Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier: ji0HNzmQEQrrSzXtUVyzu7MIlXM8a4ClhCqdrtyhtkE=
Subject key identifier: 0B:C3:D0:5B:5D:DA:FB:7A:29:B8:BF:AB:DC:2B:3F:99:BA:F1:84:9E
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 019681D9ACD91C699FE076A6B2BA8DA1FEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number: 0AC5
Signing time: Tue 29 Apr 2025 14:00:48 +0000
Manifest this update: Tue 29 Apr 2025 14:00:48 +0000
Manifest next update: Wed 30 Apr 2025 14:00:48 +0000
Files and hashes: 1: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: u+EiUcYzmY6UWTslw5jr0Z1gZGuljJNxEuGlt/BUg9s=)
2: WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa (hash: 9FkYuv3N9sKiJBFCLi9r1CgkkKmg2nuXBs/YrWrih48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:ac:d9:1c:69:9f:e0:76:a6:b2:ba:8d:a1:fe:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Apr 29 14:00:48 2025 GMT
Not After : Apr 30 14:00:48 2025 GMT
Subject: CN=0bc3d05b5ddafb7a29b8bfabdc2b3f99baf1849e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:6d:e4:ef:f1:d1:fd:28:5a:ed:2c:42:03:
d0:12:3c:26:1a:53:a7:64:81:e8:0b:4d:75:a7:05:
67:2e:14:f0:75:81:9b:43:8a:b7:b6:7f:e5:9a:2c:
ca:ba:59:25:80:50:5b:ec:4d:3e:e7:46:c2:cb:db:
1c:df:eb:65:53:8b:f6:3f:b0:08:7c:54:e3:7b:2e:
7c:bb:7c:30:7d:6e:a9:31:d2:19:03:76:dd:c9:d0:
4d:1c:b1:a5:f5:a1:cf:d7:06:bb:bd:a0:d6:94:c2:
19:45:b6:95:9a:69:11:49:ab:f2:72:c8:f7:86:22:
aa:c4:f2:b4:a8:21:df:fd:7a:3f:06:e5:d8:d4:84:
38:80:94:75:c6:25:82:28:43:c0:b9:d7:7f:d1:60:
cc:bb:e5:9d:f3:dc:48:3c:3f:4e:09:25:42:25:56:
be:eb:53:d3:94:fd:26:a7:ff:21:03:39:4a:d5:fe:
ee:5f:eb:b2:13:6a:40:98:49:5d:72:af:9d:b0:30:
c7:4f:0d:45:4c:2b:e7:50:0e:ce:6f:ff:68:6c:05:
78:36:71:a7:9a:72:25:c7:ca:90:97:0b:5e:3d:c6:
69:09:88:cb:43:f7:49:87:93:f0:9a:b2:b2:1f:10:
9f:02:12:39:f0:e1:cf:d7:ad:99:b2:7c:66:8d:c9:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:D0:5B:5D:DA:FB:7A:29:B8:BF:AB:DC:2B:3F:99:BA:F1:84:9E
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:a4:f4:03:38:a9:12:2f:92:96:3f:68:ce:e1:07:bb:df:
f3:8b:79:86:f6:b7:c6:36:01:0c:e3:68:b5:37:b1:36:26:85:
00:eb:c4:55:fd:f1:3d:dd:c9:a8:1d:de:1a:e9:38:17:1f:e5:
c9:5e:2a:46:10:dc:d9:17:00:09:98:e2:70:18:32:6b:6c:32:
e3:c6:ef:97:48:eb:22:d9:84:08:33:1f:14:e4:c3:ed:79:95:
e9:c7:87:d7:3d:40:95:ae:96:60:ab:d0:42:6e:a7:2f:f9:c9:
59:3b:1c:d3:6a:71:b0:83:a6:bd:5d:bd:13:58:ac:a7:25:32:
e6:10:a7:f3:51:5a:38:47:56:98:1a:ff:aa:93:4b:a7:dc:ad:
8d:a1:c1:00:ea:09:b4:0d:5b:38:66:02:63:97:d2:ff:53:45:
8e:2a:b4:1e:f0:3b:89:54:04:8b:cf:5b:79:e0:bc:ff:03:5b:
62:4e:14:2d:a6:21:f9:35:3f:7d:48:c2:3a:d4:ef:3c:b4:18:
8e:c8:7c:58:5c:bb:5a:9f:3e:c9:1e:b5:b5:9e:7f:48:b8:45:
bd:85:0e:a0:06:97:da:4a:b9:39:b5:b7:97:0d:c0:e7:ac:7b:
e7:2b:dc:a8:c4:30:bf:1a:2b:f3:50:56:3e:57:5f:a6:4c:4d:
c0:37:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:48:40 2025 by rpki-client