Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: 8LF/HvjAKdhZjHA4H2EW4iHU+ktiH4/5LcfaFeNiVwg=
Subject key identifier: 1B:97:07:67:A0:7A:7C:C7:76:FB:D1:A7:26:E7:CA:64:5B:CD:05:AA
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 0196A61CBDC88B6E9C46E14EF56ABA20B6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 14B9
Signing time: Tue 06 May 2025 15:00:23 +0000
Manifest this update: Tue 06 May 2025 15:00:23 +0000
Manifest next update: Wed 07 May 2025 15:00:23 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: os7reR4UtuN/bE6BubU+REzNC9F0qKVowVb/12tYbNM=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:bd:c8:8b:6e:9c:46:e1:4e:f5:6a:ba:20:b6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: May 6 15:00:23 2025 GMT
Not After : May 7 15:00:23 2025 GMT
Subject: CN=1b970767a07a7cc776fbd1a726e7ca645bcd05aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:4e:70:42:12:0b:25:56:4b:0d:d0:5b:9e:
3a:f2:a8:94:e9:4d:09:7e:61:24:4d:13:da:2f:b6:
f4:66:78:1e:dd:9f:7f:03:69:71:38:93:d7:cb:de:
32:6e:f3:40:14:80:cf:8e:c7:74:ea:be:27:3b:00:
3d:45:f8:a8:80:de:f4:27:7b:d0:98:e6:b9:92:11:
e3:d8:7b:06:3b:5a:a1:ec:3a:d5:cb:40:f5:01:cb:
54:24:76:7c:74:7b:2b:ed:b4:07:ea:88:6c:72:ab:
3c:97:c9:62:d7:5f:50:f0:5c:b2:88:fc:6d:cc:f0:
46:e8:8c:73:dc:2d:16:9e:45:54:2a:a9:97:0c:fe:
ed:b6:02:d8:9a:36:a4:c5:fa:0f:b3:1e:42:9d:0e:
9f:7f:e4:9b:b4:db:47:9f:da:7e:54:b4:22:4f:b9:
dd:f2:64:78:c7:c9:ab:61:9b:7e:29:6a:a2:bb:b5:
39:c5:85:a4:1d:52:de:76:9e:6c:0c:7d:e6:a1:5f:
cf:40:fd:7e:03:1e:3d:23:7a:bb:97:c4:9b:d0:36:
6f:f3:27:e2:95:f3:31:a4:65:29:91:16:1d:24:c7:
a2:ae:42:5e:36:a6:72:49:22:f3:6b:75:99:fc:6d:
6c:b7:d8:20:c8:26:c1:ca:4d:1f:9e:c8:5c:46:ff:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:07:67:A0:7A:7C:C7:76:FB:D1:A7:26:E7:CA:64:5B:CD:05:AA
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4b:7c:3a:60:ab:6b:74:2a:e6:e2:a9:be:06:a0:da:b9:88:
b4:4a:6d:68:41:95:2b:77:a8:27:fa:83:d5:40:0d:24:ea:47:
69:3a:20:9c:de:f2:6b:a2:04:5c:43:d6:ce:25:b8:43:e4:3a:
95:b6:49:8f:80:5c:b1:d7:d7:fa:05:cd:93:ff:2a:2c:56:7d:
34:3a:47:aa:ff:c5:8d:bf:03:7f:9a:06:a6:33:07:a6:a1:ee:
5c:7d:c0:30:cf:12:92:b1:69:0a:24:7f:63:14:a4:a5:00:48:
e6:07:48:07:4e:ef:02:fa:0f:e2:5e:c7:b7:63:7d:27:ac:ec:
f5:06:69:19:39:e4:10:67:a6:59:fc:d9:aa:90:d5:66:7c:b2:
78:68:61:77:09:8a:8c:2a:95:8c:4b:dd:89:48:e4:19:96:00:
b7:09:7c:81:5b:5b:00:1c:9d:90:11:b4:b3:54:46:3e:75:66:
4f:07:d0:90:24:cf:5f:5d:11:de:16:64:17:d5:65:0d:0d:41:
f1:87:d4:df:dc:27:a9:e4:82:7b:52:76:e4:47:9d:e7:d2:db:
95:66:e2:e6:ee:27:17:aa:24:73:03:06:ff:92:0e:0d:43:8e:
9a:a5:15:c5:65:60:e9:45:20:8b:64:ab:76:3a:a2:65:e9:20:
2c:b8:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:42:08 2025 by rpki-client