Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: yg/+5pGeORStvz3h5EqlsUz1p60C24ciQAvzKwDVVSM=
Subject key identifier: 3E:E0:38:63:0D:47:F9:4A:6E:BB:AF:92:3A:7D:74:A1:61:D2:65:C6
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 01968E82E7F4ABBDA39A2559890843E4009D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 0837
Signing time: Fri 02 May 2025 01:01:05 +0000
Manifest this update: Fri 02 May 2025 01:01:05 +0000
Manifest next update: Sat 03 May 2025 01:01:05 +0000
Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: W3dOGdTClBFUiW3YHMDQXgSVWLDtZRGM12ajaHWrHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:e7:f4:ab:bd:a3:9a:25:59:89:08:43:e4:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: May 2 01:01:05 2025 GMT
Not After : May 3 01:01:05 2025 GMT
Subject: CN=3ee038630d47f94a6ebbaf923a7d74a161d265c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:83:96:05:5a:fb:6d:49:93:b2:88:cd:84:
8d:36:e8:71:04:70:1c:ad:ac:37:55:82:46:ff:fb:
1e:5f:cc:b8:f2:3f:f4:f2:61:18:f8:d5:0f:ee:2b:
fd:61:ea:2d:8f:97:04:9d:c9:60:59:38:c2:da:3e:
83:60:4e:a4:c1:50:54:5b:04:7a:aa:d5:d2:26:30:
bf:99:72:97:71:1e:2d:2a:9d:29:c3:c3:3d:91:be:
cc:c5:5c:b6:ea:b8:0e:14:a0:98:4f:95:3c:d6:2b:
83:91:96:88:18:9f:08:93:15:6c:3d:da:64:e6:35:
41:19:fe:82:e5:9a:35:33:20:68:40:08:f3:b8:99:
25:41:84:cd:33:be:1d:f5:16:4e:83:c7:d3:08:86:
6f:b9:25:b8:b5:a8:ba:f4:67:43:0e:6d:22:c6:4b:
26:92:cf:dd:7e:2c:9c:cd:73:df:ca:aa:6f:41:5c:
79:bb:a5:c2:6c:d9:91:d4:28:2f:cd:b3:5e:3a:72:
09:17:eb:17:48:cd:56:27:21:c5:41:c3:96:85:ec:
43:0a:08:03:f4:7e:49:81:36:c3:b2:99:7e:b3:ec:
4c:8f:dd:52:7f:8b:a7:e7:43:79:b1:c0:24:62:f3:
5c:cb:1c:3b:a6:cc:71:e5:4c:7e:b2:aa:98:ac:d7:
4b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:38:63:0D:47:F9:4A:6E:BB:AF:92:3A:7D:74:A1:61:D2:65:C6
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d9:9e:dc:b6:a5:58:91:50:38:fe:0a:96:f1:0e:0c:b6:e4:
1e:0d:85:d1:a8:89:40:65:38:54:f5:15:b3:cf:b8:b8:f6:da:
64:81:72:3e:aa:21:f3:4d:6e:b6:58:2e:5e:0d:68:98:43:af:
17:06:ad:90:26:31:2e:38:38:7a:78:ba:22:b6:a2:20:ae:ba:
57:d0:18:47:7c:2c:e9:28:d5:50:dc:12:93:1a:38:fc:3b:b6:
6e:84:5f:07:07:eb:19:f7:5d:bc:b7:f4:99:1e:1c:6d:5f:a9:
c9:d4:af:02:6a:c7:b1:17:82:17:35:6c:a0:37:58:48:37:76:
b8:32:00:a9:be:28:37:30:54:a2:41:11:09:61:93:73:99:cf:
8d:48:88:a0:62:26:e4:84:c4:39:97:65:45:b8:b4:23:39:c0:
05:ba:a2:c1:7d:07:83:d0:7c:90:6b:aa:99:bc:4a:6c:cf:19:
dd:5b:a8:9c:07:cc:38:45:57:ce:76:d8:0c:6e:27:e0:31:12:
e5:4a:ef:e1:f5:f5:9a:e8:fc:f4:92:43:4c:9e:27:8c:f8:13:
27:8d:b8:40:39:68:89:b1:ec:50:76:74:88:4d:4d:61:cd:86:
c5:05:de:68:1b:02:f7:9a:da:a9:7f:98:f5:68:77:e0:32:b2:
15:9b:c9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:03:20 2025 by rpki-client