Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: Zlc0GrME5aan2X3i8WekJCm80SSKN+JHGqwtNvn2GRo=
Subject key identifier: FA:B6:4B:45:D4:F4:CA:5E:91:71:8C:38:79:74:BF:8E:48:08:13:2D
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 0196B9A4420531D8233E1D733D67F49D16FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 10:01:11 +0000
Manifest this update: Sat 10 May 2025 10:01:11 +0000
Manifest next update: Sun 11 May 2025 10:01:11 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: MNiw71W2w8OX5m4yPleEDghOl2azwmM6xzYoNviWbWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:42:05:31:d8:23:3e:1d:73:3d:67:f4:9d:16:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: May 10 10:01:11 2025 GMT
Not After : May 11 10:01:11 2025 GMT
Subject: CN=fab64b45d4f4ca5e91718c387974bf8e4808132d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:7e:82:1e:23:a9:8d:08:b1:2f:b5:41:1a:
8e:55:fc:95:b6:22:99:cd:a9:de:88:3b:00:be:5d:
7e:b4:34:fe:8a:b9:a3:c2:76:4b:32:ed:af:d3:a3:
33:53:f9:fd:04:56:02:3c:c9:45:f3:d0:fb:c1:df:
68:fe:78:ff:02:5d:61:2c:d9:a2:57:03:44:fb:50:
86:56:5c:d7:ac:c7:d9:b3:46:8e:09:84:9e:34:db:
c7:44:8e:d3:0c:26:70:4b:50:e4:40:13:22:de:9e:
5e:d7:9e:c8:1e:a6:ab:b4:5d:96:dc:1d:90:32:f5:
43:6b:d5:7d:6f:cf:1e:85:09:24:58:37:01:02:cc:
1b:ee:e0:46:a6:44:2c:7e:20:eb:50:bb:be:e1:5a:
87:5a:64:8e:c4:45:ba:21:53:1c:12:5a:ad:f3:2a:
09:15:46:9d:8d:26:68:9d:79:48:de:87:a9:f1:a9:
9a:16:10:3e:4d:c6:ea:6d:44:1e:27:1f:31:c3:08:
91:63:70:71:c8:f2:37:20:55:ad:7f:09:ee:38:91:
80:44:9d:63:40:61:e0:cc:40:dc:ec:c3:dc:f7:e7:
7f:81:4f:7f:42:cc:9d:40:6a:4b:c1:95:78:49:cf:
53:2c:3d:c6:55:6f:d0:a8:61:1b:12:9e:a6:e7:c6:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:4B:45:D4:F4:CA:5E:91:71:8C:38:79:74:BF:8E:48:08:13:2D
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:9a:cd:97:40:0a:3e:2d:c8:29:d3:18:82:cf:cf:65:fb:
be:65:5f:b2:05:9c:a9:0b:26:90:51:1b:a2:79:ef:f5:90:a6:
48:02:02:8a:59:66:42:41:94:bd:90:64:e0:13:f3:4b:16:2e:
81:55:6b:a1:6e:b2:21:9c:98:10:48:00:c6:9d:03:3e:ce:7f:
a4:a9:b1:9a:b0:b1:22:a0:85:f8:d1:f0:63:f7:64:fb:41:a1:
c5:c8:b4:ab:f7:27:3f:a5:c4:e6:85:ec:99:4c:b0:10:3d:2b:
36:25:20:55:7f:8b:db:9d:b9:78:f4:90:a6:05:6c:7c:99:a0:
ca:b7:db:f6:be:49:b2:73:19:55:77:5c:bd:ef:f5:1f:1d:8f:
34:ee:ed:bc:63:61:16:a2:b5:89:b8:f6:e1:62:17:6d:e3:83:
39:c2:9a:e1:0a:b6:9c:7c:e4:05:e3:96:41:e3:75:3e:b2:68:
e9:8a:ef:49:1a:e3:d9:27:5b:a7:43:34:a6:26:6d:46:92:76:
e8:c9:5c:11:fe:2d:77:51:48:6c:23:f3:fa:db:fb:f5:c9:22:
fd:b4:22:43:c2:64:7c:0e:2b:dc:11:50:f6:b2:6f:79:de:95:
26:8c:65:4c:61:af:3b:f8:2b:bf:23:0a:09:b0:45:8d:0b:a3:
a5:cc:15:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:05:23 2025 by rpki-client