Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: TiMDsCVorBMN4+BBuB+hpjeSYjAM956Oqg+95hruqrI=
Subject key identifier: A3:9F:65:CD:4A:E1:8D:DD:B5:F2:42:07:F6:65:69:D7:58:0D:72:F2
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 0196AD68F66171F004983778582CEC5E9E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 0E39
Signing time: Thu 08 May 2025 01:00:59 +0000
Manifest this update: Thu 08 May 2025 01:00:59 +0000
Manifest next update: Fri 09 May 2025 01:00:59 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: z5yJRiZVA0OPHCfBPAI7UEF0EXgY7Pu95sXMEuMHNVg=)
2: NHhXoxxdMNakey6qmBeac9wJBd4.roa (hash: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=)
3: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (hash: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:f6:61:71:f0:04:98:37:78:58:2c:ec:5e:9e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: May 8 01:00:59 2025 GMT
Not After : May 9 01:00:59 2025 GMT
Subject: CN=a39f65cd4ae18dddb5f24207f66569d7580d72f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:67:4e:75:bd:d2:13:cd:02:fb:8e:97:d5:
bb:1d:53:4a:61:4c:12:ed:00:90:2c:0d:7f:39:d6:
1c:fe:95:f8:8d:d6:2c:60:45:b6:6d:62:67:e5:59:
f8:8d:a2:48:8d:b1:99:6c:62:94:29:e0:b3:13:1d:
64:df:91:30:4c:13:42:6e:0a:02:0b:65:70:a0:32:
ec:2f:3c:01:a4:6f:c7:e1:0c:16:38:4f:e2:c8:34:
f1:6c:e0:92:7d:ed:9f:f2:3e:ff:6d:cd:9e:9e:e3:
4b:f9:e9:0e:6f:f8:e5:52:a7:7d:c9:b0:94:7b:24:
46:ed:85:c7:0b:88:83:bb:09:a3:36:e9:32:8c:27:
e6:fd:2f:36:a5:76:ac:78:ca:a0:37:4e:b3:87:ba:
75:05:1c:4e:6e:d6:d9:0a:e3:55:73:33:6b:4c:79:
8f:19:98:69:7a:f1:5a:bc:3e:54:14:ad:3a:19:d0:
f8:ce:87:51:9a:59:28:0f:ed:d7:8d:08:a9:82:1e:
b0:f4:0b:a7:c0:e5:55:d8:88:1e:d6:72:7c:2d:87:
9f:37:13:f1:f3:f0:b4:d5:74:b4:b8:7b:a2:87:08:
02:61:0b:3f:41:ce:56:45:42:41:77:51:a0:66:03:
f3:bb:f7:39:10:d9:12:15:eb:08:fc:66:6d:42:c0:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:65:CD:4A:E1:8D:DD:B5:F2:42:07:F6:65:69:D7:58:0D:72:F2
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dc:c6:a1:aa:65:ef:6c:aa:b8:e5:d1:df:ac:b4:2e:ef:16:
1a:09:c4:e2:f9:52:47:34:f5:31:c6:d8:54:08:78:b1:87:f9:
0d:4e:cf:a8:8f:20:a4:c0:4f:32:9d:7d:04:7b:47:66:f4:f9:
2c:43:96:e4:83:92:00:46:15:af:d4:38:cd:c5:6a:09:4e:59:
5f:17:16:d7:91:d9:a2:ab:d1:13:98:73:c6:d7:da:85:49:ed:
32:8a:26:fa:f5:3b:06:ef:00:12:65:c6:61:f4:ed:60:05:a0:
33:b1:e3:4c:aa:61:f4:73:67:e4:79:01:14:a9:5b:e5:f7:1a:
cd:9d:91:57:39:2d:84:09:5b:72:32:34:a1:5d:90:c8:28:cc:
6f:3d:64:f1:b1:2e:fe:28:4b:73:40:4b:99:73:79:a0:75:b6:
e8:e7:dc:d7:d3:41:d7:bc:a3:d6:6d:d4:c6:bf:14:8b:38:3a:
5d:2a:3f:2d:3a:5f:af:ce:ad:a8:6e:71:9d:9b:6a:9e:7a:71:
b2:a3:47:de:e5:d5:98:42:58:9e:ea:a0:2a:5e:6a:23:76:a0:
76:ca:19:c6:87:50:be:97:b8:c0:6b:cb:a4:c5:f6:f4:8d:81:
1e:f8:ad:36:a9:93:7c:3a:67:29:7b:67:5c:b7:03:4d:fb:a1:
06:a5:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:46:08 2025 by rpki-client