Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
File: warwQ_4gnANFNiIF-Mx81hlRwn4.mft (raw, json)
Hash identifier: 4LlvW7Xb/D19ZU95ZW7VhHv2rIeFW+7qkH8b95St3ug=
Subject key identifier: 75:82:7D:AF:FF:1A:77:CD:FA:CA:CC:D9:F8:5E:B2:04:D0:C4:70:58
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 0196C6F120228953BEA2E63F3F7F9E1A3D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
Manifest number: 0DB0
Signing time: Tue 13 May 2025 00:00:13 +0000
Manifest this update: Tue 13 May 2025 00:00:13 +0000
Manifest next update: Wed 14 May 2025 00:00:13 +0000
Files and hashes: 1: oLyY8vvBAfeOhRsj9eexvuktQm4.roa (hash: scoM8Sq6POvOb7psz/VnzYZYQjNB2n1Y53tdfQTGFcc=)
2: warwQ_4gnANFNiIF-Mx81hlRwn4.crl (hash: LQ9caR4oOuglWtpuvSHFlfig8FZB8IkO3WJ+kkQGSGw=)
3: yuwuNuzvATZfP3JuA06dTGzQ9o8.roa (hash: iaJVdCZsnNb9Cyubf2e2B713adANaUt93mNYt5mCPK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:20:22:89:53:be:a2:e6:3f:3f:7f:9e:1a:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: May 13 00:00:13 2025 GMT
Not After : May 14 00:00:13 2025 GMT
Subject: CN=75827dafff1a77cdfacaccd9f85eb204d0c47058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:4b:b5:a9:65:42:2b:71:89:f1:4e:85:ab:
6e:a6:64:8a:20:49:fe:24:1f:3b:29:e0:ed:fd:9a:
20:3e:ec:69:94:8a:80:15:e2:56:b9:1c:42:27:a5:
fa:7a:3c:6a:a9:d5:80:ea:26:df:30:6c:ff:00:ba:
94:b6:96:60:04:71:56:d3:16:0a:0b:65:2b:85:d3:
80:0b:8f:36:c5:4d:e6:da:40:03:19:30:31:95:4e:
d7:50:96:de:18:71:6e:dd:30:65:3f:ee:0b:df:fe:
10:6d:26:a5:fc:b4:0c:dd:88:89:89:1a:3f:b0:af:
2a:a6:7e:06:90:88:97:0c:8c:46:9a:20:df:da:8c:
13:15:e0:6a:67:84:df:58:11:ad:72:6f:33:5c:ad:
f9:b1:67:40:91:13:fb:ed:d6:9d:69:0c:31:b1:03:
73:ff:83:bb:90:58:86:f3:f5:09:8d:9c:9d:90:a7:
53:63:f4:6b:60:0c:df:96:62:2d:35:b7:dd:03:84:
e0:43:10:f3:e9:3f:30:ee:76:50:8b:98:68:d9:80:
11:69:47:e2:93:3e:7f:a0:ed:4f:fe:9a:e5:24:28:
74:9b:11:d2:35:aa:0c:70:ff:32:86:2d:04:c5:7c:
1a:8d:55:0f:ee:cf:61:2a:90:f8:99:a0:e0:c7:87:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:7D:AF:FF:1A:77:CD:FA:CA:CC:D9:F8:5E:B2:04:D0:C4:70:58
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:45:1b:7e:fc:72:78:d2:76:3d:dc:20:fa:6c:7b:86:a7:a0:
c3:3b:66:5f:45:72:a3:d8:66:d5:8b:4f:1f:03:87:98:42:6d:
ed:c9:de:f6:fa:ce:65:f1:86:84:07:32:de:f0:91:b2:bc:91:
c0:c1:34:7c:19:f6:ee:44:eb:f9:01:80:26:fe:90:2c:54:e2:
2b:fc:6b:06:d0:7e:bf:ec:40:53:a8:91:bb:d9:45:1a:7f:22:
3b:38:ce:f4:ea:ad:79:b1:b7:9f:9c:7a:60:57:f0:db:33:7d:
a7:77:a7:89:da:79:52:fc:b9:fd:20:ef:d9:1c:14:70:46:82:
92:bb:0e:84:fb:41:c0:6b:ac:65:91:da:49:09:9a:33:49:fe:
e6:a1:c7:98:9c:9b:9e:ad:8c:13:4c:5a:a0:2b:74:69:a8:e6:
e0:e9:d9:5e:dc:16:3a:53:14:30:85:e5:4c:b8:22:a0:07:fa:
52:0c:99:11:6b:c2:01:17:37:6a:0e:4a:33:79:77:45:22:aa:
6a:02:36:f3:fb:65:b9:a2:61:79:84:45:cf:a4:9a:63:37:dd:
52:ec:da:5b:d5:ab:8a:f2:7a:46:29:12:ae:f4:41:d2:cd:26:
6b:f2:3d:b5:0d:76:85:99:dc:d9:e1:58:99:42:83:72:3b:f3:
a0:a6:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:25:27 2025 by rpki-client