Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier: zXxzN4VGxILjfFLZe1AeEqWo/FeiE142SQ1lFM75E50=
Subject key identifier: FC:F8:6E:A2:5E:F2:EE:3D:43:D3:A3:6A:43:23:48:9F:BE:66:81:CC
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial: 01969DF55CA1014E1651AF4847B1FC6FB92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 01:00:25 +0000
Manifest this update: Mon 05 May 2025 01:00:25 +0000
Manifest next update: Tue 06 May 2025 01:00:25 +0000
Files and hashes: 1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: 258mukrjZxxrzIOU82gT2hklHqdy3pXG/gL120mt8pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:5c:a1:01:4e:16:51:af:48:47:b1:fc:6f:b9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Validity
Not Before: May 5 01:00:25 2025 GMT
Not After : May 6 01:00:25 2025 GMT
Subject: CN=fcf86ea25ef2ee3d43d3a36a4323489fbe6681cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:a5:37:c4:6e:2a:d6:f1:70:34:65:fb:77:
29:90:6e:2b:6a:22:71:53:41:9b:bb:b5:77:ab:07:
07:20:ec:5d:1a:d2:4b:c9:8c:0a:14:96:f6:e1:53:
6d:d3:9f:85:f2:0a:be:f1:6a:40:57:e3:af:00:85:
89:13:b2:e5:0a:0a:4f:92:95:c4:97:f9:88:b8:07:
48:82:0d:4a:51:31:91:2c:0c:91:1b:11:79:1a:77:
77:a4:2b:ef:89:73:fc:1b:f2:ae:ec:a1:47:da:79:
53:ad:c4:28:e3:69:60:9d:67:7f:64:38:45:f2:9e:
65:45:5f:26:d1:af:7c:4e:f2:64:fb:56:ad:91:f4:
d7:94:b4:fe:7c:72:82:e9:c5:c6:ce:83:8f:c3:65:
0a:15:e6:02:42:99:1d:3f:59:b4:42:32:54:da:56:
da:ae:02:eb:c8:eb:75:35:1f:03:c9:9d:e0:e4:b0:
fc:b6:ac:d7:de:0f:b4:ba:47:a9:41:7e:af:bd:fe:
e3:f1:c7:5d:e9:33:b2:76:15:ca:fe:1a:c4:55:c1:
fb:fd:e1:19:5f:e9:78:17:e4:50:d2:91:de:73:59:
28:72:b5:8e:b1:c1:29:a0:a6:37:81:3e:93:91:01:
3c:03:1a:99:6e:9a:bf:5a:5d:45:90:f9:b2:80:22:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F8:6E:A2:5E:F2:EE:3D:43:D3:A3:6A:43:23:48:9F:BE:66:81:CC
X509v3 Authority Key Identifier:
keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b4:f0:23:39:5c:9d:e9:15:0b:dd:6e:a7:db:28:11:23:46:
59:69:f2:51:d3:55:8a:07:72:f5:34:ae:0a:d1:f0:45:95:87:
4d:ac:9a:a9:1e:4b:3b:88:43:58:4c:e7:1d:7b:ee:5a:98:1e:
2f:b1:88:95:e8:06:fa:cd:57:84:4b:9a:d6:aa:25:0d:91:6e:
41:01:dd:a4:2c:e1:96:5a:4c:65:fb:4d:09:e8:a2:b6:15:fb:
b5:b6:59:75:bc:83:d1:a3:0a:c7:de:f1:db:d9:7f:84:b3:96:
c3:ec:2c:ba:a3:f6:24:94:a3:8c:ac:92:08:db:06:e5:1e:8b:
e3:93:5e:0c:4d:95:1d:06:1e:96:65:05:12:7e:60:6a:ff:35:
52:6b:57:d7:3a:3c:42:91:be:13:30:fd:f7:59:25:18:d6:d1:
c3:c8:5e:4c:3b:14:58:51:c0:22:15:e6:85:26:30:5a:60:3e:
2e:a5:51:7c:8e:e8:ab:bf:3e:58:20:cc:7f:97:10:9a:b0:2a:
6c:28:cd:24:72:a8:d8:d5:1c:6b:ef:ac:5a:23:8c:67:b2:89:
13:2c:a2:dd:8c:d4:fd:14:ab:48:1c:a1:2f:40:f4:bc:46:92:
6f:73:ba:f8:6f:af:72:e8:06:d6:70:ee:a2:45:67:de:88:51:
f9:81:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:19 2025 by rpki-client