Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: miGgVBM7xgGNo7qqyFOqA82yIOnpuuzFKbSVGZozOyU=
Subject key identifier: 09:DA:42:2B:F7:A3:7B:15:19:33:5C:54:3F:CB:A7:60:9E:23:BF:12
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 01969115B412C23D1D7A66EDEE0EF194A691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 151C
Signing time: Fri 02 May 2025 13:00:40 +0000
Manifest this update: Fri 02 May 2025 13:00:40 +0000
Manifest next update: Sat 03 May 2025 13:00:40 +0000
Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: OJdOYEglbyYtSsM2+WO0jggYzbbxueL3TdY2NTrhUeY=)
3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:b4:12:c2:3d:1d:7a:66:ed:ee:0e:f1:94:a6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: May 2 13:00:40 2025 GMT
Not After : May 3 13:00:40 2025 GMT
Subject: CN=09da422bf7a37b1519335c543fcba7609e23bf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:d0:bb:60:cb:9e:80:8f:86:eb:62:61:c8:
2e:d4:7c:d6:07:22:36:4d:fc:cc:63:c5:49:aa:bf:
ea:bd:42:e7:b2:2d:bb:bd:c5:cf:3d:db:7d:ba:ae:
bb:08:e0:77:a4:27:ce:1a:b1:71:f9:b3:6b:f8:1e:
d2:7b:8c:3b:2e:b4:a4:71:2b:2c:da:3d:52:0b:de:
e3:cd:39:26:0c:9d:45:68:9e:c6:17:f5:f5:91:08:
71:95:cd:8e:ed:54:cc:79:82:e8:1b:36:5d:f7:f3:
86:cc:19:84:66:63:df:97:bc:36:c7:8f:d1:a9:3f:
6e:01:43:f5:f0:46:fc:f2:1e:d9:6e:b3:43:db:41:
ea:07:26:4e:bb:2c:e2:c1:e1:22:2c:3a:b9:5a:b9:
91:ae:49:bb:5c:86:c2:23:04:20:6b:5c:f1:da:05:
b1:ff:6b:1c:11:ef:99:d8:a6:48:36:f2:1b:40:e5:
ab:f0:47:54:64:9d:fc:a6:da:85:de:4d:1c:24:cc:
78:0a:8e:e4:c4:a8:ab:f1:76:78:d2:d7:71:83:34:
13:73:b8:b6:74:55:25:e3:a0:a8:af:a6:b8:4f:33:
64:09:06:36:f9:a0:af:c2:5c:e1:c3:db:b9:b0:a3:
95:1d:5e:97:5e:d6:4d:12:8c:0c:74:b7:5f:4d:55:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:42:2B:F7:A3:7B:15:19:33:5C:54:3F:CB:A7:60:9E:23:BF:12
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:ac:e4:2e:f3:0d:a4:7d:cf:cf:38:b9:e4:12:ca:18:fc:
e4:13:46:72:5d:99:a7:19:08:01:32:f5:d5:f2:eb:b7:35:26:
c5:14:79:b8:34:27:3a:1a:13:7d:06:f0:f0:cc:94:9d:96:7d:
db:f3:2e:4d:41:4d:4f:9f:57:e0:26:0e:9c:a5:33:50:82:01:
a7:9b:a1:40:25:3f:c6:80:7c:68:86:40:dd:b0:e3:4d:59:c5:
94:b4:40:3b:c9:f1:2b:26:d3:b4:62:f5:c8:05:a1:4b:ca:5f:
8a:43:af:a5:64:fd:db:ec:29:d7:74:22:86:cb:fa:aa:c4:86:
2d:0b:d1:a9:37:64:b9:e1:a0:ff:e0:26:63:3e:4a:ad:a0:1e:
8b:f1:ad:13:63:a9:65:93:f4:c1:9c:ac:c2:4f:22:0c:b5:ba:
b2:7f:05:05:4c:3f:d8:55:f1:5f:fe:f5:91:3d:eb:3d:97:6c:
d6:d1:a8:5b:73:0b:93:4e:cf:26:44:08:5e:ec:09:08:a3:32:
9a:e3:6d:61:e2:47:0c:c6:82:91:7a:42:f8:dc:14:77:f2:e6:
30:d2:3f:82:18:53:6c:88:2c:14:53:61:23:56:12:76:1c:0f:
c1:ac:79:d8:51:b7:d0:2a:1a:9d:88:07:9a:e6:f6:4f:72:d0:
41:60:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:59:07 2025 by rpki-client