Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: 3Z4XiQXub12pyd0pfIJPrInp21LCZgncH9LN0aoqyfY=
Subject key identifier: 71:E3:65:FD:EE:2B:F0:C6:CD:8D:13:60:0D:06:00:66:2C:40:FE:EC
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 0196B9A42E027450ABD2DA3C4BC7B1522489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 113F
Signing time: Sat 10 May 2025 10:01:06 +0000
Manifest this update: Sat 10 May 2025 10:01:06 +0000
Manifest next update: Sun 11 May 2025 10:01:06 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: 7+pB9b+4e9o8G/jusqMC+oNEVs7c7YxsncQQCg8jk4o=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:2e:02:74:50:ab:d2:da:3c:4b:c7:b1:52:24:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: May 10 10:01:06 2025 GMT
Not After : May 11 10:01:06 2025 GMT
Subject: CN=71e365fdee2bf0c6cd8d13600d0600662c40feec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:da:44:bc:aa:6e:22:2e:57:c0:c9:61:94:
b9:c5:32:41:53:32:d4:8e:96:02:57:81:93:a6:47:
c0:0e:6b:c9:52:34:06:77:14:37:a8:77:c5:9f:96:
0d:60:ee:4c:c4:9c:ae:24:8f:d8:9e:2b:0d:02:d1:
f3:30:5f:43:fe:2a:90:82:a4:ef:4a:65:d3:51:5d:
6b:84:16:fe:92:49:c9:09:ec:78:75:02:e1:22:62:
ca:09:c7:91:89:3e:fa:a4:df:0a:2e:3f:b3:5d:10:
5a:6b:fa:12:26:5d:e1:98:ea:f5:e5:3b:46:6d:7f:
eb:df:60:3a:64:47:fa:51:b3:f8:b7:05:bf:c8:83:
3d:44:71:0b:76:c0:aa:68:39:87:16:c2:12:ae:72:
aa:6d:ed:c4:92:58:73:cd:c2:9f:ec:8a:e7:41:6b:
20:6b:e6:21:fa:23:26:22:5c:06:33:94:76:71:4c:
50:3e:bf:8c:39:9f:fb:4c:d9:5c:cf:8e:d2:83:db:
ec:b7:77:2d:1d:96:78:95:6a:b6:f5:f1:14:ea:65:
9f:7f:ba:d9:5f:e1:7c:6f:a8:ba:44:a3:40:ef:e0:
a6:07:fc:ed:e5:62:10:a8:44:54:e1:2c:54:d4:d6:
03:63:b2:de:b7:0d:f1:36:1d:74:73:a7:0b:bd:fb:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:65:FD:EE:2B:F0:C6:CD:8D:13:60:0D:06:00:66:2C:40:FE:EC
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f2:d1:80:ed:4f:3d:b7:fa:39:24:bc:97:04:01:de:31:8a:
9f:04:c8:b5:69:b1:99:d5:93:67:69:94:35:65:1c:82:53:71:
74:6d:f4:64:63:87:d0:31:2f:06:09:79:40:7f:d2:11:bc:20:
6a:91:5b:40:d1:84:e3:a2:bb:c2:a9:44:8b:7f:89:1d:4d:87:
a0:86:0f:1f:f7:30:39:3f:dc:97:41:73:ff:e6:d1:8c:29:5b:
4b:7b:70:cd:20:99:0e:b9:de:8a:46:d8:88:cb:93:eb:6e:6e:
87:7f:e5:30:c8:7a:c1:cd:9a:36:41:08:19:c3:17:f6:f1:e8:
9d:76:83:cb:7d:11:2a:d8:73:bf:89:06:09:5c:8f:a7:f3:77:
b0:3c:7a:e8:49:af:95:5b:74:d4:f6:fc:60:76:a4:16:9f:a2:
53:7f:d9:ad:46:d4:a1:56:46:30:be:46:4b:6b:09:3f:11:4b:
e4:45:95:95:19:93:bb:46:48:06:26:c3:fe:eb:c0:53:d7:39:
a5:ab:9b:11:c2:7f:e6:35:78:77:4d:56:aa:0d:98:d0:22:8b:
9b:19:17:2f:64:df:d6:4c:50:b6:77:81:21:30:f7:01:96:8b:
0e:83:b7:fa:73:ae:7c:b6:6a:1d:f3:19:c4:c5:0b:94:63:75:
d3:66:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:52 2025 by rpki-client