Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: 5bh+9UKd7Hqt9vKCGrp6VkPIrBwyNBYrlw2XqmYL6Kw=
Subject key identifier: A9:29:9D:7E:7E:0A:E9:32:13:D8:9E:2A:0B:C6:4B:66:5E:90:DB:7D
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019673E693BBB35C3A0FB66789AF902ACDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 140D
Signing time: Sat 26 Apr 2025 21:00:12 +0000
Manifest this update: Sat 26 Apr 2025 21:00:12 +0000
Manifest next update: Sun 27 Apr 2025 21:00:12 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: 5ZsVFcP4321S03yheGWPUc0f5T7oSWU1WWG2l+AmX2g=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:93:bb:b3:5c:3a:0f:b6:67:89:af:90:2a:cd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Apr 26 21:00:12 2025 GMT
Not After : Apr 27 21:00:12 2025 GMT
Subject: CN=a9299d7e7e0ae93213d89e2a0bc64b665e90db7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:a5:47:6a:6b:25:4f:42:97:c7:90:0e:df:
b2:0c:05:a5:c5:4e:14:bb:b8:6c:82:55:b4:d4:2e:
6f:aa:f6:e6:66:ff:ce:82:c6:ef:a4:02:4a:1d:b2:
6f:da:14:3a:a3:7c:1b:40:cf:13:21:50:d4:e4:7b:
2a:c4:fa:b0:73:6e:ea:6f:53:8f:fc:bd:30:1f:6e:
ab:38:92:ab:66:d5:de:a0:b8:e1:9e:e4:71:85:07:
30:60:37:17:ec:fb:5d:f0:02:10:50:b9:57:bc:b2:
29:36:df:d4:67:02:df:f7:e7:39:2c:a3:c3:1d:29:
53:37:f7:7d:e8:0d:1f:a9:ce:4b:1b:04:55:44:6e:
e3:4a:4e:c6:d5:34:12:1a:04:38:75:63:22:c6:e4:
08:e5:8a:a1:ca:85:96:53:57:8a:74:de:1a:86:10:
06:06:51:37:ad:cd:6b:bc:85:5f:ef:07:bd:97:02:
e5:2e:01:5f:cd:2c:23:81:bf:64:ef:2a:ab:6b:fb:
98:58:e2:66:81:23:08:37:d0:eb:c0:6c:fb:ec:54:
37:dc:b2:de:32:24:52:f9:60:c3:7f:8e:c0:79:b7:
57:02:b2:5a:ed:69:59:13:77:69:c4:5a:7a:b2:5b:
7a:77:de:5f:f5:ae:30:b4:2a:4d:11:e8:3d:22:77:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:9D:7E:7E:0A:E9:32:13:D8:9E:2A:0B:C6:4B:66:5E:90:DB:7D
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5c:0d:c5:4c:a0:10:3c:68:19:64:24:32:57:90:ca:39:1d:
97:25:7a:cb:41:61:0b:9f:35:ce:70:e3:d7:52:30:29:ef:af:
f9:06:84:f9:76:37:99:24:ee:44:2c:e4:5f:fe:7b:82:e1:80:
01:71:b4:68:aa:a4:df:67:09:6c:cc:69:d1:0e:0d:4b:7c:a5:
1a:68:a6:de:dd:df:43:3e:fb:c1:70:f3:96:6c:c3:b4:a6:70:
23:79:74:73:da:52:b1:90:03:3a:0f:46:13:72:bb:00:dc:68:
22:01:a7:21:9c:13:23:00:5d:36:b7:04:73:8d:8b:ee:90:45:
c5:a8:40:2b:f2:62:78:23:e2:1c:1f:03:d5:14:49:44:70:c4:
01:14:da:66:2c:77:dc:5c:1b:2b:0d:1b:e2:31:0b:5c:4a:35:
77:f5:3e:ba:cd:79:e1:2b:70:fc:0a:94:d2:6e:64:82:e8:a2:
59:ad:41:b5:94:48:d8:b7:5c:ce:dc:d4:66:03:73:92:08:7b:
59:6c:bd:40:18:da:80:2f:73:06:e4:f2:1b:8f:99:65:6e:e1:
fd:10:ac:57:a6:8e:3a:c3:83:da:cd:4a:3b:8b:2b:46:17:5e:
94:57:66:c4:75:7b:d2:16:18:ad:06:18:3b:c0:69:ac:85:dd:
4a:20:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:01 2025 by rpki-client