Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: qMI9JMY/B/cpjhsMZvahsnzQ7FRjzSKGumZthnD7ERc=
Subject key identifier: 03:DD:6B:09:9A:A8:37:D3:65:6A:B1:07:50:17:7B:32:09:54:8D:5C
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 01969CE28308337387FA353FE522FDA5D449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 059A
Signing time: Sun 04 May 2025 20:00:12 +0000
Manifest this update: Sun 04 May 2025 20:00:12 +0000
Manifest next update: Mon 05 May 2025 20:00:12 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: mBINn5NnBR5Rz8vfGZEPFU2RLlGG8ylOOknjlHTt4/M=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:83:08:33:73:87:fa:35:3f:e5:22:fd:a5:d4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: May 4 20:00:12 2025 GMT
Not After : May 5 20:00:12 2025 GMT
Subject: CN=03dd6b099aa837d3656ab10750177b3209548d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:cb:cd:cb:f4:7c:72:ae:c1:b8:c9:c1:26:
ca:a0:f2:64:e8:22:c6:35:e8:bf:6c:7a:36:5f:48:
f7:05:b0:41:50:6d:d6:ab:75:10:72:9c:19:e7:be:
c5:fb:86:2c:51:c0:dd:48:65:a3:c6:83:ba:5c:32:
b2:d1:a9:e5:4c:d2:9b:1d:dd:be:3d:72:9f:80:de:
e7:44:83:b7:04:5f:74:99:b2:df:a8:04:22:e7:ab:
f2:f8:ce:ca:62:f9:c1:34:7b:b7:6f:4b:ae:0b:fd:
35:27:f8:6e:ce:1d:9d:d4:37:a2:4d:6f:ae:50:03:
50:14:11:dc:6a:7a:38:1d:39:02:a2:0d:1e:ba:7b:
e3:d5:ec:5b:32:00:a2:b4:06:d5:d5:07:7f:c4:a8:
6e:dc:6d:19:f5:23:a2:eb:15:ec:4b:81:29:fb:01:
21:84:aa:1e:08:41:f4:c1:c7:61:b1:3b:14:5e:b0:
e5:09:e2:90:6d:22:3a:d5:2e:63:df:53:09:8f:4c:
97:6d:1d:7b:1b:c9:4a:89:8d:82:b1:9f:fb:4f:18:
da:e1:ce:20:3f:fe:41:78:2c:e3:e2:2a:e5:40:85:
70:19:06:b0:8b:95:79:b0:38:a7:c8:fb:84:8a:b4:
23:e5:f8:4e:3e:9a:56:b4:46:a6:c8:df:f0:5e:0f:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:6B:09:9A:A8:37:D3:65:6A:B1:07:50:17:7B:32:09:54:8D:5C
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:af:41:c2:54:c6:cc:3c:79:b2:da:b3:0b:31:3d:7f:0d:01:
ab:26:eb:11:12:63:82:ea:ee:d2:75:d8:ba:c2:a1:e8:5a:85:
8d:cb:df:2c:10:40:34:8b:d5:48:da:5b:54:6f:57:63:87:a9:
5d:5f:2f:60:66:4c:9f:26:fa:45:9f:58:73:a8:68:3b:78:83:
a4:8d:14:f5:2a:77:84:67:de:4f:ec:3a:8d:24:54:f7:5d:c9:
b6:1e:42:1e:61:ae:83:cb:bd:9c:c1:b3:66:73:ee:f1:c5:c5:
2f:fd:d0:b1:f4:84:98:c8:a9:21:33:02:9e:17:c4:e6:08:71:
78:0a:6f:2f:71:dc:4f:c4:4a:4c:99:cc:0b:68:b2:2e:84:7d:
3b:f5:86:55:b1:c6:46:60:bc:c7:50:45:fd:6c:e1:a6:5a:54:
b0:cd:57:81:ad:c3:03:6f:fe:fe:5a:15:2a:00:46:2c:a7:f6:
ed:cd:43:00:71:ec:e1:5f:22:91:47:7f:28:b1:11:62:08:41:
9e:8f:3f:57:8f:9c:2b:79:a1:47:51:51:54:c3:2b:23:75:d2:
e0:84:7d:ff:ad:0e:31:e5:73:ca:c1:73:7b:38:6f:fd:43:05:
77:d3:67:cd:12:1a:5b:9b:b9:65:29:ba:2b:67:76:36:24:9a:
bf:46:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:54:00 2025 by rpki-client