Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: L6dR6404zDqClosa79o3gAqsvmUcY4ijwfB+VwuwBWc=
Subject key identifier: 1F:60:31:25:70:09:36:18:79:ED:8B:61:06:76:A4:59:98:03:66:FF
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 0196A19B610988EFFFC2CECA1ADDA80258DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0C89
Signing time: Mon 05 May 2025 18:00:36 +0000
Manifest this update: Mon 05 May 2025 18:00:36 +0000
Manifest next update: Tue 06 May 2025 18:00:36 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: 3wSnbcgNj3PjJvfrsSkENFK8dAw1t6f3VrSg55QHI5s=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:61:09:88:ef:ff:c2:ce:ca:1a:dd:a8:02:58:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: May 5 18:00:36 2025 GMT
Not After : May 6 18:00:36 2025 GMT
Subject: CN=1f6031257009361879ed8b610676a459980366ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:be:3f:6d:95:fa:0c:76:68:f9:90:80:53:
13:23:2f:d5:4b:28:ee:dc:25:c3:4f:fe:c6:09:f1:
21:aa:f3:6d:ac:25:20:a6:57:ed:22:56:e5:c4:15:
05:65:0e:e1:e5:ac:c8:ba:f8:ac:52:fc:8d:26:7b:
21:ab:e4:75:0c:b8:ff:98:86:13:37:02:e1:9b:c4:
62:0e:e6:c1:43:1c:26:d6:04:86:e4:bb:f0:c1:f4:
0c:bc:be:39:c3:ab:d5:cf:67:3c:48:3c:94:d5:87:
ad:d2:f8:36:9a:5f:bc:83:14:76:9b:76:22:66:23:
9e:19:51:4e:78:bb:b5:0a:67:4b:67:94:5c:b6:c6:
2c:d4:9c:72:47:a2:e7:98:69:e2:04:48:bb:5e:87:
c0:25:82:66:7a:f8:85:b8:6b:33:ac:90:78:58:b5:
41:63:b0:ef:dd:f9:e2:53:13:bd:36:52:0e:bd:79:
95:33:1d:b5:6b:04:be:c1:5e:45:4d:49:8b:15:2d:
c3:c2:dc:bd:42:ec:a7:b4:fb:93:cd:fc:80:3b:84:
f3:d8:7d:e8:f3:6f:df:84:21:1e:4a:9c:35:b1:bd:
a7:62:ff:22:c5:ff:ed:e4:6d:72:c7:04:a7:56:b1:
05:30:2b:9e:c2:f6:80:73:20:a9:4e:b2:5b:42:07:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:31:25:70:09:36:18:79:ED:8B:61:06:76:A4:59:98:03:66:FF
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:ac:7d:a7:9c:36:08:07:dc:e9:52:ac:96:f5:9b:43:5f:
5d:dd:cf:f5:f6:de:c9:39:ff:4e:e0:d1:fe:c1:5e:68:44:d1:
5c:a1:63:ca:6a:e0:3b:c5:50:1e:bb:d6:eb:66:b3:14:2a:1a:
ec:60:a6:e3:c7:b4:52:38:32:55:7f:11:1f:ed:c6:50:94:06:
97:a8:ec:38:62:e3:38:ff:91:d0:68:84:6f:aa:74:18:4c:e2:
05:dd:9b:8e:e1:65:06:6d:8a:7a:b8:2d:48:63:7d:d8:05:f3:
71:f3:57:67:9d:c8:d1:9c:5f:c4:7e:27:8c:31:df:60:1f:6f:
d7:47:11:97:dc:33:a2:45:da:3b:e3:c9:d7:db:36:4f:f3:c5:
80:39:9f:20:d4:93:13:08:70:eb:1e:ff:34:e1:e0:53:ce:82:
de:5a:e6:e3:89:85:bd:8c:96:c0:b2:8e:02:b3:cf:67:49:8f:
50:38:61:56:c1:9b:f1:25:d6:37:2c:ba:ec:41:89:2c:1d:56:
c0:2a:74:01:4e:66:af:18:d7:d0:63:80:e1:d6:9c:f4:d3:e9:
c8:3f:e8:54:a2:2a:64:1e:61:da:7a:be:68:71:2b:70:ab:a0:
ce:c7:57:53:05:1e:73:5b:45:1e:b5:e0:1c:bd:fb:f3:b8:e8:
9e:df:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:13:01 2025 by rpki-client