Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: m6dSVJTz3Xt6i4G0Ny21FDe08+8NkViJ7f1+J4rO+uU=
Subject key identifier: 1B:F2:5D:0F:E1:B5:98:1E:3C:E1:40:3C:F6:A7:F9:5F:01:07:77:A5
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 0196748C3170E2E18F65037B3BB6B7B69FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 00:01:06 +0000
Manifest this update: Sun 27 Apr 2025 00:01:06 +0000
Manifest next update: Mon 28 Apr 2025 00:01:06 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: FihsO3FjA/MclR2FS0UN2ocCK3WtV40fXcG+hLySF44=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:31:70:e2:e1:8f:65:03:7b:3b:b6:b7:b6:9f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Apr 27 00:01:06 2025 GMT
Not After : Apr 28 00:01:06 2025 GMT
Subject: CN=1bf25d0fe1b5981e3ce1403cf6a7f95f010777a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:16:44:af:b4:4d:99:52:c2:dd:b2:8c:b5:
04:0f:19:ca:3d:16:76:13:e0:fe:53:05:ff:5d:1f:
92:e7:38:bd:bd:cb:05:2b:75:86:1f:25:60:0f:eb:
07:52:9f:3e:db:47:16:88:27:f3:4f:cb:e1:de:58:
58:5c:8a:ff:a1:3d:38:97:29:c0:05:1b:36:e7:65:
85:ea:99:5a:20:d9:1a:ca:b8:65:81:c6:38:70:f9:
c7:5b:31:6d:2f:9d:d0:41:92:a4:6e:5f:e1:03:8f:
9b:f7:1a:4c:eb:53:ac:24:36:e0:8e:31:5c:5b:c9:
00:61:e2:7d:65:e2:6e:f5:81:b1:16:d7:a4:9b:a1:
e0:d1:50:ca:a4:40:96:14:a7:50:59:1a:a2:c2:e8:
0d:4f:b1:d8:40:97:fc:e2:8b:14:f9:71:ac:1e:6b:
65:18:78:4e:b6:04:61:30:c2:bf:32:57:c5:44:1a:
a6:ac:9c:3f:3f:96:49:66:7e:ee:1a:ea:fc:d4:81:
e1:24:49:c1:59:7c:f2:fa:2e:9c:c8:33:e3:55:2e:
ce:10:1f:5a:4d:fa:81:85:1c:bf:a0:6f:ce:72:06:
93:ae:d2:35:e4:80:56:b1:08:6b:52:34:43:f5:a2:
54:b3:97:05:cb:ae:a0:be:02:33:6d:87:9d:07:a5:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:5D:0F:E1:B5:98:1E:3C:E1:40:3C:F6:A7:F9:5F:01:07:77:A5
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:6b:83:fa:14:72:39:ad:66:ad:de:1f:f3:88:b0:25:4e:
36:43:79:d7:6c:84:94:f7:c0:9d:c8:9e:f5:cd:f4:74:72:24:
03:d3:bb:57:d0:4b:f9:02:bf:20:56:0a:42:7d:bb:cf:cf:05:
07:06:2c:da:52:9b:9e:be:a2:2c:f5:6b:03:60:70:71:04:d7:
ad:8b:94:06:81:a9:78:bb:42:fe:93:ff:3f:20:1a:75:90:88:
7d:f3:e9:ef:f1:2e:80:90:5c:6a:2e:e4:a2:aa:9a:ed:41:c4:
c5:a6:88:d0:d2:7e:be:fe:f0:e5:1e:5e:c2:6d:9d:87:29:92:
e2:a0:83:00:9a:a3:be:7f:1c:8d:dc:36:fb:c1:a6:9a:82:34:
02:fe:80:b3:77:f3:c5:07:74:0f:af:32:8d:da:95:b5:26:80:
07:81:55:42:f2:fb:44:82:db:06:c8:f0:aa:24:07:2a:ae:8b:
ac:d2:fd:0d:44:be:2a:cc:6d:85:2d:db:68:e7:3b:a2:90:81:
04:68:fe:77:1a:a3:ef:26:f3:ae:66:93:3e:c8:3b:b2:e4:30:
da:85:ac:0b:c2:cc:81:4f:8e:8b:aa:c7:86:49:d7:c5:68:85:
fd:05:9a:f1:1b:7e:a0:cf:84:58:29:f8:50:15:37:d3:65:d8:
af:eb:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:43 2025 by rpki-client