Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier: J6YUwX7urDuvizoR9vfTLpRaR7dK5V36PSuyStvdAtg=
Subject key identifier: 30:20:15:2F:26:A0:ED:FC:1E:CD:3D:C1:B8:E7:17:A1:7A:B7:07:0F
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 0196A1647BCB3FD36EA582F63CAEF445EC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number: 1531
Signing time: Mon 05 May 2025 17:00:39 +0000
Manifest this update: Mon 05 May 2025 17:00:39 +0000
Manifest next update: Tue 06 May 2025 17:00:39 +0000
Files and hashes: 1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: wnCWBvGr3QF6Y2wFAAqjW9w0Atre9cJieZLnfiiAUEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:7b:cb:3f:d3:6e:a5:82:f6:3c:ae:f4:45:ec:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: May 5 17:00:39 2025 GMT
Not After : May 6 17:00:39 2025 GMT
Subject: CN=3020152f26a0edfc1ecd3dc1b8e717a17ab7070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:aa:e1:57:3f:f4:71:67:2b:fa:64:82:4b:
c5:48:a6:5e:45:cf:1b:22:8a:3d:cd:f6:08:27:5c:
ab:4f:f3:3f:43:5e:e2:de:0c:44:fc:b7:9b:e8:7a:
d2:f1:16:69:7b:ca:6b:8c:70:c6:6f:75:70:2b:f0:
50:26:bf:d2:ca:ef:8d:0c:81:ea:2d:04:aa:a4:6f:
34:e5:6a:8f:e5:af:8f:e4:f8:04:09:0e:42:d3:02:
95:6b:86:e3:d6:19:c2:e8:f7:9b:e4:78:45:67:e0:
a0:9e:b9:5a:d0:b5:be:e5:a7:af:6e:cb:d0:1f:f2:
9f:84:fc:55:8e:91:b8:66:d7:0a:f6:43:b6:0b:37:
da:d3:4e:68:e9:d8:bf:1b:84:1a:6e:7c:14:27:fc:
9d:e2:4d:28:5a:bd:b6:84:e0:ee:bb:b8:53:d9:1e:
8c:2d:2f:1c:bd:1a:6a:3e:e8:9a:b0:b1:5c:38:4d:
52:60:9d:19:26:f6:0c:6d:39:12:e1:f0:ba:bc:28:
3d:b1:92:97:06:bc:9a:f1:c0:a7:7b:c5:31:41:89:
e7:91:30:9a:96:9d:c6:cc:4a:1e:6b:ff:7d:41:a7:
b8:1a:92:5c:95:2a:83:de:05:33:c7:b3:d6:bf:52:
5e:d6:c3:d5:26:c9:b1:06:bb:7b:b5:f2:6c:b4:a1:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:20:15:2F:26:A0:ED:FC:1E:CD:3D:C1:B8:E7:17:A1:7A:B7:07:0F
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:59:14:52:d1:59:e2:e6:48:00:15:5a:0d:92:82:ee:51:e5:
95:30:ca:2e:4a:68:81:30:86:cd:5e:cf:0f:a3:4b:b2:29:25:
bc:26:c1:b9:da:aa:79:c5:d9:f9:ab:af:c9:f9:9d:34:66:84:
be:dd:8a:00:2e:21:a7:12:31:20:80:0c:79:50:52:57:7d:c6:
56:96:31:7f:9e:d7:7e:a7:79:b5:29:03:a7:c2:e1:40:53:eb:
46:68:31:b6:9b:a1:40:4b:05:43:27:81:8f:40:70:2e:41:6d:
e4:32:49:42:03:7a:41:53:4b:78:a0:72:83:2a:8f:3b:f1:0d:
03:66:cb:af:12:bb:44:68:c2:76:2b:bf:f2:8f:92:b6:46:4e:
0e:39:17:6b:aa:18:96:41:ac:d5:29:5f:6d:1c:c6:c2:39:d3:
e5:47:42:78:51:ff:31:1b:25:45:be:fa:f2:f3:36:bf:9e:c7:
fb:4d:eb:b3:a1:b5:21:ee:b7:b7:47:d7:1a:3a:4a:0f:94:5a:
75:2d:21:46:5a:f4:e5:8f:5e:e3:83:fb:38:d4:15:a9:df:a0:
22:a9:4b:e0:30:95:77:69:fa:55:24:f6:0e:e4:5f:04:51:fd:
1f:64:02:9e:f1:60:23:7b:5f:e4:87:9a:50:7b:bc:46:10:d0:
07:e0:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:49 2025 by rpki-client