Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: g9GVxfSZpUxSUh0uXJG/yb2TT/3xSH7Xh7nSA/W4hIU=
Subject key identifier: AE:2D:0D:A1:6E:C8:78:82:05:06:3D:69:12:39:DF:B8:C8:A4:66:74
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 01969F7644EA32391D10A8B2E8FDBD0F6013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 14D3
Signing time: Mon 05 May 2025 08:00:50 +0000
Manifest this update: Mon 05 May 2025 08:00:50 +0000
Manifest next update: Tue 06 May 2025 08:00:50 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: E+EcKVfOu+fzdksNP4jYNS0vdO/ESPnyXhOQUy7sZqQ=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:44:ea:32:39:1d:10:a8:b2:e8:fd:bd:0f:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: May 5 08:00:50 2025 GMT
Not After : May 6 08:00:50 2025 GMT
Subject: CN=ae2d0da16ec8788205063d691239dfb8c8a46674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:1d:57:7f:10:f1:1b:fd:db:8c:e4:95:f0:
57:c6:9d:60:91:b7:8b:d4:a7:31:65:c8:a1:76:c7:
eb:77:1a:2a:6c:7c:a8:20:70:f8:8c:2a:ba:d9:c9:
a2:e8:34:3a:23:44:4d:3f:8d:3d:c9:f0:e6:e9:1d:
70:5d:2f:13:1a:d2:56:43:ae:50:12:c6:44:9e:d2:
6d:e4:e3:0a:69:63:b0:ea:98:44:bd:8c:ea:94:e9:
fa:a0:ac:92:d1:cb:6c:9a:0c:e7:87:24:df:5c:eb:
e3:f1:a6:be:3b:e3:49:ae:61:03:02:7f:ed:c0:3c:
82:82:e0:08:c5:cc:6e:6e:e9:e3:87:3a:5c:98:bb:
8e:ba:22:05:49:bc:cd:35:7b:ac:fb:47:28:db:9a:
96:65:41:2c:ee:b7:a4:ed:4e:47:4c:52:d6:5f:ed:
08:29:72:08:6a:c1:79:11:ca:e8:2f:80:5b:00:9f:
68:9d:20:ff:6d:01:d9:c5:f8:05:9d:f5:90:e9:8c:
4a:b4:aa:50:6b:3b:3d:4e:73:a4:b7:9a:f0:16:a4:
3d:68:3e:80:45:b6:f3:cb:4c:2f:eb:42:2b:a7:8d:
7e:65:f0:54:52:7f:e9:85:95:c3:59:9e:3e:7f:a0:
f3:5a:a2:98:24:a5:f3:64:90:8f:c9:3a:be:a8:66:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:0D:A1:6E:C8:78:82:05:06:3D:69:12:39:DF:B8:C8:A4:66:74
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c7:7e:e9:30:ac:ab:e6:6c:4f:35:56:f5:20:60:2e:ee:49:
2b:5a:3c:1c:8e:9d:fb:6b:3c:aa:ae:21:f6:f9:1d:2f:bf:0c:
7d:dc:92:3e:98:3b:29:aa:df:cd:55:f9:25:cf:02:00:1b:77:
06:1c:37:01:9b:94:38:d9:1e:c0:d4:1b:7b:4d:9f:4f:98:19:
96:39:5c:95:56:28:95:35:d4:4d:7b:75:35:e4:9a:5c:85:99:
28:e6:7c:bd:e4:c5:2e:4a:69:64:3f:03:54:b4:5f:e0:cd:ac:
2a:58:b8:d1:2d:1f:af:69:c3:fb:d0:a7:ba:84:fb:c9:52:e9:
b3:87:54:70:4b:13:4b:d5:c1:3b:c2:f3:a0:30:d1:e0:84:b9:
13:99:71:46:c0:bd:7e:fe:69:aa:23:c7:b4:50:ad:6e:6e:80:
8b:18:40:c1:20:75:be:3f:3c:15:79:ee:5c:6c:dd:9e:8a:9b:
29:8a:65:1f:55:e3:26:29:db:92:f2:7d:03:c2:fc:9b:ed:01:
18:39:f2:67:f4:e2:8a:f5:80:2f:5c:6b:2a:3a:04:9a:36:e0:
41:c2:a8:0c:b6:2e:6f:9a:39:a8:db:3b:3e:06:3b:a3:08:c6:
ca:0d:75:b7:d2:00:2c:24:7b:28:08:90:39:90:21:c9:bf:c1:
7d:ac:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:21:41 2025 by rpki-client