Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File: w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier: 6iJcygy5QK6uhfJRM5u7KJ8GZGJYthhPn86mOc3MblI=
Subject key identifier: 4A:16:89:42:C2:52:FA:ED:C7:AC:28:1A:44:37:EE:88:47:E0:60:F3
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 01967E3400C84F2218C4436DC4EE1191C57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number: 05D8
Signing time: Mon 28 Apr 2025 21:00:59 +0000
Manifest this update: Mon 28 Apr 2025 21:00:59 +0000
Manifest next update: Tue 29 Apr 2025 21:00:59 +0000
Files and hashes: 1: ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa (hash: tGIGMmrAiBAVPdoPhNgWbiaEcKncDLBEr0fehIJsIkA=)
2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: 95622lGzTH9g6zZyzRUallGzl/38VnJ2RB6t1K5jfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:00:c8:4f:22:18:c4:43:6d:c4:ee:11:91:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Apr 28 21:00:59 2025 GMT
Not After : Apr 29 21:00:59 2025 GMT
Subject: CN=4a168942c252faedc7ac281a4437ee8847e060f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:c0:65:e4:86:ed:54:dd:43:88:0b:64:f6:
b8:2d:d2:30:5d:3d:56:a1:19:99:33:f0:8e:40:2c:
cc:af:77:f1:0d:d5:6c:88:6c:5f:15:07:d7:0f:44:
76:58:e6:05:5d:02:1b:59:21:68:6e:71:f6:34:11:
47:2b:f9:52:91:d1:86:be:fc:df:2f:b3:eb:a4:60:
1c:30:93:b8:7c:45:ce:85:28:34:1e:56:38:e2:94:
cd:6d:fd:67:c1:8c:3c:4b:51:5f:65:ae:e7:b8:0a:
ce:a1:c7:06:3e:14:6a:41:96:0e:0b:e2:1d:58:49:
a3:28:d0:21:f5:15:37:28:d0:f1:2c:c2:fe:7f:0f:
2e:0a:bf:e3:f2:8d:3a:74:1d:69:8b:12:41:e2:27:
b7:9f:e7:a2:0a:20:d0:74:2b:54:ce:ff:f7:72:6c:
d2:87:28:2c:b4:38:7c:3d:82:be:ee:a7:c0:b3:b3:
b4:c7:ac:7c:a2:3e:e3:75:15:ec:fc:a4:03:10:1e:
bf:1f:a7:e7:31:3f:4e:a3:36:1e:8f:e5:6e:02:39:
ab:c6:37:73:e5:f6:10:14:67:43:a1:c9:96:56:c3:
0d:ef:19:e1:98:23:7f:a4:0e:82:65:e7:9f:db:0b:
9e:1f:39:00:a5:ec:61:a9:70:c0:46:38:a8:20:36:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:89:42:C2:52:FA:ED:C7:AC:28:1A:44:37:EE:88:47:E0:60:F3
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c8:48:91:4a:5b:3a:1c:65:0e:5b:af:54:eb:d5:42:19:03:
e6:b2:6d:cb:35:d8:b7:12:45:bf:ca:88:84:0a:55:4b:0b:ff:
c6:db:ea:1a:e1:66:08:3a:21:9c:0b:eb:b3:57:9b:d3:3f:ab:
4c:7c:bb:7f:08:f3:15:fa:72:cd:6a:45:e8:f0:45:b5:25:88:
9c:dc:b0:09:9a:6e:85:71:05:96:fe:82:c5:26:60:fe:f3:ed:
d7:ee:f5:6b:7b:e8:1b:1c:01:d8:bd:8d:db:70:bc:59:0e:20:
33:8f:27:c0:17:4b:0e:45:e6:0a:24:fb:fe:98:a0:90:da:bf:
55:f2:25:78:ff:f8:6d:5f:6a:1c:3a:73:ef:c0:3f:8c:c3:66:
e6:e9:48:68:f7:a6:18:ee:d0:fc:36:7d:54:6b:52:12:0b:4f:
a9:6b:83:8f:94:dd:90:fa:96:0a:22:84:ab:e2:12:f0:80:fd:
b7:2a:38:ba:00:dd:8a:84:4a:96:20:01:f3:21:8f:d7:f3:52:
2b:b3:0b:d2:04:a5:69:be:b7:7a:8e:db:b0:03:75:42:50:9e:
84:2f:cc:0a:58:9c:6d:e9:11:39:6a:e6:68:70:03:f5:82:e6:
e8:d0:f3:c9:59:40:c5:ee:57:89:d2:f5:d6:4c:46:07:e3:f6:
f9:30:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:44 2025 by rpki-client