Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: fFZrAgPZ0mHd8Z6zpwi41NPHbLk/03B6VyDAfDjtMw0=
Subject key identifier: 6B:A0:44:D0:72:85:61:E6:23:DE:E7:81:08:91:31:35:AB:09:38:01
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 019677FA98CE6E96F096075300073D6FA15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 111D
Signing time: Sun 27 Apr 2025 16:00:33 +0000
Manifest this update: Sun 27 Apr 2025 16:00:33 +0000
Manifest next update: Mon 28 Apr 2025 16:00:33 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: V2oJENVuxShWhqTDnghaqdTVGXJAhZVp2TLaffjG/UY=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:98:ce:6e:96:f0:96:07:53:00:07:3d:6f:a1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Apr 27 16:00:33 2025 GMT
Not After : Apr 28 16:00:33 2025 GMT
Subject: CN=6ba044d0728561e623dee78108913135ab093801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:15:e8:c8:fd:83:f2:54:e3:b8:e9:66:f3:
af:41:4d:35:90:ba:13:9a:2e:76:14:af:1d:fa:38:
6a:98:40:2a:80:6a:36:29:1a:12:ec:94:66:ce:5b:
7a:17:1c:af:62:d2:54:d9:ce:ef:e6:e6:8d:11:6e:
5e:9f:75:6f:b3:9a:a9:b9:41:b2:38:23:85:86:c9:
0f:37:64:98:67:75:01:14:a2:86:80:c1:12:3e:8f:
a9:be:b2:bf:13:63:94:9d:d1:c2:5f:77:38:eb:39:
08:d8:2a:c0:67:a9:76:0e:4d:a0:f3:40:b7:b3:99:
e1:8f:ec:ae:9b:d2:7d:26:6a:f1:1a:38:eb:3a:1b:
4e:f9:f6:62:82:cf:3e:f6:09:41:c6:98:eb:f9:aa:
c9:3c:53:1d:02:3a:de:ac:8f:79:66:34:90:0d:22:
d2:69:9f:bd:e9:24:66:16:8c:31:ab:af:5a:fd:bb:
d0:fa:51:87:5d:08:c4:9a:e9:eb:84:65:6a:05:58:
d6:3e:bb:b4:2a:af:37:40:36:5b:ff:67:85:aa:a1:
95:cf:4d:db:a8:c2:70:ce:1a:4d:78:c3:ce:b3:2c:
b1:67:f3:d9:0e:7d:94:d9:ae:ef:5f:a2:f8:6e:d6:
9c:ad:a6:1f:44:7c:90:69:94:06:6d:55:9d:20:0d:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A0:44:D0:72:85:61:E6:23:DE:E7:81:08:91:31:35:AB:09:38:01
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ce:64:72:08:11:3e:d1:0b:5c:e1:29:69:f4:fb:6a:9b:02:
6a:af:f2:59:d1:1a:fb:8a:bb:43:53:1b:40:fb:26:90:61:c3:
18:5a:b8:df:67:69:94:d1:6b:86:c5:e5:37:09:50:6b:65:69:
5b:90:5b:47:a2:b3:6d:c1:aa:cf:fb:82:55:77:af:c7:8c:01:
6b:c8:88:4f:20:75:ef:7c:00:ad:78:b7:9c:eb:11:ad:8c:4e:
3b:da:11:1a:24:f9:4d:4a:4d:33:ee:17:b8:cd:89:28:fe:02:
ed:1e:c7:d3:92:13:b9:21:94:f4:1f:8d:5d:ef:8c:cc:c4:ff:
e6:f3:ac:ef:e2:5b:28:45:ae:aa:e4:3e:75:ab:5e:fd:11:2f:
e0:3b:7b:43:29:0f:d5:be:57:37:62:f0:a4:99:3f:3c:a3:ab:
95:9f:74:1c:d9:7e:fe:6d:05:37:e1:ef:4b:76:6f:be:c2:5c:
f1:38:0b:06:d9:1e:77:b4:7f:a6:22:e3:28:39:c0:ca:11:5b:
42:a8:b7:ff:bb:dc:d9:ea:4c:c2:40:ea:43:e1:be:78:8d:63:
ff:b3:0f:f3:75:a3:73:10:a9:d4:e4:49:fa:b3:cc:e1:df:7d:
7a:02:64:5b:d5:3a:d3:33:cf:c6:e8:b1:97:66:bc:5e:46:11:
5b:7e:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:36 2025 by rpki-client