Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File: W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier: zacZmdUz12T9yzmrrl4nc7jenXQ9n2eZklRzoL8MRk4=
Subject key identifier: 3C:21:F8:A2:44:A3:8C:DA:CF:5F:CF:4D:0F:E3:5F:80:75:AD:14:14
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial: 01967FB4230A13F7154967128F954661F2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number: 135F
Signing time: Tue 29 Apr 2025 04:00:33 +0000
Manifest this update: Tue 29 Apr 2025 04:00:33 +0000
Manifest next update: Wed 30 Apr 2025 04:00:33 +0000
Files and hashes: 1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: tU8ebNaIhcy5QvqvQ1EmHoi4F142lZGPpaWesOkq/Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:23:0a:13:f7:15:49:67:12:8f:95:46:61:f2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Validity
Not Before: Apr 29 04:00:33 2025 GMT
Not After : Apr 30 04:00:33 2025 GMT
Subject: CN=3c21f8a244a38cdacf5fcf4d0fe35f8075ad1414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:b4:a8:20:c5:4c:cf:43:2f:70:2a:90:88:
cb:31:aa:34:e2:a9:7b:61:2b:80:4e:1b:fe:a4:a0:
54:6a:83:05:90:95:2a:ea:e6:af:1f:f0:73:01:81:
79:b4:9e:5e:d9:28:5a:c8:42:b9:69:a5:bf:c7:d9:
b1:dd:3d:f2:c9:6b:7a:97:b3:a8:e0:a2:8d:f7:80:
d0:4c:55:f0:a9:1c:23:2b:e0:23:65:0d:5c:b6:a9:
d0:79:d9:64:5f:ba:54:0d:4e:57:d1:c5:a5:cc:d4:
1e:f8:7a:8f:97:8f:36:30:bf:f4:9f:e7:0d:6c:34:
58:8c:3d:f7:fc:b1:94:c7:dc:27:1d:ab:1b:55:fa:
7b:4c:bd:2d:c2:d7:82:4f:a8:09:33:d3:26:90:16:
fa:c8:c1:4f:aa:12:dc:3c:48:16:83:34:b9:8b:f7:
41:c7:56:c8:c0:31:e0:cc:50:a4:66:ec:63:e1:b4:
5e:5c:6d:eb:52:aa:ad:96:c5:d2:1a:a7:aa:62:d5:
37:51:23:38:89:76:30:81:2c:69:bb:0f:dc:22:45:
dc:56:6a:e6:8a:1b:d4:46:13:72:dc:c5:09:6c:dc:
f6:2d:07:8d:27:85:84:8e:87:6a:62:de:df:d5:96:
1e:4a:1b:9a:24:7b:2b:38:28:7b:c6:f6:b8:d3:40:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:F8:A2:44:A3:8C:DA:CF:5F:CF:4D:0F:E3:5F:80:75:AD:14:14
X509v3 Authority Key Identifier:
keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4a:5b:a9:6e:52:53:66:37:0c:08:bb:94:57:3e:96:65:c5:
7d:97:c2:06:d8:8f:10:d0:98:c8:9c:f7:8f:74:b9:13:a8:cb:
ac:e4:ba:b0:a9:c6:09:eb:5f:d9:f0:62:73:d9:46:4b:50:33:
1c:70:b5:c4:3b:30:f0:3a:6a:f8:49:8d:8c:eb:9b:b2:7a:61:
5d:5d:e3:ee:69:05:fc:bd:db:34:61:73:58:82:1f:5d:95:0f:
d6:8e:46:06:dc:f2:55:68:8e:2c:c1:b8:78:55:6f:f9:35:75:
e7:f9:48:e5:77:15:89:d8:c8:48:a2:46:6b:7b:c5:b6:a9:ac:
fe:b6:35:3a:91:74:c8:cc:5e:9a:98:77:d8:87:b8:7a:63:5c:
f4:b9:79:33:10:80:15:09:17:c0:a0:d5:62:4c:e1:e7:28:58:
ee:de:42:c8:63:2f:ec:22:91:f1:b4:af:eb:19:7d:39:d2:2f:
75:b1:63:ad:c8:a3:f5:f9:c3:00:89:20:c5:e3:2e:8b:8d:42:
82:9c:21:53:bd:de:98:af:73:f1:6b:73:40:ba:88:97:10:72:
b1:8e:ff:8c:87:3e:08:2d:9c:7c:d0:b7:3e:fc:f6:65:d1:d4:
a9:e6:54:1a:e3:fb:6f:38:e8:d5:ec:b8:d4:85:00:55:4c:fa:
c0:90:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:29:10 2025 by rpki-client