Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: sWJgQ7xhfpd6Cgjh1LGOpa4N70t5BJ3FsOpqLJX7Kec=
Subject key identifier: 27:57:BA:8B:B0:B5:29:B1:36:CA:C6:AB:EA:A4:6E:7B:34:41:79:64
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 0196C6160E2C191A7AFD23AEEBC5092CA1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 0804
Signing time: Mon 12 May 2025 20:00:56 +0000
Manifest this update: Mon 12 May 2025 20:00:56 +0000
Manifest next update: Tue 13 May 2025 20:00:56 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: quK2IIB3REVO0W0nfypWZYAMS9VtB/TJevv11/DAUBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:16:0e:2c:19:1a:7a:fd:23:ae:eb:c5:09:2c:a1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: May 12 20:00:56 2025 GMT
Not After : May 13 20:00:56 2025 GMT
Subject: CN=2757ba8bb0b529b136cac6abeaa46e7b34417964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:38:8d:2a:a6:06:7b:ce:75:ad:8c:6a:f6:
0d:3e:3d:f0:f8:44:0a:11:d3:50:68:d5:4e:ca:c0:
89:72:f5:27:26:38:0f:a3:34:c3:96:56:3d:d2:2d:
7d:ae:c9:ba:a2:33:1f:f3:b7:27:d7:af:bf:15:cf:
c8:2d:6d:d5:b5:41:fd:3a:40:c7:be:0e:11:47:7a:
98:e7:bb:38:cf:86:4f:38:85:c9:e5:a3:01:52:c9:
e7:6b:71:99:54:1f:28:a7:a0:cf:6a:46:40:34:cb:
70:5e:cf:d7:c2:42:60:c7:04:0f:99:3d:c2:71:1e:
56:27:da:70:8b:ea:58:fb:72:4a:cc:28:f1:d9:66:
f4:b9:88:93:84:7d:23:ac:c0:7c:1f:62:06:f9:50:
e9:a0:12:d1:fd:e4:98:64:62:81:7e:de:09:b9:8e:
9c:4d:9f:67:cb:65:7a:4f:1d:9f:dc:40:11:ec:24:
43:0f:5a:e2:27:93:7e:b5:3b:44:a6:f7:e7:0a:58:
4a:73:2e:2d:08:e3:64:b6:76:59:55:60:ba:c0:8a:
f1:e3:df:81:18:02:84:d3:45:06:fe:01:2d:ba:46:
41:e2:31:7a:1f:d9:e3:2e:05:fc:cf:47:5b:30:3a:
73:09:ed:98:a8:bc:57:5d:b1:99:f5:66:7d:9a:44:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:57:BA:8B:B0:B5:29:B1:36:CA:C6:AB:EA:A4:6E:7B:34:41:79:64
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7d:0d:8d:13:eb:55:50:30:52:80:db:cb:ca:94:e3:88:1a:
14:19:f5:e0:61:fb:6b:bc:c2:d6:6a:5d:7a:14:e0:83:39:33:
16:27:74:04:db:b1:c8:05:dc:9f:2c:65:3f:ba:da:25:2e:c4:
26:21:ce:13:2d:3f:b9:19:16:fc:3d:21:66:d3:b0:69:6a:a1:
8c:bc:51:ad:ad:63:f2:06:21:98:34:13:24:24:5e:33:53:7d:
2b:83:c3:de:48:3e:34:18:d6:07:fd:77:e1:09:1d:6e:d5:0b:
8e:35:6d:09:24:04:03:ea:52:bd:9f:42:d8:0a:fa:5a:14:8f:
09:8a:e2:19:c9:cc:19:b2:97:fc:29:34:46:45:41:df:d0:49:
aa:71:ac:a8:85:8d:70:1a:bf:1c:d2:6d:1e:73:20:2b:f7:32:
f7:8e:87:07:de:ac:ee:01:f3:3c:70:07:77:a3:c0:3a:34:c0:
67:46:85:70:8a:44:f4:77:aa:e6:13:cb:a0:ed:c3:c9:18:b3:
60:a3:fa:8a:6f:f1:a5:97:5d:d4:70:df:24:49:c7:c8:e4:96:
34:a2:c3:4a:77:57:fe:3e:5e:9b:f0:33:aa:03:c1:ea:15:48:
bc:4d:33:ae:6f:cf:da:10:65:25:16:9c:62:87:86:27:b1:75:
79:b9:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:33:44 2025 by rpki-client