Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: f9+pfjD3wfokQWx2mt1D48p71z5O9+rFHKm3aC/6Oas=
Subject key identifier: C0:54:0E:41:AD:FD:15:AF:BE:E1:E2:86:3D:AE:1F:DC:CE:16:90:ED
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 0196C64C4B0207EAB77D7136F7A08BB4B26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 11D1
Signing time: Mon 12 May 2025 21:00:10 +0000
Manifest this update: Mon 12 May 2025 21:00:10 +0000
Manifest next update: Tue 13 May 2025 21:00:10 +0000
Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: 0KcDK7ZzahX7gB5L0X0C+CaRQRMfW4FfH5h22J/cJv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:4b:02:07:ea:b7:7d:71:36:f7:a0:8b:b4:b2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: May 12 21:00:10 2025 GMT
Not After : May 13 21:00:10 2025 GMT
Subject: CN=c0540e41adfd15afbee1e2863dae1fdcce1690ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:9c:55:44:32:b5:7a:ae:6d:2d:1e:af:99:
e3:b9:82:30:81:29:41:ad:aa:44:95:dc:61:22:22:
30:62:28:6d:47:ab:25:ed:46:40:6f:41:d3:9b:9d:
c0:d3:4e:a4:95:57:93:0e:12:0d:3a:53:f8:c8:eb:
92:53:40:c4:9f:6b:f5:69:f5:e1:2d:40:11:e1:2d:
09:3c:e3:64:10:51:f7:67:45:7f:71:2a:8e:b7:93:
26:fd:f9:64:67:ab:e4:f6:95:10:cf:7d:63:6e:13:
a1:32:7f:a7:61:84:cf:ac:66:10:8e:7b:a8:14:0e:
e3:f6:9f:99:e3:c7:22:3a:09:d0:85:69:3f:0c:23:
03:19:cc:c2:d7:7d:ab:55:08:b5:b0:3b:21:ae:e3:
50:54:c3:f2:9a:37:c1:21:7e:ce:33:d7:4f:e0:da:
f3:f6:71:58:0d:8e:90:35:34:0c:38:2b:8a:d6:c0:
b5:a0:e7:a9:76:ea:31:65:37:37:b8:40:03:52:e7:
dc:d1:52:2a:cd:fa:5a:b0:0e:5e:e0:b0:e1:df:5a:
c3:30:ce:24:de:b0:cb:28:d8:05:f2:55:b1:ee:1a:
ed:16:ef:57:e5:22:f3:0f:a6:c5:73:83:2b:07:ee:
2f:8d:70:fb:67:41:cc:2c:60:b3:d9:36:62:df:98:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:54:0E:41:AD:FD:15:AF:BE:E1:E2:86:3D:AE:1F:DC:CE:16:90:ED
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0c:98:45:56:52:4f:9c:b7:da:32:95:e2:15:d8:58:56:90:
c2:b1:02:13:fb:aa:d3:86:58:d2:6f:5d:9c:29:ae:80:d1:2b:
15:4c:ba:1d:7c:23:1c:98:8a:e8:2e:5a:10:ad:b6:43:65:00:
54:dd:fd:d1:ba:57:3f:e2:c6:a4:e8:2b:1c:e9:fd:8b:cc:4c:
55:20:cf:c0:8e:a5:47:12:2d:a1:31:e7:d5:6f:42:36:ad:7c:
66:a6:a0:1f:d3:33:f7:1f:b3:41:88:61:67:12:fe:cb:23:1c:
2b:cb:04:33:81:e5:92:30:d1:56:2c:a2:4c:f9:8c:8c:61:1b:
16:92:68:67:07:22:4f:a9:73:17:53:16:29:f2:60:c7:68:9e:
a8:d0:89:ae:59:83:6c:d0:4d:44:c9:cc:d3:3e:0d:fd:74:51:
1f:d2:6b:b9:38:32:77:b7:63:84:a9:81:06:61:7d:48:9f:bc:
cd:34:1a:51:fe:95:a7:c8:78:f1:b2:4f:f9:7a:92:19:4c:30:
2a:8e:4f:57:2e:78:15:1d:4d:e6:42:8c:fe:c8:b6:d8:24:3d:
42:dd:15:fc:89:0a:e7:83:89:4f:f0:3a:ef:a3:df:b8:d3:0a:
bd:5c:45:90:60:af:14:1b:83:35:17:63:45:1c:1e:79:09:ea:
b5:b5:8d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:58:20 2025 by rpki-client