Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File: W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier: zDxUkEUMxTFiVT8roKbXb/0BPf8TN1wDMnUJTrBvJvc=
Subject key identifier: 01:38:BC:90:70:8F:71:45:8C:73:AC:FB:B7:B9:C0:14:40:11:37:6C
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial: 0196BF6F791332486E7DA98F5AB6FB3B6414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number: 1380
Signing time: Sun 11 May 2025 13:01:15 +0000
Manifest this update: Sun 11 May 2025 13:01:15 +0000
Manifest next update: Mon 12 May 2025 13:01:15 +0000
Files and hashes: 1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: wsYIk+GYoQNwjhmYGMOeu1xVTw/o0VpFKdpfYjaMHbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:79:13:32:48:6e:7d:a9:8f:5a:b6:fb:3b:64:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Validity
Not Before: May 11 13:01:15 2025 GMT
Not After : May 12 13:01:15 2025 GMT
Subject: CN=0138bc90708f71458c73acfbb7b9c0144011376c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:3a:0b:ad:a3:d2:3a:74:d2:c2:35:0b:69:
3b:bb:f6:ce:cc:ce:49:11:3f:c4:fe:ad:09:96:8f:
dd:61:bb:63:98:d4:e4:7b:ee:62:72:d9:16:de:65:
85:bc:e0:bc:b1:13:d5:2a:4e:90:96:70:c8:3e:fa:
1a:1f:08:04:e0:f6:e9:ba:6d:38:1a:2c:1f:b8:58:
e5:62:94:fb:7a:da:3f:a4:c1:36:93:dd:6a:f0:d3:
32:7f:01:4f:7a:5b:17:c2:d4:e7:9f:32:d6:53:9c:
64:b9:a2:ac:e5:eb:45:5a:10:af:5f:1e:6b:4c:85:
e0:e0:15:5b:53:71:81:06:ef:18:3d:65:b6:be:c8:
29:b4:f9:29:6b:02:15:0b:4b:bf:c7:45:ad:ba:09:
3a:9e:3e:40:22:7c:8b:d8:16:34:ba:86:21:2e:97:
80:26:d8:ec:0d:15:18:05:cc:68:b8:81:36:5f:8a:
f5:c7:34:06:5d:19:f0:f1:5b:dc:1b:42:fc:9a:da:
76:d9:03:6c:79:17:ee:39:7a:bd:78:39:15:e9:b3:
37:5e:77:c8:5e:f3:bd:a9:0f:46:9b:eb:3b:91:0c:
17:ae:a3:9a:fd:d4:d2:cb:09:82:18:ba:50:76:90:
6e:94:9c:c8:95:cf:a9:8a:47:7f:52:58:90:ef:63:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:38:BC:90:70:8F:71:45:8C:73:AC:FB:B7:B9:C0:14:40:11:37:6C
X509v3 Authority Key Identifier:
keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:42:91:9a:87:85:54:72:20:44:b9:c1:f3:6b:c6:cd:58:89:
d9:e1:8c:6c:88:da:f7:12:8f:49:ad:9a:99:b0:d8:92:01:65:
0a:18:80:75:5f:25:8c:a5:80:63:a4:e7:7e:9d:3f:18:98:d0:
fd:fe:b9:9b:cc:9a:7d:63:52:a2:9f:11:ee:d5:13:98:8e:05:
24:1f:5e:94:9e:fd:37:49:66:4d:08:36:24:50:67:21:b8:27:
e7:2c:07:6d:9f:85:1c:2c:6d:6f:39:8b:b3:d2:48:93:b8:21:
41:ee:d2:91:d7:7d:70:3e:80:91:ae:49:d1:a6:ed:9d:28:bd:
a8:e6:cc:42:9a:5f:30:63:49:c7:f7:fe:5f:38:79:4d:65:8f:
50:29:99:c0:fe:85:99:39:68:76:c2:66:61:86:66:7e:71:88:
62:82:8c:f5:97:09:79:6d:cd:f3:ec:28:98:b8:c7:69:0d:aa:
23:f9:de:82:f1:f4:50:14:fa:57:50:c9:c7:b7:aa:cf:16:df:
91:33:b5:cc:8e:9e:91:0d:f0:72:09:ee:52:10:25:48:8a:89:
2b:cc:a3:2e:40:3c:a7:3f:12:22:75:7b:75:65:41:56:97:bb:
0f:8c:88:b1:4a:6a:9c:b2:05:78:b9:79:4e:cc:38:be:03:40:
c2:48:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:57:25 2025 by rpki-client