Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: DnMk3UPSp62ACLaQ1DATJPVaaVprC90G4P/RaNkrrF0=
Subject key identifier: 2F:81:60:40:92:14:3F:C9:04:4E:F1:44:0C:B1:91:90:54:0C:20:EA
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 0196C15E5D54E332321435739672799E8C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 0927
Signing time: Sun 11 May 2025 22:01:48 +0000
Manifest this update: Sun 11 May 2025 22:01:48 +0000
Manifest next update: Mon 12 May 2025 22:01:48 +0000
Files and hashes: 1: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (hash: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: dxIkpG3zL+F94sbSjcmkCE+NTJB9yYIsFisgdizAWPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5e:5d:54:e3:32:32:14:35:73:96:72:79:9e:8c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: May 11 22:01:48 2025 GMT
Not After : May 12 22:01:48 2025 GMT
Subject: CN=2f81604092143fc9044ef1440cb19190540c20ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:07:1a:04:c1:96:5b:b0:3d:55:a4:9c:a5:
37:f2:22:80:f6:36:7b:03:6c:1a:8b:e2:6e:34:74:
11:75:98:d8:a6:f9:cc:0c:71:71:6f:6e:cf:40:ea:
f8:eb:84:23:89:4c:a4:e8:44:d3:17:91:bf:84:35:
ba:4b:dd:d6:d3:5b:9d:48:ff:45:fb:d9:4e:82:64:
f9:32:52:f6:93:52:a3:5d:99:c9:0c:c2:90:e8:0c:
81:fc:59:dd:f0:41:a9:74:cd:fc:78:16:6a:df:f2:
a4:7a:fb:a5:61:9b:56:b5:2a:e4:03:e0:04:a2:ab:
e1:46:b0:27:89:3c:95:bb:3d:37:5a:36:51:c8:7a:
eb:a1:32:62:4e:98:d5:3c:a1:a5:27:ce:2c:e2:33:
23:43:78:76:05:bc:97:86:89:ab:e3:48:2c:99:2f:
38:15:e3:00:97:69:63:22:22:5f:da:5f:08:28:8e:
ca:0e:48:66:83:9b:9d:41:71:81:8e:76:e7:1a:c3:
33:b5:39:42:5a:96:c1:29:3d:06:e8:72:43:8b:49:
64:2e:79:fd:53:38:47:7d:1f:60:07:f8:a6:2e:22:
bd:e7:c6:a2:72:6d:e5:b0:46:e3:1f:05:09:55:78:
08:02:3b:af:5f:f7:1a:5e:ef:72:e0:43:25:d7:03:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:60:40:92:14:3F:C9:04:4E:F1:44:0C:B1:91:90:54:0C:20:EA
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:d2:bf:7d:0c:28:d0:8a:65:b9:17:99:0e:80:18:9f:fe:
cc:db:ed:34:ae:71:2b:52:00:b5:36:12:a3:da:8a:16:1f:a3:
5d:25:e2:02:01:d7:9f:41:e8:76:f1:27:8e:b4:67:b5:62:20:
71:6e:e8:1f:8d:c1:80:8d:db:26:1a:26:0e:01:d1:6f:68:22:
11:b3:4b:52:07:68:c4:ed:fc:c5:20:cb:e6:a2:45:b1:db:35:
be:81:d6:81:38:39:83:c5:f0:7e:80:69:a2:76:37:39:ce:db:
fe:16:26:31:c8:57:74:f4:9a:41:03:8f:de:a7:9a:70:d1:18:
d3:87:04:2c:87:ba:d7:8b:09:c5:f5:3a:8c:dd:9a:be:da:53:
d2:05:10:ac:46:c1:0d:ed:9f:bc:e8:db:86:09:7f:a7:98:9f:
ba:c3:65:9b:a6:6b:7d:24:1d:a9:71:45:42:a2:3f:0a:77:7c:
ca:e8:5c:0e:2c:40:ae:75:e0:b9:60:c8:b6:f0:9c:57:4e:29:
9f:92:d8:0e:27:34:ad:89:d8:ed:5e:96:40:8e:41:80:3a:bc:
a1:02:d6:85:e7:23:c8:dd:dc:c0:7f:4a:70:d3:66:80:40:d7:
a6:70:aa:84:fe:1c:d7:02:7a:84:0d:4f:49:d3:2a:cb:10:8b:
ce:e2:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:11:09 2025 by rpki-client