Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
File: W_fQ5HEirv77Ys6iFnSoECVVmxo.mft (raw, json)
Hash identifier: lnHf7C7BJ6bjquvOO1EBDURa9g0o1u5N4VLcaiKnQT8=
Subject key identifier: D6:A0:DB:E6:D9:42:39:D3:9A:2F:45:E3:20:C7:87:99:38:A8:28:B5
Authority key identifier: 5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
Certificate issuer: /CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Certificate serial: 0196ACFA790C00C7034A82BD667AC77F2F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
Manifest number: 04E7
Signing time: Wed 07 May 2025 23:00:18 +0000
Manifest this update: Wed 07 May 2025 23:00:18 +0000
Manifest next update: Thu 08 May 2025 23:00:18 +0000
Files and hashes: 1: W_fQ5HEirv77Ys6iFnSoECVVmxo.crl (hash: O/pHyiAYEfXPdxsGpnnAsgUlREF6yf2ZXm0Xh9jbHt8=)
2: asNSq8lkmS1XdMPBwyGi7exxYUQ.roa (hash: IeZFlfU/tf7kNLd1ueG9wWhJ27KVNelvhJ00kXOKzso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:79:0c:00:c7:03:4a:82:bd:66:7a:c7:7f:2f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Validity
Not Before: May 7 23:00:18 2025 GMT
Not After : May 8 23:00:18 2025 GMT
Subject: CN=d6a0dbe6d94239d39a2f45e320c7879938a828b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:b3:c1:19:2c:fc:5a:99:a0:45:cf:b5:30:
d1:ed:c4:13:7b:62:52:b0:ea:c6:a6:14:96:6e:b9:
b6:66:39:77:ff:6f:8e:1f:06:89:37:80:3f:29:e7:
3d:99:fd:03:aa:69:1a:d7:b5:7a:3d:63:9f:6c:8f:
84:6b:d1:a5:e1:52:41:da:4e:1d:7b:18:29:3b:5f:
02:7b:a4:80:46:1a:d0:d5:1e:57:6b:44:6c:13:ae:
ad:6b:cf:9d:01:29:ec:a0:52:7e:42:98:95:76:c7:
37:d8:c6:93:5e:75:7b:a0:ef:35:7c:8f:93:92:75:
60:5a:76:1b:18:a5:1e:ee:7a:63:7d:7c:58:95:c4:
aa:00:c5:bb:43:08:47:14:db:ae:d6:fa:7c:c2:6c:
cd:b2:7f:c1:e7:55:b7:c5:14:e2:b2:43:46:ca:9d:
16:ae:3a:33:86:15:77:ee:26:74:0e:f4:e8:aa:f7:
f4:3c:b1:78:79:97:aa:87:8b:1f:a3:7c:ba:48:89:
11:be:bc:4d:c3:82:7f:81:e2:d7:a0:e8:cd:b6:7c:
1b:11:c1:b5:36:d5:d4:6c:60:5a:87:01:a0:69:ff:
1c:26:22:98:04:c3:6c:2c:a2:29:f4:1e:43:b3:94:
75:ad:79:b6:d1:e7:8c:1d:44:38:3e:c1:7e:ce:f1:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:DB:E6:D9:42:39:D3:9A:2F:45:E3:20:C7:87:99:38:A8:28:B5
X509v3 Authority Key Identifier:
keyid:5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d7:9a:2d:79:10:d9:dc:93:bb:36:58:bf:15:73:09:fb:a3:
34:4e:fd:7b:88:76:00:2a:5a:f7:77:b1:e6:ec:72:a2:e5:ac:
71:8c:fa:61:83:99:fc:c2:3a:a2:e2:e7:a7:47:ac:92:b1:0d:
08:e4:d7:c8:99:10:c5:eb:e4:49:c9:4d:23:01:58:38:84:4f:
b0:e0:55:14:1a:43:a6:e4:5f:27:35:e6:92:80:e5:bf:25:e2:
a2:3b:f1:d9:30:ba:ed:3b:8b:0e:fd:7e:2e:b1:44:3c:53:39:
50:b1:99:13:3b:60:ac:df:e1:62:c8:91:63:8d:08:d0:59:5e:
28:89:8b:bc:3c:13:eb:51:0d:22:0f:87:40:cc:e6:f2:cd:04:
81:02:30:ff:a9:20:0e:cb:1a:cc:fc:a1:c6:fb:49:c2:9c:a7:
b6:38:c8:38:4e:8d:bc:a4:d2:e4:f8:f0:9e:ab:e3:43:e9:20:
8f:ef:0b:28:23:e2:44:40:36:b5:d2:95:23:44:53:10:06:7d:
14:4b:39:44:fd:07:cd:de:d7:76:c0:79:2a:5b:f7:df:64:8a:
ca:82:88:4a:c2:42:2a:4f:3b:20:db:29:32:b5:ba:d4:7d:77:
d6:77:5d:d0:d1:99:c7:52:f7:ea:55:75:a7:b7:cc:66:85:f0:
ae:8f:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:23:44 2025 by rpki-client