Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier: n3mfQp9p21nYNvCHI4XwMDV4iOiLD+Np3DESTcXselk=
Subject key identifier: 9C:BE:18:64:0F:87:09:24:F3:7C:FD:DD:2E:C8:F0:1D:BD:24:6A:B9
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial: 0196C804A57B6E31F84DDD2CCDB2A190C7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number: 02DC
Signing time: Tue 13 May 2025 05:01:09 +0000
Manifest this update: Tue 13 May 2025 05:01:09 +0000
Manifest next update: Wed 14 May 2025 05:01:09 +0000
Files and hashes: 1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=)
2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: CoWeKrvsaOJXLaMag0xTRKor4WXVoM5UILjsrCtOZt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:a5:7b:6e:31:f8:4d:dd:2c:cd:b2:a1:90:c7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Validity
Not Before: May 13 05:01:09 2025 GMT
Not After : May 14 05:01:09 2025 GMT
Subject: CN=9cbe18640f870924f37cfddd2ec8f01dbd246ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:98:55:1b:17:f0:3c:f8:b5:00:55:97:47:
5d:4c:78:60:e0:cc:6a:d3:4f:1a:84:f4:8a:da:bb:
53:cf:45:ae:01:7a:8d:36:f5:05:8a:40:98:f3:2e:
0a:8a:0a:00:21:08:30:11:15:f3:9e:68:6f:60:a2:
42:54:22:45:0e:e3:b0:a6:58:23:4c:ee:50:9d:9a:
59:96:9a:70:f7:ca:1c:e7:47:45:80:34:db:ee:8b:
9e:6b:26:9d:7c:ad:e0:71:1d:1c:ae:97:9b:e4:61:
ab:5d:bc:ff:b4:d5:dd:cf:7c:9e:31:b9:23:32:dd:
83:55:b3:c2:ff:e9:0e:62:2e:3e:72:ff:f5:a0:9f:
fa:be:5d:83:5e:d6:b9:ac:7c:0b:88:c9:93:b0:53:
30:66:b3:19:2e:35:4a:7b:3b:db:39:ea:7f:be:71:
1c:74:21:75:c1:c6:1e:dd:a0:a1:2a:db:c9:51:0c:
a3:23:e3:66:88:18:56:6f:11:37:97:ad:fe:15:5f:
9a:e8:8d:bd:9f:e9:8a:95:4b:eb:c0:df:3e:c4:42:
f3:eb:47:ed:c7:56:9d:36:fd:a3:48:c6:81:a2:4d:
e3:73:9c:c4:20:1c:79:f7:6a:56:09:0c:8b:54:47:
e6:e4:80:95:4e:21:12:0b:3d:ea:1f:ee:7e:40:ed:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:18:64:0F:87:09:24:F3:7C:FD:DD:2E:C8:F0:1D:BD:24:6A:B9
X509v3 Authority Key Identifier:
keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3d:e2:99:ff:56:1a:34:23:21:6b:ee:c0:d2:7d:a7:81:f0:
c8:c9:72:ce:c1:aa:71:a4:4d:a5:2c:69:d5:17:ea:79:0d:c8:
39:78:4d:b1:9d:3c:24:2d:5f:da:e2:86:75:bd:7b:86:67:06:
2d:7d:cd:6b:9e:35:f7:ed:ca:c1:85:0c:34:7b:fb:f4:9c:b9:
14:b3:85:de:9b:76:f4:03:15:0c:58:e5:31:78:6b:40:16:e6:
66:68:6a:71:c8:cd:b6:92:15:2a:7c:11:0b:cd:a1:e3:5c:70:
45:c1:c4:20:ef:dd:83:aa:cd:a7:2d:61:5a:e5:26:74:9e:ef:
42:32:65:e3:8f:69:6f:b0:2d:e0:68:6f:81:55:bc:e0:f8:d6:
95:12:f2:aa:11:58:d1:32:c7:46:9e:e6:91:1b:8f:a7:0c:15:
72:38:4e:db:17:bb:48:35:6d:17:8d:48:6b:39:1f:b3:98:db:
16:90:c5:8e:ee:15:7d:ac:2e:b0:53:e4:ec:bb:f9:c3:ba:a4:
23:92:d5:64:94:2a:e4:b7:e7:95:53:ae:0f:a7:fa:d9:68:cd:
65:ff:7c:2d:7c:ce:29:7f:ed:f5:ff:5e:62:e1:63:a9:29:4d:
ea:81:e9:8a:79:10:c1:fb:b2:4f:3d:74:d4:0d:95:53:74:ac:
72:6c:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:16:29 2025 by rpki-client