Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: A4ir5LozJq41I/3D1RCXG+oKGesMqVcFM5kh+WA8XoM=
Subject key identifier: EC:22:51:3C:2C:C6:21:E9:BE:2D:58:E9:74:40:E9:6C:A1:47:7B:12
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 019675D55018A0F23AD8DD599A1F4F4DC1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 14A0
Signing time: Sun 27 Apr 2025 06:00:36 +0000
Manifest this update: Sun 27 Apr 2025 06:00:36 +0000
Manifest next update: Mon 28 Apr 2025 06:00:36 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: 2ynxpJ0Z/yQC9OWvpqUmsGg6oK78gJloqsUFZmkMGd4=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:50:18:a0:f2:3a:d8:dd:59:9a:1f:4f:4d:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Apr 27 06:00:36 2025 GMT
Not After : Apr 28 06:00:36 2025 GMT
Subject: CN=ec22513c2cc621e9be2d58e97440e96ca1477b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:24:26:9a:23:0e:2e:6b:73:56:0b:5d:93:
e2:fe:7b:6b:72:74:30:14:36:68:49:0f:ec:37:89:
a1:9b:eb:c6:88:79:fc:59:7f:e2:59:63:c0:eb:33:
a2:4c:24:89:b5:80:89:86:76:8c:77:f6:88:7c:9c:
79:fa:24:3e:32:d3:9c:91:12:cf:24:e1:34:ce:d8:
e4:ff:c9:e8:a6:5f:65:27:73:26:8b:a0:95:e2:ad:
b1:fc:f4:82:db:6b:24:60:75:ef:e1:ae:f3:90:e2:
6a:73:e5:10:41:24:23:50:a3:5b:3d:68:77:de:2c:
d3:51:d9:fc:ca:f2:27:b5:fe:26:eb:51:dd:f3:c5:
a3:2c:a2:c4:2e:f7:75:4a:05:d4:d4:64:c1:0d:e5:
5a:ba:01:66:d4:80:1d:98:2c:b8:79:ac:cd:06:b9:
bf:71:84:f1:65:a8:f4:65:cb:4a:4b:b6:b3:ed:e0:
31:85:2f:3f:19:03:d3:92:f6:bd:0f:31:18:64:03:
16:70:c1:17:3d:0d:62:50:c6:0d:17:7e:13:b7:44:
94:3c:a8:0c:bb:24:d5:17:cd:f8:8e:12:14:75:ed:
6f:b2:c8:a6:c6:ff:ed:51:b3:41:db:41:69:50:1b:
27:60:d7:74:9a:36:81:9b:23:48:ed:f1:2e:26:06:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:51:3C:2C:C6:21:E9:BE:2D:58:E9:74:40:E9:6C:A1:47:7B:12
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6d:f5:65:85:b7:f1:49:53:9a:f5:01:cb:63:cf:54:46:fc:
b1:2d:41:31:10:a7:4b:f6:22:a4:41:6c:04:8a:96:86:3c:36:
a2:68:cd:c7:b4:d2:65:34:fa:7e:b8:3f:f1:be:c0:75:0d:44:
2f:6e:41:5b:63:59:e9:77:be:79:5a:84:b6:b8:10:1d:58:8d:
c2:eb:8f:0d:f5:a2:0b:ee:50:99:ac:b5:e7:3f:a1:7b:b1:2a:
a2:36:a0:21:f8:b9:46:95:cf:be:f1:30:79:a0:14:58:b9:80:
6a:1c:4d:dc:29:92:b0:15:1b:d8:10:0d:23:7d:c4:b9:13:16:
65:b9:a0:d2:30:c9:13:f3:6d:8b:13:04:63:8e:61:95:16:43:
c4:48:29:2c:93:c4:c8:d9:3b:59:8d:b3:cf:ed:e7:98:04:65:
1a:03:7a:6c:ae:f9:12:30:4e:77:e5:bf:cd:fd:e3:b1:0d:60:
21:a9:a3:60:b5:4a:4d:5a:d5:63:c4:c2:84:6e:69:b0:e8:0b:
79:25:6c:09:a1:ad:d3:ab:9f:6b:39:9a:59:08:ce:17:f5:dc:
3e:b4:90:0f:d1:52:16:42:a2:28:a3:fc:78:94:38:dc:4f:cc:
66:62:04:fd:69:3a:02:2d:26:80:75:20:13:9e:c7:40:26:6b:
3e:36:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:21 2025 by rpki-client