Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: /qVATc0qwUPHzckoOgFJ7sIL0kLWspIapeQS5WyQeao=
Subject key identifier: 66:3A:AC:6E:51:66:20:3D:F6:7D:AC:02:21:00:2C:F2:4F:27:E7:B2
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019674F9D591F11A52E76F451768E9236FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: 7B
Signing time: Sun 27 Apr 2025 02:00:52 +0000
Manifest this update: Sun 27 Apr 2025 02:00:52 +0000
Manifest next update: Mon 28 Apr 2025 02:00:52 +0000
Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=)
2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: Mot8uyq9ozDbN5FBDSq8u/Ml+v9SuuHR9vNGONICIY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:d5:91:f1:1a:52:e7:6f:45:17:68:e9:23:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Apr 27 02:00:52 2025 GMT
Not After : Apr 28 02:00:52 2025 GMT
Subject: CN=663aac6e5166203df67dac0221002cf24f27e7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:f7:ef:c1:06:b3:ad:0b:d7:0d:db:bd:78:
85:ba:83:34:14:62:b4:98:8a:ec:d6:45:ac:01:5b:
fa:0d:ca:e2:49:d6:34:52:86:f0:13:6c:57:f2:dd:
f9:ff:98:ea:2f:cf:11:03:ce:25:c8:e1:c3:b3:d2:
1e:99:18:aa:95:67:ce:f8:76:2e:d9:fb:9e:42:95:
7d:39:25:19:12:ae:38:d0:c0:b4:0a:65:16:d9:67:
46:89:3e:5b:43:11:3d:81:da:77:90:f1:57:5d:b5:
ab:08:0b:7c:4b:67:4c:1b:66:d0:d2:69:bb:d3:d0:
8e:f1:f6:52:0a:cc:9a:fd:e2:bf:7f:a8:fd:d8:a6:
5d:ab:6e:29:29:30:5a:d2:33:be:0d:9e:1b:2c:a6:
e1:8e:22:74:6b:bc:02:f2:49:a4:bc:12:75:2a:17:
55:b9:58:07:fb:2f:91:70:80:9c:25:67:33:db:b9:
b5:8f:35:05:85:a4:e3:79:b3:52:7c:63:77:c5:62:
48:e0:c7:01:70:61:99:09:06:3b:d7:16:bb:bb:a9:
a4:30:a0:43:e7:01:71:6a:98:c7:1f:12:07:88:26:
a3:01:af:02:77:dd:78:67:82:9c:6b:d9:9f:04:6f:
34:c0:57:f8:94:78:fe:60:d3:38:9a:01:14:cb:88:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:AC:6E:51:66:20:3D:F6:7D:AC:02:21:00:2C:F2:4F:27:E7:B2
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:59:a5:67:2b:c7:90:98:2f:25:ec:7c:80:68:53:8d:03:62:
33:c8:a2:fd:78:d6:c8:a8:62:de:f3:84:fa:b4:62:9f:65:a6:
62:c8:6d:e0:22:f1:24:2b:82:4a:62:21:dc:76:4e:60:06:f3:
01:a0:95:a0:fa:eb:bf:c9:8a:52:ae:be:83:24:76:f1:b3:12:
f1:92:56:93:bc:b7:c7:2d:23:8a:5a:b1:d7:07:ed:ca:08:9c:
6b:2b:95:5e:b6:62:df:85:78:7c:e4:14:a6:0b:8b:4c:0e:77:
71:42:1f:90:e7:63:36:8f:26:37:d0:fb:c4:de:97:5d:bf:4c:
82:b3:58:94:f8:cd:b9:69:f5:8c:66:71:f0:ad:f0:1c:a5:5b:
87:64:49:01:40:1d:ad:34:24:6b:c3:9d:e7:9b:d2:84:84:a9:
6d:e7:58:5d:9c:89:f6:6a:40:39:21:7b:6c:cb:da:82:0a:ff:
63:db:b1:3e:c4:0d:ee:8c:d3:d3:e9:93:86:00:a0:ae:8b:62:
2e:45:b5:86:9f:c5:23:15:65:63:a8:b5:06:72:87:f3:c7:31:
e2:52:f2:3b:66:45:50:ca:11:57:34:05:b8:10:8a:1e:33:6d:
46:18:26:8d:71:ab:f4:04:56:0d:52:17:30:57:7a:08:c3:e8:
4d:ef:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:13 2025 by rpki-client