:ec:05:01:6f:9e:e0:e2:0f:10:b1:
d6:62:45:47:86:eb:2d:f4:b2:5a:5f:ec:c0:97:43:c7:9a:ba:
67:21:49:53:e4:46:da:df:48:6c:84:28:08:63:f2:97:62:57:
a6:2d:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:36:15 2025 by rpki-client