Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
File: W2k88e71-wv3LtXC4ihn0RJK89g.mft (raw, json)
Hash identifier: MwzLGSHRQCT4kDwMweExiNxLsvwd0ja+GAIXClSnDpQ=
Subject key identifier: 17:A1:14:55:3C:1E:2D:01:BA:30:2D:88:C0:07:DF:BA:E9:8D:ED:7D
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 0196771EEFB332E0CCA3F7D179C24A8EC704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 12:00:38 +0000
Manifest this update: Sun 27 Apr 2025 12:00:38 +0000
Manifest next update: Mon 28 Apr 2025 12:00:38 +0000
Files and hashes: 1: SV9kNq2IEFMcsiU27EYmGZik5t0.roa (hash: 4jyjlSiN/7n2r//5rSK3grDPFtbjn3ApiThCyxJ+2wk=)
2: W2k88e71-wv3LtXC4ihn0RJK89g.crl (hash: q+23WG7SEsuSUtVNdAjt26r/ba1K8AiQYKqcM9V7GnU=)
3: g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa (hash: Vtrkb6OsU8qQ3CnvGKXLNE1uPP6pvCa3n/XLcp+xWOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ef:b3:32:e0:cc:a3:f7:d1:79:c2:4a:8e:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Apr 27 12:00:38 2025 GMT
Not After : Apr 28 12:00:38 2025 GMT
Subject: CN=17a114553c1e2d01ba302d88c007dfbae98ded7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:09:7f:07:b3:ad:93:15:32:75:70:9a:74:
f8:65:3e:d5:a6:62:02:76:78:55:44:ed:4e:7e:0c:
e6:49:4b:dd:9a:e8:cc:28:fe:dd:7b:12:cf:f6:00:
17:29:ee:70:53:8b:7b:ed:af:d3:a6:0f:18:c5:9c:
2b:b7:48:cc:a8:0c:4a:71:f6:ec:7b:88:7f:95:52:
57:0b:72:63:01:00:fc:22:4e:2c:b7:37:2b:72:ba:
86:e0:e0:7e:1d:40:4c:10:08:50:ff:26:15:5e:59:
6f:0c:9a:ca:3d:96:8a:85:5f:6f:f3:e1:dc:0f:a6:
81:45:bb:a4:b2:55:0f:54:73:a5:f1:0c:7b:68:0a:
7a:09:3b:fd:ec:32:f3:e8:fc:19:dc:ad:27:94:a3:
b6:f7:cc:86:67:fb:99:c7:ae:58:70:36:31:f2:4e:
c3:54:38:b9:d6:b1:e6:7b:98:44:d6:9a:82:b7:5a:
59:3b:03:e2:b4:fe:33:f1:f4:66:4c:10:13:0a:0e:
02:f5:73:8a:04:ab:b1:dd:f1:15:d3:c3:7e:95:b9:
5c:8d:50:55:ff:78:4e:18:28:ee:68:08:4d:42:16:
0b:10:73:5b:93:bc:fe:1a:f9:92:68:13:7e:4d:ef:
56:21:b3:6f:ae:45:a2:7b:2c:54:06:80:01:fd:75:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:14:55:3C:1E:2D:01:BA:30:2D:88:C0:07:DF:BA:E9:8D:ED:7D
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:42:b0:77:46:0d:40:78:e6:02:e0:3a:12:4e:23:66:6b:aa:
cd:56:89:9f:71:2e:bf:b0:ce:9b:58:5b:c5:b5:2d:2d:61:4d:
58:31:0e:73:76:5f:b7:ae:6d:e7:28:85:9b:3a:f1:73:aa:fe:
f9:a6:9d:49:0a:75:21:87:1d:ad:6e:0d:ea:08:c4:a2:4b:12:
e3:8d:a0:d2:2d:0b:45:21:33:23:30:d0:47:e3:7d:a9:20:3a:
be:d9:0a:09:99:a5:c4:36:5e:d7:3d:ec:6d:ce:02:40:6a:32:
ad:78:02:df:85:07:42:a5:86:02:8a:13:2e:fc:f1:65:80:08:
8a:b3:fd:36:f0:ac:4c:36:d0:0f:3d:63:bd:97:b7:b7:8f:fc:
b2:45:ea:95:ad:e3:88:36:75:60:14:50:25:0f:cb:84:bc:9a:
da:ad:c5:c4:6d:6e:6a:b2:7a:0e:9f:e7:95:6a:d2:14:ff:17:
fc:2a:56:46:5b:72:9c:06:e5:39:31:ac:49:9d:78:4f:75:b8:
43:93:48:bb:3c:db:3a:e7:04:3e:f6:0f:cd:52:45:8d:70:fc:
18:4e:e2:32:94:8f:b7:88:a4:a1:f9:30:76:69:b0:4d:c5:41:
30:af:e5:13:d6:72:0c:19:47:02:97:04:d6:2f:bd:28:0d:e9:
52:fb:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:43:54 2025 by rpki-client