Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File: dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier: X7S+iF/BA8NjojLgndj1OwHImleRDvkpFB1J92anTDM=
Subject key identifier: 53:B3:A1:6F:90:C7:26:6E:DF:74:AE:1B:71:05:D0:7C:09:A8:47:FA
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 0196C201EF515AA6B8634BE826FB8E6CE2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number: 14CF
Signing time: Mon 12 May 2025 01:00:28 +0000
Manifest this update: Mon 12 May 2025 01:00:28 +0000
Manifest next update: Tue 13 May 2025 01:00:28 +0000
Files and hashes: 1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: NGdM5A/yvKilPrQhuZ59cXGmmDdPFCk+vwohMTgX+Kg=)
2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:ef:51:5a:a6:b8:63:4b:e8:26:fb:8e:6c:e2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: May 12 01:00:28 2025 GMT
Not After : May 13 01:00:28 2025 GMT
Subject: CN=53b3a16f90c7266edf74ae1b7105d07c09a847fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:0b:9d:eb:2e:9a:ae:70:22:d6:3f:64:c5:
c7:12:33:e0:e6:f4:ac:c0:2e:9a:67:a5:45:0a:d1:
a3:47:b4:80:04:e1:15:42:60:5c:5e:18:f8:7b:c9:
26:7f:38:69:d3:60:bb:37:b5:c5:02:ce:e7:7e:7f:
43:b1:a8:2c:a7:82:53:69:52:e2:91:bc:93:f8:86:
27:4e:8b:b7:27:ad:9a:df:ec:cd:74:27:26:9d:7e:
70:d1:9f:7e:10:dd:ac:b3:8f:17:fe:54:0d:62:2f:
62:19:2c:28:e0:48:04:f2:00:99:49:14:53:e5:ce:
f6:52:c4:99:37:bf:86:8f:2c:92:04:1f:eb:b2:b2:
e8:09:bb:8c:95:c5:f1:32:a3:d3:cd:b7:25:6f:6f:
48:1c:07:46:64:43:67:3d:25:a3:f5:81:f3:bb:bf:
9b:22:a6:aa:31:ba:0d:c0:aa:74:6a:4d:58:95:ac:
31:20:47:79:ed:d1:6d:9d:52:c8:bc:7d:ed:cb:66:
32:b4:1a:f8:ae:e7:e9:6e:7f:5f:83:1c:23:b7:66:
37:56:25:d9:c8:d6:03:ff:e9:09:fb:a7:1b:c1:5a:
dd:61:1e:18:8b:69:32:83:1c:8d:18:e2:1a:aa:21:
7c:04:27:15:e4:49:d4:c2:f6:83:c3:c9:7a:12:73:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:A1:6F:90:C7:26:6E:DF:74:AE:1B:71:05:D0:7C:09:A8:47:FA
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:73:6e:97:47:67:b0:20:4a:57:d7:a4:e0:f6:48:6f:45:e2:
1e:4a:5c:54:a2:ef:76:8d:40:cc:e0:0f:0e:d2:c0:e3:28:34:
67:e1:da:53:9d:f3:2f:f7:ca:5c:d7:b9:c4:23:8a:09:a0:c0:
7f:e3:84:e7:72:ba:44:0a:31:17:a5:84:b2:86:26:b7:06:72:
3f:33:6c:9c:08:48:e1:e4:8c:e2:6c:b6:18:52:7f:6d:81:99:
8b:d9:4f:49:43:26:9e:5c:ec:59:30:4b:99:3b:10:e4:4b:19:
84:80:f9:8a:cf:bc:7e:74:96:f7:f4:be:40:84:99:69:a2:00:
c0:ef:50:ae:83:5f:b5:ee:cc:31:d7:68:5f:84:7e:0d:d0:3a:
0a:cc:8e:be:87:1f:43:83:a9:51:2e:ae:fc:a2:be:10:5c:d8:
13:b2:fc:32:0e:a8:af:41:d4:9e:64:27:c2:46:9f:c4:de:0d:
f9:72:af:4e:70:1a:de:93:e0:d8:ec:90:2a:76:77:c1:18:58:
90:02:45:e6:01:13:07:f6:b7:00:09:cd:1a:06:17:55:61:da:
51:fb:44:3b:b7:ab:2c:d8:60:20:4a:41:db:a7:5d:e3:bb:b5:
41:e1:41:36:8f:74:c3:ed:6e:ab:44:4e:c4:ba:32:6a:52:a8:
41:ae:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:30:31 2025 by rpki-client