Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: mruW/RaRslVfF7LMD616anfxrfFP0G8z3Qe4ZplQwY8=
Subject key identifier: CA:37:99:EF:54:53:AD:09:E8:AC:D0:C5:0F:F4:08:AB:94:BC:84:A6
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 0196DB1CD35FB88F610143C94C8C01DE1F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 04AF
Signing time: Fri 16 May 2025 22:00:21 +0000
Manifest this update: Fri 16 May 2025 22:00:21 +0000
Manifest next update: Sat 17 May 2025 22:00:21 +0000
Files and hashes: 1: O4itYS8sI_ap1aiE_UeLniEPcvk.roa (hash: yXxFYAIoEwoD51Grvt0xf+Jd5ULkmINTn0EV/SJ5fbw=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: DvzV2RfCCHIQtql81/Xya+FXCN+1y2LG3/TsJUyHoqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:1c:d3:5f:b8:8f:61:01:43:c9:4c:8c:01:de:1f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: May 16 22:00:21 2025 GMT
Not After : May 17 22:00:21 2025 GMT
Subject: CN=ca3799ef5453ad09e8acd0c50ff408ab94bc84a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:03:44:53:31:6f:73:19:32:74:d6:0c:e0:
51:4b:2c:df:1c:5c:9b:3e:ad:bc:18:8d:d5:2b:98:
8a:fe:51:d4:6f:cd:2a:9c:b6:df:83:82:b9:b5:9e:
47:cc:53:f8:c4:b1:80:b8:78:41:e3:1b:52:ad:64:
95:1b:66:18:fe:65:1d:91:af:a1:48:16:25:76:6a:
5f:bf:fa:b5:e0:6a:f4:3e:fe:74:1b:b4:da:aa:c3:
52:b2:33:76:d5:60:c7:22:d2:db:4e:72:e7:f0:d0:
31:13:57:2d:46:59:94:a2:11:20:c5:35:13:01:d4:
cf:0c:79:6c:53:10:9c:a4:5a:7f:fc:94:07:cb:b7:
c1:26:3e:a6:9f:fc:f0:fc:71:11:75:df:c7:e4:32:
99:8c:ee:99:0d:ee:c9:c4:b2:31:00:dd:ea:45:c2:
b2:02:33:86:23:99:e4:77:d4:e2:d9:56:b4:e6:0a:
1f:26:70:12:2c:21:4f:b1:fd:79:ab:fb:99:d3:cd:
62:37:ac:88:62:76:1c:30:cb:f4:87:53:91:4b:4d:
9a:7c:65:50:6d:a4:1f:93:0d:d0:54:13:dc:47:d1:
f3:ca:8d:6b:fa:81:99:02:1c:7c:76:8f:4d:14:7b:
b5:93:bc:49:84:12:2f:54:c2:5a:73:60:5e:31:7a:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:99:EF:54:53:AD:09:E8:AC:D0:C5:0F:F4:08:AB:94:BC:84:A6
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:40:1f:d7:f5:f6:b8:9b:53:8a:e2:03:a9:76:ae:d3:19:05:
7f:9a:de:26:b2:71:4c:ed:dc:42:c8:57:7e:a0:d3:5b:2f:f5:
fc:bc:c6:87:0c:79:ed:8f:49:53:16:b2:86:53:25:cf:1d:67:
d5:94:c7:a1:cc:91:e1:f0:51:af:9f:83:5d:ca:6a:d8:04:68:
24:cd:a5:4b:a4:30:19:ef:90:84:aa:e9:8c:1d:8b:fb:9d:c9:
72:7c:c8:15:2c:7d:4a:08:fb:5b:c1:42:26:f1:d2:c9:69:7a:
0b:30:6a:13:f5:0f:5c:bd:9b:b6:2d:b7:1f:14:b8:59:2a:a1:
35:5e:aa:fe:dc:5c:89:85:33:d2:29:75:f0:f5:f0:66:8d:9a:
07:d9:ed:9e:14:25:af:41:57:e9:50:e0:e3:32:19:c1:e3:0f:
e6:cc:51:ee:57:33:d0:b8:31:a6:db:27:80:ad:a9:b2:77:4a:
c7:37:b3:01:af:33:49:a1:62:36:5c:3a:62:9f:7d:b3:9d:ba:
1c:b0:d1:66:ad:61:b2:1a:a6:63:c5:4c:b0:24:49:e6:c0:ca:
c5:1b:a3:c0:3c:52:7f:50:a3:62:c5:06:0f:e8:7e:6c:92:93:
a1:fa:8b:a2:ed:ff:8d:93:fb:6c:7c:2a:ed:50:c5:0e:d8:96:
95:b9:5b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 07:23:40 2025 by rpki-client