Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: Hv/eLLfMZHkYpfOZJEJP6oa8hUHAfJJt5WM0/iI5plk=
Subject key identifier: 17:4F:F0:D0:B7:42:1A:D3:68:0B:D7:2E:02:F9:85:4E:58:1B:D0:33
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 0196A72F36B3D169CD8D6E140793901D0A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 20:00:11 +0000
Manifest this update: Tue 06 May 2025 20:00:11 +0000
Manifest next update: Wed 07 May 2025 20:00:11 +0000
Files and hashes: 1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: 09qcGeQTlG9oBi2W7PsvJz6RfJQmcGRF3qZH79IgRBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:36:b3:d1:69:cd:8d:6e:14:07:93:90:1d:0a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: May 6 20:00:11 2025 GMT
Not After : May 7 20:00:11 2025 GMT
Subject: CN=174ff0d0b7421ad3680bd72e02f9854e581bd033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:ae:8f:e4:48:5b:4d:ca:60:c3:00:99:0c:
61:21:dc:da:0a:3e:7c:76:1c:d9:7e:02:ca:f1:45:
a1:bd:a3:c4:6b:a5:b0:e6:7c:11:e5:f9:df:7a:06:
cc:ff:ac:ff:c8:80:85:48:cb:0f:c4:69:7c:d6:e3:
d6:61:f4:40:c9:63:a4:6d:9b:f6:41:ac:16:66:c9:
0e:62:94:e4:64:fe:cd:34:b3:5f:b2:db:3f:24:12:
49:c6:79:53:09:c7:3a:4f:33:ab:b5:29:50:b9:1a:
7c:24:07:50:fc:4c:06:3a:53:7d:22:fd:e8:ed:19:
25:63:db:17:51:58:25:29:a3:30:23:9a:6f:5b:66:
98:14:d8:71:00:63:47:02:1c:02:c8:f9:4c:c7:45:
34:55:bc:b6:e0:ff:9d:aa:cf:08:be:33:25:d2:98:
f9:f1:3e:c7:2e:9d:64:09:8a:b5:83:7c:d2:73:b4:
b9:00:58:02:b5:0c:7d:3a:b4:61:7f:67:a6:1a:46:
8e:02:72:5e:d4:f1:f8:96:cb:dd:71:98:7f:ad:47:
4e:ed:1e:3c:ed:de:d8:c0:0b:d3:4f:e8:6d:2f:0b:
0a:25:cf:39:ae:89:1b:09:e5:04:27:cb:ec:73:85:
ae:84:7f:12:db:82:0d:1b:31:d4:c0:53:0d:41:a8:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:F0:D0:B7:42:1A:D3:68:0B:D7:2E:02:F9:85:4E:58:1B:D0:33
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2f:f5:a8:47:06:25:5f:a2:d4:bd:cc:a5:e1:cb:c4:2d:2f:
61:05:a9:04:aa:d9:b2:ac:c5:b0:d1:36:68:26:60:ee:5d:0b:
38:d1:a8:58:22:5c:21:ed:ec:0f:cf:76:b1:55:f3:23:28:cf:
37:7c:d0:fc:f0:f7:5a:71:d7:1c:07:9a:ff:7b:c7:31:2c:c9:
d1:6b:d8:66:52:e6:ce:90:90:93:87:aa:52:52:c2:2b:77:c3:
ae:9f:ea:41:a4:24:e0:15:c0:12:56:69:5b:31:96:b2:dd:d0:
53:55:54:39:ab:f2:dc:49:32:13:66:cd:e7:5a:f6:bf:bd:35:
62:10:29:e0:ce:1b:cf:06:28:4c:c4:70:3d:4d:f7:e2:cd:67:
6b:a0:91:75:12:a1:ba:dc:67:5d:f9:de:6a:72:91:15:1d:31:
00:65:f3:24:77:b9:01:ff:f5:61:7e:9c:99:fc:68:ff:e2:3b:
e9:7e:85:66:5a:42:dd:8a:bc:79:49:8e:94:13:ee:86:34:d6:
95:e4:a9:cf:dd:ea:e7:8a:73:6e:e8:a0:dc:54:05:d8:00:45:
62:9c:a3:29:60:fc:42:4b:c4:a3:ad:42:fe:82:59:43:9f:e6:
ab:e0:cc:d1:be:dd:72:87:c8:f8:5e:7a:a0:29:ea:74:1e:57:
04:40:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:34:19 2025 by rpki-client