Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: S6xNCMBi08ogMzcFWVcdPqWL1TXxhQFjpM3RBJBJigY=
Subject key identifier: 76:14:F8:D7:B7:47:92:C0:1B:74:9B:8F:02:71:1F:3D:CC:CA:6D:ED
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 01969D19C36C5B38EC98EC8DD818A38B555C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 21:00:33 +0000
Manifest this update: Sun 04 May 2025 21:00:33 +0000
Manifest next update: Mon 05 May 2025 21:00:33 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: zeyZMbQxXIAJgkOpHd+wFsCXghKEmj82CaScQXtfweM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:c3:6c:5b:38:ec:98:ec:8d:d8:18:a3:8b:55:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: May 4 21:00:33 2025 GMT
Not After : May 5 21:00:33 2025 GMT
Subject: CN=7614f8d7b74792c01b749b8f02711f3dccca6ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:5d:e4:91:19:ec:ae:28:6d:89:08:3d:9f:
15:ff:9c:f6:e9:f3:68:51:f3:a1:31:d3:67:ad:50:
2a:82:d0:ca:08:96:28:c6:ff:86:ac:de:cf:c2:d4:
4c:c7:ea:c3:b8:b2:6c:f6:aa:aa:d4:d2:7f:21:21:
fe:f1:92:bc:8e:a9:0a:b7:95:08:9c:58:40:45:52:
c0:ae:68:02:ad:5d:79:b9:d5:5f:87:b2:57:20:11:
0e:e9:81:3e:9b:ba:d6:a9:d9:6a:96:b6:13:42:9f:
fd:8d:f2:e0:d4:f9:2d:50:dd:72:46:5b:5a:18:f9:
a7:44:c3:3f:ec:26:2d:9e:1c:4d:81:6a:24:34:76:
e9:81:24:b9:51:51:c3:34:35:9a:b2:96:50:1b:9e:
3a:69:46:7c:43:0b:9b:67:b4:0a:67:35:a2:1c:cb:
36:5a:92:d7:aa:f9:4a:b1:9a:23:c6:ef:24:0f:a7:
d9:b4:97:0e:04:14:86:fe:1a:09:14:f8:2f:43:19:
1c:1b:00:d4:1c:f5:4a:7f:24:5b:f5:7c:a1:1a:c2:
5c:11:24:75:ef:e6:4c:28:18:80:5a:e5:25:74:5a:
d5:85:57:af:40:cc:81:0e:f1:b3:ea:24:d9:c9:9b:
74:d1:0b:1f:67:77:bb:44:cd:4b:97:5b:23:99:ed:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:14:F8:D7:B7:47:92:C0:1B:74:9B:8F:02:71:1F:3D:CC:CA:6D:ED
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:c9:5b:c4:34:03:62:1e:6d:2b:17:a3:57:1e:55:79:fb:
70:d1:36:c5:75:08:a6:ee:cd:e9:01:a8:2c:01:45:6e:2c:8d:
2e:f0:3d:6e:7d:da:98:28:f7:dd:14:0a:ba:5d:cf:a6:a2:31:
b2:b1:51:6d:38:74:e2:c1:15:b3:d3:78:7d:91:81:8a:f1:8f:
0f:a8:35:b2:12:b0:31:ba:11:61:53:e5:89:a0:ad:7d:29:d9:
b6:9a:46:e2:ff:b0:73:3e:5e:f6:50:e0:6a:ad:d0:79:a7:47:
a0:9f:9c:df:5d:78:1a:75:22:62:54:a3:ed:3f:c8:01:8a:e0:
7c:77:0a:4a:7f:a6:57:c6:95:9f:17:87:6c:74:97:d3:fe:f0:
df:6a:52:9e:b3:d9:be:cd:6d:43:07:65:97:47:9a:24:31:ea:
8d:1e:85:22:c0:6a:46:e6:09:0a:27:77:57:bb:3b:15:f0:a8:
ee:4c:ec:3f:9e:79:de:7b:1d:3f:84:80:dc:a0:39:9d:ad:43:
a9:91:35:54:96:9a:3d:7e:e5:b1:bd:4e:17:7c:e4:2d:43:fc:
e2:c6:a1:84:f6:ef:11:c2:73:36:5e:fa:25:39:c8:51:74:85:
6f:70:f6:ec:c5:3a:74:c2:9e:15:e4:54:36:a3:c2:cb:9c:f7:
cd:e1:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:58:11 2025 by rpki-client