Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File: ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier: 4sqd4Q6vTfxSnRq2wXsphailylyn2WoWiPeOCiaibzQ=
Subject key identifier: D7:11:E6:6F:F7:3B:00:F4:38:B5:0D:37:99:9F:A5:D1:25:0D:6D:A4
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer: /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial: 01967AC524301AEC74EB8722668BA78AC343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number: 0379
Signing time: Mon 28 Apr 2025 05:01:02 +0000
Manifest this update: Mon 28 Apr 2025 05:01:02 +0000
Manifest next update: Tue 29 Apr 2025 05:01:02 +0000
Files and hashes: 1: dOwtVPCk-WvN7ZMQPwT0i6o3PTs.roa (hash: iKLmmrkDgYTBybVLHZNcg/1f3W3OlockqL3lDqEGWGQ=)
2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: 4owIRfGwSv++u9cFbdjKsLbH73dTJQvGfqogzR+mYPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:24:30:1a:ec:74:eb:87:22:66:8b:a7:8a:c3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
Validity
Not Before: Apr 28 05:01:02 2025 GMT
Not After : Apr 29 05:01:02 2025 GMT
Subject: CN=d711e66ff73b00f438b50d37999fa5d1250d6da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:15:4d:32:4b:ca:4f:8b:2e:bb:46:f6:df:
1c:6b:9b:e0:46:cb:a0:ce:61:af:ae:bf:37:e0:b9:
ff:29:37:c3:9e:86:0e:21:9e:49:f8:b8:79:81:0c:
66:43:89:e7:81:49:bb:4a:39:78:10:6d:96:58:ab:
5f:75:d0:d4:f2:3e:b0:53:71:af:35:c1:41:07:ff:
ad:4d:cc:80:a7:7f:f1:36:9a:6f:96:92:68:20:8d:
c7:f5:ba:58:70:77:82:95:08:9f:48:3b:f8:2d:2f:
53:a8:ba:a1:31:0c:29:79:47:60:71:2c:cc:f4:21:
65:ee:cf:02:f1:fe:78:de:81:47:e4:d5:32:41:3e:
22:11:d9:0e:0e:c3:d8:ab:5c:c0:b1:19:9d:b2:92:
3a:aa:ee:48:c3:4e:2f:af:f0:13:60:f9:45:26:e8:
cc:9a:c9:c3:af:3b:9a:9a:3a:7c:8c:c4:63:b8:10:
9f:e8:69:f7:08:2c:2c:f5:8b:51:2b:c3:58:3f:36:
06:f4:1e:a8:f7:db:0d:34:bd:89:86:e0:5f:9c:92:
44:e4:ab:a5:a6:d4:ec:68:80:d7:70:d0:29:53:0d:
b4:a2:53:78:07:9b:0c:9f:28:87:0c:97:41:3c:95:
a1:cb:de:14:d3:88:c3:b1:60:08:9a:16:43:54:c2:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:E6:6F:F7:3B:00:F4:38:B5:0D:37:99:9F:A5:D1:25:0D:6D:A4
X509v3 Authority Key Identifier:
keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:31:ca:44:ad:36:c0:36:3f:da:b1:65:7f:45:85:c6:4d:8d:
ef:9b:fa:33:be:05:11:71:48:17:81:4a:b5:1c:2e:0d:ec:46:
13:c8:e9:ad:51:7b:5e:62:13:2a:71:c7:4a:3a:ad:29:30:13:
4a:a5:53:59:af:82:88:7d:5c:bf:d8:28:24:12:be:65:1e:d7:
0f:41:26:5f:0f:be:e2:64:9c:05:1f:cd:e6:73:bd:81:b3:3e:
9f:e1:48:f4:1e:95:cc:bb:45:76:b3:4f:e2:68:36:f1:f6:77:
9c:9e:c4:15:dc:83:92:09:48:96:be:eb:91:c8:b5:d1:3d:0b:
87:36:b4:9c:10:b5:be:36:38:4a:72:e2:c7:28:10:7e:4c:83:
50:d1:61:ad:76:7c:42:01:68:33:1c:53:4a:1d:41:e3:62:81:
c7:af:af:a8:93:fe:86:3a:fe:4c:4b:44:65:eb:85:9d:0d:86:
74:22:df:2a:20:da:b9:a5:fa:2b:82:1d:ef:86:87:fe:fc:31:
5b:2a:79:87:6e:29:fe:82:7d:95:33:8b:69:e2:ab:50:51:bf:
b3:3e:29:4c:a8:22:09:77:22:05:1f:53:49:04:16:e3:11:51:
c2:29:3f:9d:b8:33:57:bd:74:49:de:0a:02:45:32:c4:6b:5f:
eb:63:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:46 2025 by rpki-client