Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: pzyGM0YDYFS2aEBWlgfRU31XEv2rlcBTZCSVZLXpLA0=
Subject key identifier: 12:F3:38:BA:9E:6D:A1:09:EF:5B:B8:3C:48:B6:99:B1:AE:61:48:C1
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 0196AFFC1F22356F7CD9BB2D0ECDF690E485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 1483
Signing time: Thu 08 May 2025 13:00:57 +0000
Manifest this update: Thu 08 May 2025 13:00:57 +0000
Manifest next update: Fri 09 May 2025 13:00:57 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: Xhup3b2s+UG6IqIJCQXf6cR8n6wHh2MUA4rit2B1NIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:1f:22:35:6f:7c:d9:bb:2d:0e:cd:f6:90:e4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: May 8 13:00:57 2025 GMT
Not After : May 9 13:00:57 2025 GMT
Subject: CN=12f338ba9e6da109ef5bb83c48b699b1ae6148c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:5a:78:41:e6:00:33:4a:ef:eb:7c:52:fe:
83:ed:f5:00:2e:21:43:ee:b0:12:e7:fd:27:2a:9e:
0d:1e:69:03:4e:f8:26:b0:e2:37:d7:46:b6:c1:94:
21:ee:67:27:17:48:64:7d:01:6e:54:99:fb:49:13:
20:37:5f:6f:07:81:bf:05:b4:03:6d:e3:9b:4b:89:
33:6e:e5:a2:53:2b:3c:9d:a2:5e:91:93:0a:6b:75:
20:65:52:6b:5a:3d:b8:bc:07:1d:4e:a4:6e:89:a1:
ce:06:4a:3d:10:92:fa:a6:41:5a:9c:dc:5f:ca:79:
bb:09:38:4c:08:f4:9a:57:79:8e:ff:4f:33:bb:96:
74:9e:da:32:a4:66:c3:e5:a5:03:36:a7:54:ed:74:
11:cc:6b:b0:75:75:e8:c8:82:61:ef:b4:d1:2d:8c:
08:2b:92:ec:dc:f0:aa:92:d5:3f:53:40:4a:39:cf:
4d:c0:b3:7d:63:5b:78:64:ba:e5:d8:e6:27:63:d6:
3f:1b:b6:95:eb:ea:fb:66:18:e3:b0:ea:93:c6:5e:
db:65:e3:a0:3a:b2:2c:5f:46:98:0d:83:a2:5e:40:
6e:f5:1d:4d:10:6f:2f:28:26:e8:96:e3:a9:7c:5c:
83:20:16:76:fb:fe:9a:9a:02:d1:db:0d:4d:a2:72:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:38:BA:9E:6D:A1:09:EF:5B:B8:3C:48:B6:99:B1:AE:61:48:C1
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:92:45:c7:fc:b8:2c:2a:63:06:6b:71:7a:e5:6e:7b:14:6e:
58:50:38:dd:d3:29:42:30:70:cf:8a:76:f2:07:26:db:75:76:
54:e9:1e:0f:86:65:23:a5:bd:7c:e0:6b:47:37:08:aa:03:0a:
70:4e:39:4e:84:15:b4:33:86:ee:02:93:3a:dd:a3:4b:15:0d:
a5:9a:e8:13:5e:0a:a5:35:11:01:6d:4e:99:2a:76:74:cf:32:
6b:47:51:dd:12:bd:11:32:1c:f7:f7:89:4f:b2:90:64:2e:28:
a4:c7:d6:3a:b0:70:db:94:b6:52:90:43:60:aa:a0:b5:46:8e:
5d:12:a2:08:fb:5a:27:6d:2b:1c:2c:ee:69:1f:a5:45:8c:13:
10:76:60:dd:67:b4:aa:b4:d6:93:ca:96:d9:64:33:46:a2:ab:
c2:48:52:05:4c:cf:8c:d4:41:59:4a:20:54:3a:26:ba:a0:58:
7d:60:72:1b:07:fe:2c:d7:cd:a5:aa:fb:3d:78:ef:82:d6:36:
b3:4f:2b:e3:65:e2:ed:a9:2d:0f:08:cd:b0:8d:9f:2c:dc:e3:
e5:80:8e:26:25:39:19:ad:37:1a:1a:d9:e4:2e:4a:5a:26:ea:
9d:ec:87:56:71:64:6f:c7:47:c9:0c:85:82:dd:79:f1:90:b2:
4c:56:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:40:06 2025 by rpki-client