Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: GhQbqsOXEEya11wrnQEneznUkYm0flxmDTngk8W3GzQ=
Subject key identifier: 90:F4:E8:FA:C9:00:7A:CB:1B:A5:E3:44:B1:80:E3:3A:48:F8:56:66
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 0196C34BDDB54DCE571A1C12947B5BB09FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 07:00:50 +0000
Manifest this update: Mon 12 May 2025 07:00:50 +0000
Manifest next update: Tue 13 May 2025 07:00:50 +0000
Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: 1kixcB3OZA9lsrADGENDuZYWgrvzvBWkEAjd7ElFPW8=)
2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:dd:b5:4d:ce:57:1a:1c:12:94:7b:5b:b0:9f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: May 12 07:00:50 2025 GMT
Not After : May 13 07:00:50 2025 GMT
Subject: CN=90f4e8fac9007acb1ba5e344b180e33a48f85666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:9a:19:58:3a:c1:87:9e:34:a2:2b:26:1f:
86:b4:0a:b9:89:67:d6:62:60:35:97:e2:70:ca:cb:
d7:43:5d:6b:48:10:de:f9:24:36:11:13:4f:f4:73:
c0:85:0c:43:64:f0:09:d9:4c:5c:8b:45:85:fb:cd:
79:cc:71:3a:d9:89:30:1e:68:7d:65:f0:e2:fe:ee:
84:33:72:28:01:61:d7:66:a0:95:a7:b0:0b:6b:01:
b8:77:9e:e2:dc:b9:ed:7a:8b:1f:be:eb:fb:9c:b8:
0b:f4:19:96:f1:32:d5:db:d4:2e:2b:c8:75:b5:8d:
a9:ec:8f:d0:8d:1d:8f:7f:47:a5:f3:52:d2:34:fd:
4d:d3:80:9c:de:d7:83:29:6b:22:7a:16:eb:90:82:
4d:d5:f6:71:3e:76:a8:47:d1:2e:28:94:ea:8e:2f:
25:31:87:76:37:04:f7:8a:6d:2f:41:88:58:36:1f:
96:84:2c:67:f2:8d:31:0f:e4:3c:d7:8f:0e:83:a0:
e3:38:ce:48:1f:d9:f4:48:eb:38:2e:06:7a:3d:70:
5b:2f:fc:e4:96:85:3d:cd:cc:0b:2b:66:c3:d4:31:
1c:69:13:ad:90:ea:79:87:60:ea:e5:7d:25:d1:5f:
ab:44:e4:17:5e:a1:dc:06:5d:06:60:8c:9b:79:ba:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F4:E8:FA:C9:00:7A:CB:1B:A5:E3:44:B1:80:E3:3A:48:F8:56:66
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:8c:0c:68:d2:10:be:d5:02:33:17:bf:46:98:c0:c8:fa:
b6:4f:21:dc:9a:4c:0f:7f:6c:9f:64:16:47:6e:49:eb:ec:99:
57:a6:f7:6e:14:f0:c7:fa:6d:aa:9c:7c:b5:00:76:5d:8f:1e:
e7:f2:66:7b:41:2d:6f:cd:c1:d0:61:e9:56:14:99:ff:0e:49:
10:79:40:c8:da:e5:4e:16:61:8e:ab:5b:d3:8a:00:6e:83:34:
c8:c5:e3:1b:cb:a7:7a:ec:86:01:24:35:17:13:12:bd:e5:42:
db:b9:6c:e2:d6:7a:bb:a4:06:e7:65:bf:e9:39:2b:ba:47:ae:
19:00:5c:53:7a:bb:4b:7d:12:80:0e:2b:96:15:c7:2a:d8:96:
68:29:d5:0d:46:e5:2a:0a:10:07:29:53:0f:ac:f8:5d:df:ea:
a6:ab:45:c2:0d:f4:76:cd:c8:fc:74:c7:d7:fb:26:77:f2:3f:
02:bc:33:3f:11:d6:b6:91:d3:ff:0c:0d:fd:ee:9a:d8:79:5a:
e3:9e:4a:d4:5a:49:f0:36:85:0f:69:a1:3f:f8:57:99:89:cf:
1b:6d:57:7c:13:57:32:5f:09:27:98:51:21:92:1e:28:2c:23:
21:a1:0b:04:27:b5:a9:ab:f9:00:68:ed:d1:8e:9f:b3:3f:0e:
5f:f4:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:42:22 2025 by rpki-client