Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
File: W_fQ5HEirv77Ys6iFnSoECVVmxo.mft (raw, json)
Hash identifier: n4pSUr/ad+gR39RAq5IAAzkJ9waI9mhB5zT8LmqbMFA=
Subject key identifier: 1D:C2:2B:3F:A9:04:0E:64:44:60:D9:88:8B:6D:24:84:52:F0:0B:9A
Authority key identifier: 5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
Certificate issuer: /CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Certificate serial: 01967AC512209BECC9E38BF755D3B00A00D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
Manifest number: 04CD
Signing time: Mon 28 Apr 2025 05:00:57 +0000
Manifest this update: Mon 28 Apr 2025 05:00:57 +0000
Manifest next update: Tue 29 Apr 2025 05:00:57 +0000
Files and hashes: 1: W_fQ5HEirv77Ys6iFnSoECVVmxo.crl (hash: U0P7NL1Qs7Z8S9U4nWvJfaux8A1Pob/W9oFm/IK2psk=)
2: asNSq8lkmS1XdMPBwyGi7exxYUQ.roa (hash: IeZFlfU/tf7kNLd1ueG9wWhJ27KVNelvhJ00kXOKzso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:12:20:9b:ec:c9:e3:8b:f7:55:d3:b0:0a:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Validity
Not Before: Apr 28 05:00:57 2025 GMT
Not After : Apr 29 05:00:57 2025 GMT
Subject: CN=1dc22b3fa9040e644460d9888b6d248452f00b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:f4:7d:e3:37:39:a3:5f:0b:c6:9b:2b:2b:
64:39:7b:98:9b:bc:0e:5c:57:c3:44:ce:a0:85:89:
39:69:ea:fb:ab:33:f5:11:f0:70:d3:bc:88:59:7a:
e7:80:d6:db:1f:34:33:66:c1:09:05:1e:77:65:d2:
85:b3:8a:0c:3e:d5:62:21:38:aa:3a:f3:a3:7d:62:
d1:74:5f:df:f9:58:db:7a:9c:c7:fd:d1:3c:c9:ad:
5d:99:a0:5c:75:58:ef:1e:ab:b4:78:bf:d7:3c:21:
35:ee:92:e2:72:95:78:13:10:15:1f:5d:3a:ef:79:
a4:44:f8:18:b7:60:10:98:f2:e6:19:a4:cd:0e:77:
91:04:95:b9:b3:3b:a5:e7:d0:2d:78:af:18:06:41:
e7:5a:78:55:c2:63:96:03:7c:04:17:e7:f3:07:77:
d7:da:5e:58:b1:30:a1:8d:16:ab:6c:26:65:ba:d4:
01:cd:55:1b:fc:f4:0d:55:31:5c:ee:25:8b:bb:0e:
24:84:98:a7:ff:1b:56:36:25:46:f9:0e:4d:d7:5e:
0e:e6:eb:93:b2:e4:a3:5c:41:d0:43:40:94:61:cc:
3c:79:f4:b6:c3:8e:b0:07:4b:28:30:f5:72:af:68:
60:b2:bf:c0:3d:76:db:87:77:a3:e4:5d:82:2a:ce:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C2:2B:3F:A9:04:0E:64:44:60:D9:88:8B:6D:24:84:52:F0:0B:9A
X509v3 Authority Key Identifier:
keyid:5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:de:f9:bc:9c:c6:5c:b8:53:77:58:a0:bc:34:20:e9:6b:82:
1e:68:e8:e1:c2:7a:10:fb:a8:ad:35:b8:e2:36:7e:00:09:52:
be:bd:3b:f4:fa:06:c3:2d:19:bf:2d:49:a4:a8:75:ed:48:40:
c8:3f:ba:f7:a9:31:ad:85:4d:21:98:1b:ef:56:c8:96:dc:01:
fe:7a:79:9a:40:59:ea:dc:c1:46:1f:b4:8b:46:93:54:da:39:
98:f1:4a:65:3e:ae:33:5f:81:99:06:00:71:2e:aa:20:a0:52:
fe:f2:b1:11:dd:2d:4d:c9:22:c1:14:0d:49:5d:b2:b6:20:b9:
62:bb:f8:9f:e5:03:4b:32:24:77:fa:1f:0e:f2:47:57:ba:f7:
3f:be:3b:79:0c:69:a8:96:93:e8:37:ab:36:80:ac:fd:7f:ea:
9d:a9:e3:eb:5d:93:63:e5:ed:43:ce:3d:26:6a:4d:ee:3f:fc:
01:0b:40:00:af:19:c6:3a:2b:0a:27:27:2a:15:ef:4e:b7:da:
cd:9a:ad:eb:a2:7f:24:a5:b8:f2:9b:18:a3:5a:55:79:37:19:
f4:3d:7c:3b:dc:7f:38:c2:d4:e4:0b:c1:f5:66:c0:40:f8:94:
f0:5e:55:7e:df:4d:59:29:bc:9e:02:e6:1f:44:18:7d:e0:2c:
70:08:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:29:22 2025 by rpki-client