Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File: wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier: VDPmK7iIkOzJHSWoDAPUnIJLQxtdB91YaEnejBjZvUc=
Subject key identifier: FC:C7:9A:DB:8C:C9:E1:F9:CC:73:E5:96:22:7D:55:3E:72:99:B3:F3
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 0196BFA5B033A9F77E4DD63CABB241957933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 14:00:28 +0000
Manifest this update: Sun 11 May 2025 14:00:28 +0000
Manifest next update: Mon 12 May 2025 14:00:28 +0000
Files and hashes: 1: 70HJo7jmffKHG2PpOcP0KSY9roI.roa (hash: DYvGlsMyhOdp02WTRHANgmcPEVdr2t5PTlBu3xJcVlU=)
2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: R+MOmTtSMGTt4iAleuWl4xCfxYCyhPFaBIU+czDxvoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:b0:33:a9:f7:7e:4d:d6:3c:ab:b2:41:95:79:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: May 11 14:00:28 2025 GMT
Not After : May 12 14:00:28 2025 GMT
Subject: CN=fcc79adb8cc9e1f9cc73e596227d553e7299b3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:ab:a2:54:17:f7:3f:01:ea:7d:ab:d2:7a:
4b:72:ef:db:29:aa:83:57:b8:00:f9:69:8b:db:79:
08:20:97:87:dd:e3:2f:14:4f:67:fb:07:0c:e3:ba:
16:9f:6b:48:14:1e:3b:92:5c:0b:63:f5:d8:fd:8b:
5f:8c:d6:b7:52:6a:fc:4e:7a:f5:2f:08:33:e1:61:
c9:75:7b:b6:54:3c:91:37:b7:0b:24:f4:74:21:38:
87:a7:9a:c2:d5:83:84:e7:3b:21:d4:a5:0a:2f:d7:
e5:01:36:91:f3:75:40:73:34:0a:42:19:77:39:3e:
a2:e3:99:4c:23:76:ad:3c:df:f7:d7:1b:d1:b4:d5:
b4:98:24:47:1c:54:ae:38:29:f0:11:98:e4:46:49:
0e:c6:37:c1:77:2f:9c:e3:09:e8:1c:44:37:ad:26:
9a:a7:47:50:72:ce:d7:8d:6a:38:00:cd:43:a5:50:
12:8e:81:6c:38:c4:c1:47:c3:09:c7:70:a7:b7:2f:
c6:11:6d:54:6f:69:4f:39:b3:a9:4b:06:45:ea:f8:
2d:22:fd:48:0f:e9:08:f8:48:54:18:f0:41:61:2c:
ec:87:c8:bd:f6:32:9d:72:0f:90:c2:56:e4:3b:b9:
43:20:41:20:95:70:7d:a2:e9:e0:72:d6:31:fc:c4:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:9A:DB:8C:C9:E1:F9:CC:73:E5:96:22:7D:55:3E:72:99:B3:F3
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a5:ea:d8:97:41:9b:79:d6:09:29:40:ba:a3:82:7c:55:0c:
8d:8d:4f:99:a6:51:ee:94:24:07:c7:24:73:39:9a:ce:03:2f:
62:93:09:22:ad:f8:35:05:79:00:c2:0e:c5:5d:3e:a7:ad:fb:
8f:5a:48:4b:5d:2a:be:3b:cf:20:e1:5e:fe:fc:9e:e2:c2:45:
a3:ad:c6:eb:f6:b4:1f:3f:ef:74:93:0c:ce:99:83:f3:58:87:
4f:e7:aa:19:f8:27:20:e7:a8:96:a0:0f:39:63:97:23:5e:2e:
71:9a:7c:3e:d4:0c:76:18:df:4e:1f:b1:51:6f:25:26:99:c4:
e3:9a:75:42:38:6c:1b:be:67:ec:11:e8:45:98:1a:b3:d8:6f:
82:e4:89:e3:e2:91:22:13:5e:81:13:9f:44:06:33:1d:d8:78:
9b:27:29:4f:4a:0e:72:b0:e3:77:7f:60:c1:d2:c3:a2:76:1a:
f1:72:bb:37:e3:15:98:15:97:26:f5:a9:d4:e8:dd:59:44:45:
e7:c7:a4:d5:4c:ff:07:bc:69:5a:c9:7a:d0:6c:cb:5c:9e:dc:
6d:42:d1:c0:50:a9:b4:3d:b6:a2:24:46:50:06:19:9f:e7:a9:
04:cd:ea:61:af:20:22:41:85:b1:a4:e9:59:f4:5e:c8:a1:ae:
45:e3:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:33:46 2025 by rpki-client