Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier: Ty4X1E9a1C/nDZUXsZRmG2jKicKGVsf0WsMWWifqOsc=
Subject key identifier: C5:19:66:83:38:8B:0B:91:82:06:FC:C2:5B:7F:01:46:36:49:9F:00
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 0196C8DFF94CBA432105A7B5A50F865DA86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number: 09BA
Signing time: Tue 13 May 2025 09:00:43 +0000
Manifest this update: Tue 13 May 2025 09:00:43 +0000
Manifest next update: Wed 14 May 2025 09:00:43 +0000
Files and hashes: 1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
3: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: UQAiKVIW8RZ38GdTaFc7s/FN46uWOhRCUy+fbf76iM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:f9:4c:ba:43:21:05:a7:b5:a5:0f:86:5d:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: May 13 09:00:43 2025 GMT
Not After : May 14 09:00:43 2025 GMT
Subject: CN=c5196683388b0b918206fcc25b7f014636499f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:50:fd:da:08:10:55:0d:26:b7:a9:8e:66:
55:fc:d1:6b:ee:ac:4e:2d:07:10:70:43:5c:5b:83:
0b:3a:2b:81:40:1d:7a:74:01:93:63:ec:c7:c0:e9:
40:8a:df:85:d8:a0:3a:49:a8:28:83:08:0f:1d:c2:
69:75:38:ce:42:fa:97:dc:3f:cb:f6:4a:cf:76:b2:
ea:0a:21:63:49:75:8a:80:2f:7a:20:fb:0e:67:fc:
66:3e:9a:81:62:57:89:12:dc:72:c1:af:e7:47:61:
f5:6c:17:d7:5c:7c:2e:1a:9c:b7:e7:52:b1:d8:d2:
ee:d8:88:90:b2:e7:41:57:c7:60:bb:9d:ee:6f:da:
e9:4d:b9:a6:1f:c9:6e:94:ba:28:b9:85:58:12:a6:
ba:14:10:36:37:71:77:21:c9:1d:b9:25:4c:f7:8f:
6c:39:2b:d8:10:67:54:d3:e7:06:0d:19:ae:4b:95:
18:54:81:7a:86:85:87:96:a0:d7:0c:78:12:80:f1:
50:cb:56:4b:fe:e4:da:9d:bf:ee:2d:15:e4:d4:bf:
0d:e5:a3:fb:f7:67:40:82:eb:35:bd:59:10:99:22:
fa:86:75:77:02:ad:e2:3e:19:16:cc:ce:b6:7d:55:
4c:1a:07:29:d9:65:4d:7d:b5:a4:c8:9c:81:41:a6:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:66:83:38:8B:0B:91:82:06:FC:C2:5B:7F:01:46:36:49:9F:00
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:22:78:f2:1e:7a:59:50:bf:42:ca:3a:29:22:0d:36:e8:d6:
0e:5d:61:22:43:01:9f:62:08:c8:ce:5e:96:d6:5d:6c:02:17:
aa:e1:29:d0:d0:40:9f:29:b1:56:2e:a2:5b:46:47:d1:5e:b7:
35:8a:a1:47:bf:f0:52:25:c1:c2:ae:cc:d0:69:2a:06:5b:61:
a3:71:da:71:86:ec:6e:02:84:2d:ba:d3:fc:81:44:89:9d:fd:
28:2f:d9:8e:3c:13:32:e6:a6:39:1e:41:e6:66:57:c0:00:41:
4d:dd:f7:bc:b6:0d:6c:7b:41:35:b7:4e:c8:b7:9b:39:39:eb:
5d:01:60:a9:4d:54:37:99:23:d5:a8:84:c2:c1:3d:e5:35:ae:
f5:79:99:d6:a4:1b:14:df:6d:37:63:6b:ad:75:1e:23:1b:87:
17:a1:4c:ef:23:57:cb:c5:68:33:87:36:8c:1d:e3:5c:04:4f:
d9:9f:1f:a5:3f:55:0a:88:c5:28:82:91:3c:38:3c:45:62:b8:
be:e8:0b:c7:b2:b1:ea:00:30:1b:0b:6d:b3:4a:2b:10:a1:31:
9d:a2:c2:f5:88:73:24:02:1e:4f:be:5a:e3:47:f5:ce:ae:75:
e1:88:ed:b6:dd:5b:75:85:77:2a:6b:2b:dc:3f:0a:4e:ed:e8:
49:ba:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:02:04 2025 by rpki-client