Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: cTttbP+35IJhujtdo9uflQdGfucV8ywEX5FW6WrbUwQ=
Subject key identifier: E7:2E:AF:02:C0:D1:8E:0A:E7:54:FC:74:42:9E:04:C3:BD:C1:D8:55
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 0196CC4F1CC186BA5D24E56B21ECBFA3A00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 01:00:58 +0000
Manifest this update: Wed 14 May 2025 01:00:58 +0000
Manifest next update: Thu 15 May 2025 01:00:58 +0000
Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: FRRIixI5X7Va0YFq0IAoBsDKY4xaFhcp6bgpRTGAZcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4f:1c:c1:86:ba:5d:24:e5:6b:21:ec:bf:a3:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: May 14 01:00:58 2025 GMT
Not After : May 15 01:00:58 2025 GMT
Subject: CN=e72eaf02c0d18e0ae754fc74429e04c3bdc1d855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:f8:8c:de:90:c4:f2:53:0d:40:e6:68:07:
71:3d:7d:96:bf:56:0a:1d:82:10:c3:e2:69:95:5f:
ee:ab:db:3d:4a:f4:2d:93:22:f3:85:b8:8d:02:5c:
69:83:a0:59:78:c8:af:5e:7d:95:a8:08:f8:8a:40:
1d:ce:3c:3f:29:9a:ac:11:8c:cf:5f:9c:fb:12:c6:
81:65:c1:63:97:76:3e:94:69:9d:88:4b:7d:cf:b1:
93:66:69:b1:8e:5e:db:34:b9:0c:fd:69:d8:d7:2f:
42:a0:38:45:87:14:a1:84:ab:f6:89:d9:fe:e0:64:
32:15:73:10:67:09:20:73:81:ac:c9:a3:7f:6e:f4:
90:0c:0b:01:c8:ad:ee:c5:2e:3f:fe:7e:fb:e5:b7:
50:ae:f8:51:5c:6c:d5:c9:3f:c7:69:2a:c5:2d:2b:
9c:d9:56:a0:42:1f:11:44:41:22:85:c8:fa:af:d7:
4a:75:8e:bf:9a:c2:6c:4b:de:db:3a:c8:97:5c:ac:
b0:74:18:e9:d8:13:9e:a2:f0:6d:12:b4:bf:14:c7:
50:19:35:ae:64:4d:be:1e:75:e4:81:8d:42:d3:b4:
f0:f5:15:b4:b2:99:e5:db:c0:c4:9d:43:8c:d9:2f:
08:be:3c:57:72:41:56:37:bf:6f:fc:ce:7d:92:b8:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2E:AF:02:C0:D1:8E:0A:E7:54:FC:74:42:9E:04:C3:BD:C1:D8:55
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cc:86:75:aa:22:bb:09:c1:87:6e:1d:0f:a2:8e:e6:e4:2d:
8c:1a:18:8b:64:13:01:07:2e:f6:8c:b6:f6:d4:ab:4b:56:41:
fc:c8:73:d7:36:34:3d:fd:54:73:35:a1:b3:0b:d9:18:ed:93:
a5:39:d4:28:18:d7:75:19:c0:6b:e3:ab:23:e1:3f:ed:d5:ee:
20:95:45:13:72:ca:3d:fe:ab:16:18:d3:cf:b9:ac:38:ff:1f:
f2:f5:3e:57:fc:d1:07:39:fd:c6:52:08:2d:a7:c7:25:24:5e:
7e:eb:66:5a:44:d6:83:3e:76:aa:ae:be:49:bc:de:dd:f1:f8:
c2:e0:c1:d4:88:04:67:02:0f:a5:2c:cf:30:8d:eb:c4:70:f5:
e6:d5:ea:d3:fd:77:f3:30:c5:08:95:8a:c9:86:35:5d:23:58:
0b:a5:3a:01:e0:b9:79:48:8b:38:2d:09:f1:19:ec:0a:72:4f:
5c:cb:0f:37:04:9e:5c:14:10:4d:80:4a:eb:72:eb:24:69:c3:
d4:a1:ad:fc:84:2b:3e:bb:93:6a:09:a1:e1:23:8d:06:e0:ff:
22:d1:d5:02:05:1d:cd:e9:46:0a:d5:34:08:f3:db:58:74:73:
a8:c4:47:89:e3:8f:01:e5:7a:dc:ae:c2:8b:26:41:da:75:19:
8e:d3:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:57:53 2025 by rpki-client