Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: qruk+hVihRpTXAbb2/C5Zfh6N8ZDk2sS/s8NkVJhcNM=
Subject key identifier: DF:CA:71:A5:EB:CF:44:2D:CB:C1:DF:92:ED:50:74:21:1A:C9:2F:EF
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019680FD7A0CC0F7D9BDA4185045CD24ADF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 17
Signing time: Tue 29 Apr 2025 10:00:17 +0000
Manifest this update: Tue 29 Apr 2025 10:00:17 +0000
Manifest next update: Wed 30 Apr 2025 10:00:17 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: o3wj2AKrLKsMueaT3YzXoVePfbow4WT4kMqdRvKe3Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:7a:0c:c0:f7:d9:bd:a4:18:50:45:cd:24:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Apr 29 10:00:17 2025 GMT
Not After : Apr 30 10:00:17 2025 GMT
Subject: CN=dfca71a5ebcf442dcbc1df92ed5074211ac92fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:a0:62:2f:93:15:5f:8f:d8:d9:d9:8a:b5:
aa:58:4b:19:e7:24:66:9a:e0:7a:d1:8b:92:3d:07:
27:52:3e:5c:ca:38:40:b1:92:15:a1:54:f7:90:c4:
85:3f:ea:c3:00:75:26:44:45:00:c0:7c:92:29:3f:
e9:5a:03:35:80:9e:e4:f3:d3:99:6e:cf:af:25:fe:
c7:cc:80:65:58:a7:49:5d:43:5a:be:ab:7c:08:b1:
d8:0d:92:3f:96:8c:a0:bf:ac:48:7f:b2:1c:fd:94:
45:1d:57:f7:40:ab:26:78:5a:4d:50:f6:ea:c0:f0:
88:84:e2:db:9b:2f:7f:d1:cc:0c:ea:9f:9e:51:aa:
0e:51:63:d3:96:22:8b:26:65:be:52:8b:f3:0e:73:
f3:73:bb:cd:d7:5a:e9:ef:ae:34:88:c4:3a:d1:e5:
80:76:4e:15:c4:e9:63:52:34:2b:45:c0:bd:b6:82:
88:30:9a:98:76:ec:ef:15:f0:2a:d1:c9:36:e9:a6:
27:82:56:62:60:f4:c0:9d:83:d1:a5:93:34:d3:c1:
2e:a1:b4:84:94:91:31:50:fc:e3:4b:25:f6:ab:75:
2b:fb:7f:4c:0d:f5:77:63:ba:a6:00:91:14:14:89:
00:e1:74:e3:15:96:41:5a:98:68:fc:a4:4a:c7:51:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CA:71:A5:EB:CF:44:2D:CB:C1:DF:92:ED:50:74:21:1A:C9:2F:EF
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b2:08:d7:b5:a9:a0:e2:90:71:cf:92:22:b2:71:1d:6f:bd:
c2:0f:65:69:b7:89:9f:c2:91:48:bc:6a:b5:e4:44:ec:21:ab:
87:eb:12:7b:c1:84:a6:d4:65:03:d5:06:ef:eb:ad:20:19:80:
94:af:bc:82:11:54:f0:f2:5b:b9:aa:3f:60:f5:34:cf:b7:08:
8f:cb:3a:53:29:a1:14:7b:49:52:6c:8c:3f:fe:a7:2f:46:06:
72:69:04:4f:a4:b1:a5:60:8a:31:69:ec:7d:7b:43:ac:b2:1c:
d1:88:7b:11:29:38:e0:c4:85:7f:d0:61:b1:31:74:0a:e2:d9:
60:6c:1c:a9:5d:c5:be:1b:f4:a8:f8:1a:d9:93:e6:d2:3a:6f:
93:05:5b:1f:83:ee:5a:b4:93:83:e2:0c:5c:4b:4f:29:47:b4:
11:96:54:bc:ab:f0:10:63:0a:db:c4:92:6d:8f:2e:e0:5d:16:
95:65:64:1f:be:d9:32:ed:3c:c9:1d:45:f9:9d:4f:46:d4:65:
03:dd:92:d2:2f:9f:93:f8:6d:b8:77:bc:1f:32:9b:c3:48:a5:
b9:10:73:68:85:28:ae:b5:9a:4a:0a:4d:f0:41:bb:f6:e3:cf:
fa:5b:d0:c8:56:c1:da:c7:ce:4e:07:d9:99:9b:9c:eb:eb:7c:
ac:79:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:28:04 2025 by rpki-client