Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: 4ls6oJXj4j1pjRGd+bpErh1zZOw1auW49N/pS+reJwQ=
Subject key identifier: D5:45:F7:21:2C:8A:E6:EC:10:9E:4D:FF:61:9F:03:99:A3:68:D1:F1
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 0196C4CBE89D219EF9168AB5F8A8064CF728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: BC
Signing time: Mon 12 May 2025 14:00:19 +0000
Manifest this update: Mon 12 May 2025 14:00:19 +0000
Manifest next update: Tue 13 May 2025 14:00:19 +0000
Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: Mv2XWBOg1zt+mfADo2wOJ5UUPzOi3/wYTrjRb3KGbuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cb:e8:9d:21:9e:f9:16:8a:b5:f8:a8:06:4c:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: May 12 14:00:19 2025 GMT
Not After : May 13 14:00:19 2025 GMT
Subject: CN=d545f7212c8ae6ec109e4dff619f0399a368d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:5b:d3:76:ee:82:63:2c:b2:9b:0d:c8:d8:
a6:4a:df:0c:78:1d:bd:94:10:05:47:96:f7:23:36:
da:8d:a3:45:a2:b8:74:4e:5f:52:a7:d7:83:0a:52:
17:a5:00:8b:82:11:3d:9a:97:76:bc:11:5f:f6:3f:
1c:a7:b2:4e:ce:21:62:e2:2b:17:94:69:55:17:9e:
b0:d2:78:19:3b:da:0b:a8:95:9a:fe:e5:d2:10:47:
f1:d4:99:85:ae:d2:74:cc:8e:0d:b6:0b:d3:25:a2:
6d:e4:0e:4e:c9:79:24:3d:06:9b:bd:ff:75:86:0c:
dc:4b:81:f2:44:0f:95:a0:c1:50:80:ac:58:f8:cc:
57:aa:77:01:4a:05:0d:49:0e:a9:16:f4:08:35:61:
a0:89:9f:0a:bc:66:73:50:1f:06:2e:a2:0e:2f:90:
fd:8d:8a:fc:b9:d5:fc:aa:eb:ec:be:40:81:7f:fa:
53:51:38:cf:bc:cf:ac:06:53:aa:ab:21:32:48:4d:
28:6a:6f:5a:17:f7:44:09:4a:81:62:e7:36:ce:d1:
28:8f:36:4a:84:e4:97:3e:2e:17:57:07:50:06:57:
f7:df:c6:b6:02:e0:77:f7:fa:14:ed:b5:db:09:3b:
81:e7:e5:ce:60:58:b5:82:16:c3:a5:f2:12:6d:1b:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:F7:21:2C:8A:E6:EC:10:9E:4D:FF:61:9F:03:99:A3:68:D1:F1
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2c:68:9c:eb:2f:67:b4:a5:58:fd:be:6f:be:09:43:87:fc:
33:e5:47:e4:e6:17:6d:3e:99:8f:df:6f:69:1e:d3:0a:bb:68:
b0:5c:2d:44:d5:f2:77:9e:af:d7:0f:dc:89:52:e3:48:3f:1d:
35:ad:27:07:ba:ef:23:e1:57:88:fb:8a:8e:35:3b:72:a8:96:
19:d5:2f:3c:2c:00:a5:65:f8:31:6a:51:0b:57:66:dc:9c:5c:
cb:1f:e9:88:28:ad:fa:1e:cf:7e:0b:4e:b4:cc:8d:78:38:96:
9a:df:33:96:bd:83:36:66:56:f1:56:b5:22:8f:2e:9e:1e:02:
5c:b1:df:c5:44:d5:58:f3:b1:48:10:06:27:c0:07:fc:5f:cc:
e6:5c:df:61:6d:b0:66:6d:1f:73:be:46:db:d2:45:bd:0b:bf:
98:55:19:bd:85:42:8b:f6:4f:d8:15:73:3d:c4:6e:c1:b3:25:
df:a1:0e:fe:54:33:7a:4c:f2:5b:7d:33:b1:e7:87:82:02:10:
2b:ca:32:a3:b3:f5:8d:8d:26:45:5b:ff:50:a6:dd:45:38:35:
55:e3:09:c3:da:74:dd:72:ab:4d:b4:07:41:24:e1:23:88:13:
4d:b6:25:e5:26:bf:02:49:ef:1f:54:9a:9b:96:0b:74:44:a9:
bb:ab:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:42:47 2025 by rpki-client