Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: l2KsYqbwBBnsrRAlGBBihSZffMwbFeiWayhtx3tUANc=
Subject key identifier: 4F:71:BA:93:5F:FB:52:6C:FF:2B:05:08:2F:D5:EB:21:A1:45:71:6D
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 0196BF0119A00C038859E6A4615A36B3AC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 11C7
Signing time: Sun 11 May 2025 11:00:42 +0000
Manifest this update: Sun 11 May 2025 11:00:42 +0000
Manifest next update: Mon 12 May 2025 11:00:42 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: 5pLU4/V9BV9/lw2QVUtbgyabEojlw2seyAFDONjppsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:19:a0:0c:03:88:59:e6:a4:61:5a:36:b3:ac:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: May 11 11:00:42 2025 GMT
Not After : May 12 11:00:42 2025 GMT
Subject: CN=4f71ba935ffb526cff2b05082fd5eb21a145716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:2b:1c:c6:3f:e9:ca:5f:7a:ba:5b:2a:0e:
f6:a6:2f:86:90:03:c4:f0:43:7b:fb:80:93:f7:13:
81:80:36:0c:2d:d7:1a:51:69:d7:80:bb:77:43:1a:
4e:fc:d1:ae:75:3c:58:d7:a3:35:82:28:43:80:e1:
d8:47:74:85:58:ed:a0:8c:52:71:26:07:44:2d:33:
90:d3:98:19:56:f2:d2:a3:5e:c5:f8:7a:d8:e2:f4:
77:4d:b8:52:8f:3f:0a:8a:1c:2c:65:b2:8d:30:52:
ac:e5:4d:71:c0:8e:9a:87:8b:f0:31:36:ac:9a:86:
48:95:23:6a:ea:5e:62:9d:bf:d7:6a:f8:ae:eb:7a:
b0:ee:7a:9d:85:1b:d3:7b:9d:53:39:72:7e:6d:d7:
d7:66:1b:6b:b5:b1:f9:83:e4:2d:f8:c3:fe:cb:04:
55:f7:03:40:67:e6:8e:41:61:e6:8b:c0:5e:19:86:
da:2c:2f:3b:02:54:b8:af:8f:4d:20:db:f4:64:f7:
04:69:d9:54:a2:d2:cb:f2:1e:cd:48:16:bd:d1:68:
dd:99:3f:3a:cc:a0:71:8a:18:73:f2:ab:fd:9c:5a:
d7:77:1e:40:f3:8c:fb:b8:a9:16:af:d5:f4:2d:4c:
ba:58:60:1b:fd:3a:f1:e2:e2:9c:d3:39:bf:d9:5b:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:BA:93:5F:FB:52:6C:FF:2B:05:08:2F:D5:EB:21:A1:45:71:6D
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:eb:7e:b8:d0:60:ca:20:5b:01:f7:16:91:be:d0:f0:69:b0:
6d:a7:3d:95:55:be:7c:b6:fa:10:71:66:f8:ff:a1:ed:cd:63:
96:2a:ea:0b:e7:f8:4a:1f:68:53:5d:d4:c4:b8:6d:bb:45:5c:
39:e6:3c:44:2c:74:8d:db:d0:61:02:17:2d:b4:4f:3a:c5:f9:
3e:fa:12:a8:d4:9e:3b:40:e2:b8:81:e6:2f:ee:75:3a:09:40:
1b:39:a7:21:ad:59:e5:19:5e:41:04:27:75:7a:f9:dc:8e:52:
38:2c:9f:ee:84:61:c0:83:13:0d:20:f9:7d:e1:f1:5f:71:88:
65:21:c7:53:86:5f:25:1e:59:f6:67:9e:12:75:96:64:aa:e0:
de:c7:12:89:bf:65:15:5f:58:74:58:9d:3d:e3:9e:71:a8:1f:
27:40:a6:58:c5:b3:85:95:8b:a8:0b:f0:57:78:20:15:5a:24:
aa:b7:fa:d1:f6:3d:9d:5f:4f:ba:bb:0f:29:e4:d9:fb:c6:81:
d0:c3:49:1c:48:c1:13:20:ac:24:e1:0b:5c:48:49:80:18:8b:
08:d5:1f:e5:18:04:68:e3:38:c4:52:f2:e1:65:fe:ec:60:bd:
2c:a8:96:b7:0f:82:c2:11:2b:d3:30:25:ce:2b:b2:00:29:e7:
13:d0:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:56:29 2025 by rpki-client