
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
File: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft (raw, json)
Hash identifier: lNtiEXBvb93cNjtORDk9zu8S3ei5Ujwt7jo8orf/ep0=
Subject key identifier: 3E:42:44:37:3F:EB:89:7B:BE:21:56:BD:AE:5F:7E:8E:EB:DB:E6:3F
Authority key identifier: 59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
Certificate issuer: /CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e
Certificate serial: 0196B7B5BECEF9D75465D96ED4384B9056C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
Manifest number: 8E
Signing time: Sat 10 May 2025 01:01:03 +0000
Manifest this update: Sat 10 May 2025 01:01:03 +0000
Manifest next update: Sun 11 May 2025 01:01:03 +0000
Files and hashes: 1: O2Pnp2xiRD6R4iT3wVRhdJLNeu0.roa (hash: Yn5cJiKHr0OGQWImfyXWk4ihqiwMLF8Xm0w3Bpt+rdg=)
2: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl (hash: GiggW6bV9NuzKmrSTj1HeLAxKbUYGWygiUNtxiBc47c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:be:ce:f9:d7:54:65:d9:6e:d4:38:4b:90:56:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e
Validity
Not Before: May 10 01:01:03 2025 GMT
Not After : May 11 01:01:03 2025 GMT
Subject: CN=3e4244373feb897bbe2156bdae5f7e8eebdbe63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:20:65:f4:cf:a2:df:93:df:bc:e9:d4:63:
1c:67:c3:3a:ea:70:16:ff:e6:37:90:8d:4c:b3:d4:
21:8f:cc:89:9d:b8:6f:4b:fa:7b:03:25:2e:e3:fc:
fc:d2:5d:fc:a1:93:2b:67:37:98:17:1c:77:cd:43:
6a:58:50:25:d8:d7:85:59:33:ea:71:1c:5e:6e:df:
75:97:95:65:e7:25:91:8c:4d:aa:5d:63:30:ae:2b:
15:97:f9:16:d5:a1:18:c2:60:2e:6d:1a:23:3b:31:
b7:1b:12:18:35:46:bc:9c:63:3b:98:b8:fe:ba:3b:
20:79:d6:e0:af:23:f7:53:3a:0a:e2:a0:61:1d:67:
a9:8c:8d:8e:58:5c:ca:b2:6a:a4:f0:6c:73:09:eb:
bc:50:a8:41:d7:1f:d2:a1:56:c8:55:3d:b3:fa:1a:
46:52:3e:cd:0b:d2:04:d7:af:1b:8f:52:22:9a:90:
78:53:41:fb:61:cb:67:df:0e:62:02:a8:1d:15:6c:
5d:6d:4d:56:ed:31:0f:d3:dc:ec:dd:6f:64:d4:9b:
b7:fa:cb:ad:49:f1:0c:60:47:c1:26:32:51:89:fb:
70:fd:7b:c1:bc:24:bc:51:7d:eb:3f:4b:81:fc:10:
aa:43:5f:0b:a5:7a:a3:de:f9:88:d8:4a:8d:9e:a2:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:42:44:37:3F:EB:89:7B:BE:21:56:BD:AE:5F:7E:8E:EB:DB:E6:3F
X509v3 Authority Key Identifier:
keyid:59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:e4:5f:c5:65:fa:0b:0f:e8:88:b9:d2:a0:25:0e:c5:5e:
38:aa:51:d4:04:8d:5e:f8:eb:5d:ee:3f:d4:2f:b7:43:49:38:
30:ca:5e:9f:78:1b:dc:c0:8d:d9:20:e8:44:bd:57:c8:d0:f8:
33:b0:f3:f6:e9:55:44:07:92:97:af:85:e5:3a:9d:4a:aa:b3:
51:e0:83:2c:f8:43:e7:69:8b:ed:c8:75:29:10:7e:dd:57:17:
27:97:95:78:b5:5f:9b:9c:2e:f0:9b:e2:1b:d6:64:fc:f7:88:
29:12:85:ae:a6:12:70:bf:ba:c7:cf:d0:4d:ae:8d:14:93:fd:
fd:e7:4d:5f:c8:40:f5:3a:16:9e:1d:11:1f:b4:28:5a:62:e1:
1d:16:e4:32:12:a9:5e:ed:a9:06:54:d7:84:c6:40:b5:a7:90:
92:9f:c6:86:c2:89:2f:c4:1f:4f:85:e9:77:f6:c5:74:fb:06:
fc:8f:89:63:44:e9:5e:c7:47:8c:b1:a8:26:0b:61:d7:03:b5:
fc:a1:82:4a:6e:89:c9:ec:92:ef:d5:eb:7e:e7:0a:b9:db:f4:
2c:79:ed:8c:6d:52:47:47:ed:83:99:17:fc:bb:f4:3b:25:27:
9e:18:78:e9:bd:ff:0c:94:68:e1:94:19:e3:a5:5a:d1:8c:e4:
04:69:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:15 2025 by rpki-client