Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: ATPQ+Tr8EDrsBhbIyNzCsXeWjZ8nKyeHFgLIUyrhZ2g=
Subject key identifier: 84:6F:15:61:BE:A8:F1:44:E3:94:ED:B4:07:CD:12:B1:7A:2A:66:56
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 0196767A6904508772D3F62BD3E485FFB277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 4A
Signing time: Sun 27 Apr 2025 09:00:55 +0000
Manifest this update: Sun 27 Apr 2025 09:00:55 +0000
Manifest next update: Mon 28 Apr 2025 09:00:55 +0000
Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: X4q42NmFtMERlulTmhPq+JvjvFFqDXoG9vO0oLhxytA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:69:04:50:87:72:d3:f6:2b:d3:e4:85:ff:b2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Apr 27 09:00:55 2025 GMT
Not After : Apr 28 09:00:55 2025 GMT
Subject: CN=846f1561bea8f144e394edb407cd12b17a2a6656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:14:55:fe:3b:30:e4:61:f2:e1:1c:a6:78:
7e:6e:8c:8d:70:8a:92:7e:a2:9a:80:d3:57:6f:00:
f8:12:35:e6:14:70:8c:43:9f:2a:08:0b:11:ca:1b:
b6:d7:94:37:79:55:b6:a2:86:e4:4f:60:e4:48:8b:
18:29:1a:49:5e:e8:11:1c:0a:e0:d2:66:cf:22:22:
5a:8a:86:e8:dd:2c:cb:fe:f0:09:94:d5:bc:4d:66:
c9:ba:92:f9:f9:61:cb:66:e1:e9:1a:c0:4b:75:73:
32:38:99:6e:5c:09:2b:ea:69:74:30:a1:bd:de:87:
9e:af:cf:06:35:ec:77:fc:e8:89:f4:90:83:cb:f4:
1e:14:f2:77:dc:51:42:59:ba:6f:06:81:dd:ec:6a:
43:93:da:c3:07:96:e9:88:1f:8a:02:b3:87:79:a2:
4f:3e:bf:95:41:32:7b:76:a8:82:aa:e0:4f:b7:d2:
d1:26:46:08:62:55:38:39:29:19:0c:3b:30:e3:f3:
56:bb:9b:2c:8f:8e:6b:19:8a:bf:9f:9f:dd:58:74:
0d:d8:ee:53:92:c5:5a:c2:2f:aa:e8:e0:00:cb:da:
cf:cb:d6:8a:1f:0d:1c:98:e3:df:31:5e:6c:fe:ea:
9b:06:25:3d:fa:10:6c:11:f9:dc:4b:85:90:e5:d8:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:15:61:BE:A8:F1:44:E3:94:ED:B4:07:CD:12:B1:7A:2A:66:56
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:24:19:ff:f6:6c:1c:cb:9f:1d:49:41:cd:fc:44:79:10:76:
d4:df:de:83:cf:90:76:f0:41:91:60:ce:f8:1a:8b:e4:1c:bf:
af:da:c4:17:bd:f6:0f:ef:3f:55:b6:85:db:25:4e:6b:2e:27:
6c:5f:a9:07:54:41:f3:7a:a9:89:63:54:e6:4a:0d:f5:f0:58:
6f:9d:99:6e:21:7e:72:fb:08:3b:f0:17:fd:80:88:b7:c6:05:
b3:97:7f:35:bb:18:f6:66:20:dc:e4:57:b0:37:46:e9:3f:10:
cc:bd:3f:f3:ce:77:72:96:9f:ee:04:fe:82:1b:b1:7a:ce:45:
c5:41:1c:06:52:2a:cd:99:aa:d4:3c:eb:11:3b:7b:f6:53:f7:
46:47:b5:53:b5:71:ef:3d:89:a5:d7:23:84:e7:9c:13:bc:98:
51:25:c0:c8:3d:70:1d:e7:6a:26:1d:22:36:97:e6:d1:0f:79:
9d:23:12:24:d4:12:db:68:a8:35:74:ee:46:f4:ca:a6:89:32:
44:97:77:cb:ff:83:a3:40:6a:4f:7d:5d:47:31:45:6e:c1:bc:
44:75:08:fc:df:3f:1a:3b:5d:57:2d:c5:06:5e:0c:dc:87:86:
a1:71:ac:1c:db:4b:29:c5:c6:6b:17:1b:6d:5b:ba:f2:70:04:
63:cd:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:35:09 2025 by rpki-client