Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
File: W-rKvp_cy7VH7V6plEr9ed3zUZc.mft (raw, json)
Hash identifier: kRUFOxpCCjLLHlcGLPNAw3jWKD+hrnBA5NHMAF+Gmkc=
Subject key identifier: 9C:36:7B:18:F9:EF:04:0F:97:C5:45:99:F1:53:53:3C:60:54:04:F3
Authority key identifier: 5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
Certificate issuer: /CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Certificate serial: 019679440E671A419938A537EA0E5DD91572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
Manifest number: 08D4
Signing time: Sun 27 Apr 2025 22:00:25 +0000
Manifest this update: Sun 27 Apr 2025 22:00:25 +0000
Manifest next update: Mon 28 Apr 2025 22:00:25 +0000
Files and hashes: 1: Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa (hash: DyvJm1MsNLqanW4GtBFAMBVCCMC4YL7VCe+zTPcnzYg=)
2: W-rKvp_cy7VH7V6plEr9ed3zUZc.crl (hash: ZTmiwWp8nywctOgJzqLjkZFlrkrUgD/5/vxbs4F857s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:0e:67:1a:41:99:38:a5:37:ea:0e:5d:d9:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Validity
Not Before: Apr 27 22:00:25 2025 GMT
Not After : Apr 28 22:00:25 2025 GMT
Subject: CN=9c367b18f9ef040f97c54599f153533c605404f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:9a:14:86:6b:75:ab:50:39:65:24:8a:09:
e2:02:60:35:d3:a9:4d:9f:a7:c3:8f:1a:db:bb:3d:
4a:b5:ea:5b:ce:73:05:d1:c6:0c:9a:e7:2d:5d:03:
cb:45:50:bd:8c:d8:e2:e6:2d:d3:29:d1:7d:c9:4e:
58:b4:10:65:82:66:41:9e:f8:bd:10:a5:ab:dd:08:
c1:a0:dc:6d:2e:03:f7:67:21:2a:e1:dd:18:3b:25:
b9:68:b3:6d:00:b9:0a:b9:30:46:ae:68:f6:33:b5:
bf:26:95:33:c0:07:6c:59:27:66:44:46:06:eb:39:
b8:6a:1b:0d:f9:90:61:2a:7f:c9:92:31:bb:68:ac:
fa:ae:c5:88:11:ab:61:cb:0b:66:56:81:ff:85:9a:
b4:6b:60:b3:fe:95:c0:78:8d:ee:fa:d1:72:72:9d:
35:c1:21:31:86:17:9b:4d:7b:b7:e1:06:c0:12:a6:
d5:59:ff:2d:0e:35:95:70:00:fa:39:a9:50:5f:18:
99:d7:64:68:55:26:f1:5a:2c:32:37:5e:03:ee:84:
40:bd:ff:55:55:92:49:14:cb:01:54:3c:3c:d4:84:
b7:93:45:4c:d3:5e:aa:ea:37:d7:81:af:f2:9d:5b:
3d:b5:66:ab:0f:4d:44:c8:80:ed:3b:46:72:82:ff:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:7B:18:F9:EF:04:0F:97:C5:45:99:F1:53:53:3C:60:54:04:F3
X509v3 Authority Key Identifier:
keyid:5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:0f:da:6a:b1:fb:7f:d9:ea:53:82:59:41:7a:69:d0:87:
fd:ec:dc:59:e3:c9:d2:c9:f2:1e:69:b4:52:8e:9e:c0:a3:6e:
1c:7e:4d:cc:7f:68:b3:fd:29:30:a8:1d:8b:5f:7c:9a:83:b7:
72:89:66:8a:7f:4e:67:c4:d6:36:64:d0:64:46:99:60:20:5b:
37:60:2b:e3:41:df:f5:56:d9:29:8a:3b:4d:00:f5:da:8b:ac:
d9:d1:61:46:85:7a:9b:95:24:1e:4d:03:f1:b8:97:fe:0f:63:
99:ea:f1:3c:a9:ca:47:96:c1:96:4b:81:6b:47:8b:05:54:8d:
e1:4b:c4:2f:43:5d:02:18:67:44:9a:95:90:59:5b:90:da:61:
a8:90:00:c7:a4:c6:3c:6d:9f:1d:d2:a0:51:aa:fa:b1:c3:65:
4b:50:e3:f0:61:9d:66:c1:80:dd:25:40:93:65:07:c5:1c:04:
d5:53:81:20:57:a7:03:8b:54:4d:01:15:f2:65:1f:aa:4f:de:
9c:57:c4:ee:64:7f:15:05:d8:37:e3:de:b4:ce:01:c8:06:84:
73:25:cf:0a:44:e3:cb:ce:c7:14:62:9f:fc:e8:2a:7d:dc:7d:
c6:0f:2f:c5:7a:a3:6a:85:e2:eb:26:1f:f2:b5:bb:72:37:14:
84:97:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:57:58 2025 by rpki-client