Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
File: wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json)
Hash identifier: s3qBHbQlaZYd+CBUVam7jUnHf0hmW8lOFEHc4Ou41tQ=
Subject key identifier: 71:FD:51:3D:10:DB:FF:3A:3E:23:6F:4B:9D:AB:77:84:E6:86:26:16
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Certificate issuer: /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial: 0196D6D299154F9C35EBDB59D13F1803938E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
Manifest number: 0825
Signing time: Fri 16 May 2025 02:00:47 +0000
Manifest this update: Fri 16 May 2025 02:00:47 +0000
Manifest next update: Sat 17 May 2025 02:00:47 +0000
Files and hashes: 1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=)
2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: FXpsqiytp/HVQNTIjaO4lWzfFQyT+BPM1SNRBeDLDhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:d2:99:15:4f:9c:35:eb:db:59:d1:3f:18:03:93:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Validity
Not Before: May 16 02:00:47 2025 GMT
Not After : May 17 02:00:47 2025 GMT
Subject: CN=71fd513d10dbff3a3e236f4b9dab7784e6862616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:30:56:6c:6f:ab:45:db:17:b3:d6:b4:05:
5c:28:6b:63:76:f3:6d:41:f5:95:d1:2f:8a:61:5e:
ac:bb:bf:08:23:6a:b1:f3:80:f2:09:e3:7d:9a:3d:
b3:6e:c5:86:a7:d5:11:f6:8b:2e:ab:a5:cc:2d:ea:
95:99:d6:76:35:b8:cf:64:c3:74:2c:4f:1e:73:3c:
16:92:c3:93:83:16:08:09:78:20:d4:10:a8:8c:da:
4b:0c:70:1a:19:e7:32:7d:79:ed:fb:14:de:cc:b4:
ea:d8:b1:9c:51:9a:39:59:4c:c0:f0:9d:0d:03:cd:
81:ee:78:ed:63:51:c4:ca:26:65:c2:32:8d:a4:83:
56:13:08:6c:7f:e8:d7:7b:12:9c:3f:a4:30:93:b5:
67:7e:e8:22:2c:49:f9:e1:c6:b9:43:44:9e:cf:fa:
b4:fb:18:18:ce:1c:fc:ef:51:5a:7a:82:d0:71:06:
ca:e2:d5:94:5e:fe:bb:aa:05:6e:e7:13:ac:12:b8:
e7:f6:33:9d:b8:da:cd:a1:e8:94:76:74:f3:4d:fc:
fa:76:c4:a3:ca:1f:9c:59:48:25:0a:03:e2:5d:21:
54:d4:d3:f8:aa:fb:30:32:67:74:59:e1:7a:ae:b0:
41:35:cd:a4:87:e7:2e:3a:1b:f5:71:7a:84:c1:73:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:51:3D:10:DB:FF:3A:3E:23:6F:4B:9D:AB:77:84:E6:86:26:16
X509v3 Authority Key Identifier:
keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:3b:52:99:3c:09:19:ed:43:e2:fe:c6:0e:72:19:41:2f:
9c:7d:c2:c2:da:8f:29:1a:75:b8:c7:62:78:fc:f6:82:87:1e:
2a:1d:a4:93:a0:23:af:6b:dd:4a:2c:63:0e:c5:a6:61:99:4d:
d7:de:41:7a:ad:3b:85:b9:ba:15:34:44:1d:23:b0:fc:79:83:
19:73:29:5e:c3:99:e8:cb:21:e1:fa:2c:c3:c2:be:d7:81:0b:
2f:13:79:9f:ed:63:e1:53:40:46:62:b9:cf:93:1a:75:5b:4b:
1f:5a:24:42:e6:89:3d:55:2a:cc:f6:38:5d:4b:aa:93:7c:c4:
3d:50:8f:d3:22:78:45:71:86:19:c4:14:e6:34:97:fc:2e:5f:
e2:21:3e:23:4a:4a:21:13:8f:e1:26:27:20:0b:77:33:36:6d:
9e:00:21:e4:f0:e4:57:d9:cb:fd:aa:8e:86:a3:8b:df:b8:14:
a5:83:36:1f:6f:cc:2a:69:31:06:19:9c:74:1c:22:b7:82:54:
20:01:db:0b:f9:38:ff:cc:f5:dd:bb:5d:8a:30:56:de:ae:3e:
54:53:07:0f:50:c2:9e:6a:16:5b:e6:bb:45:ff:42:c7:7e:99:
ba:c3:60:f8:48:b2:22:96:d3:75:05:b9:8b:d9:48:78:d2:14:
82:8c:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 07:00:37 2025 by rpki-client