Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: KI8UvAAZKjmmHehdYSc44QJ+sYQI8JUTezy7s7RVtzo=
Subject key identifier: 4F:23:A0:31:6A:42:4D:0E:37:24:A0:DD:D3:CA:82:85:85:5D:02:31
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 0196A0517B2C98B060D9D8EA8950CEA7CC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0D53
Signing time: Mon 05 May 2025 12:00:16 +0000
Manifest this update: Mon 05 May 2025 12:00:16 +0000
Manifest next update: Tue 06 May 2025 12:00:16 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: XropnniybfreC7hGwQvJ/I1E66Qw7abrMAOzJ1eppyw=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:7b:2c:98:b0:60:d9:d8:ea:89:50:ce:a7:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: May 5 12:00:16 2025 GMT
Not After : May 6 12:00:16 2025 GMT
Subject: CN=4f23a0316a424d0e3724a0ddd3ca8285855d0231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:8b:84:c2:ad:29:6a:81:43:26:3c:85:22:
9a:51:65:39:d4:40:04:27:c2:dd:68:15:07:bf:f9:
c1:82:06:b9:da:14:20:d8:49:54:2d:79:58:bb:e4:
db:71:a3:6a:a7:e6:0c:57:a0:ba:e8:97:a6:93:6a:
f1:ae:ae:fb:6d:fa:a5:80:5d:d0:6d:67:ec:e6:ab:
ea:ff:f8:8b:fb:e0:f4:d8:7c:ac:18:a7:9f:b9:5e:
6c:07:b9:50:8d:1f:82:c6:d0:5e:55:c5:a2:3a:89:
b5:3d:cd:cf:62:45:c0:54:d4:fb:9a:3c:2f:f1:8d:
44:a5:4a:11:73:5f:e0:28:7b:58:16:d7:1c:30:a0:
29:1c:6b:d6:d3:a3:0c:bb:00:58:e6:07:57:2d:e7:
62:3f:68:80:30:cb:20:fe:6c:4e:f6:02:7d:2c:c1:
84:d8:80:b0:d8:85:36:c3:9e:d3:02:ac:21:aa:1e:
c7:e8:d7:4b:07:eb:6e:b4:5e:b0:7b:18:58:0c:70:
d6:3c:cb:ca:10:d6:b2:84:ee:83:90:16:03:83:ba:
de:9e:5a:90:df:02:3d:c0:c6:53:61:d7:c0:6a:8b:
8d:13:85:e3:63:8c:06:cb:66:97:50:b4:78:42:54:
4d:e6:aa:cc:ce:f5:03:31:67:81:c1:20:4b:f4:2b:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:A0:31:6A:42:4D:0E:37:24:A0:DD:D3:CA:82:85:85:5D:02:31
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:48:d9:60:04:75:aa:0f:9a:1b:42:99:63:1d:3c:0d:6d:52:
ae:95:8a:9f:01:72:1f:8d:b1:b9:03:0b:2f:4c:89:27:78:f9:
13:0d:b9:75:dc:06:2a:1d:2e:e4:ec:74:dd:cc:54:46:d0:bf:
ec:59:4d:41:f6:db:a7:1b:52:25:9f:4e:d8:02:9b:b3:43:38:
8a:9f:b3:2d:be:f8:54:23:0d:16:d0:de:04:b2:56:28:2c:69:
e9:11:7a:a0:2d:76:da:5e:5d:aa:c7:da:4c:88:40:ea:b2:71:
9b:e3:11:d9:c7:a1:0d:58:40:8a:14:3c:7b:d2:e0:e9:58:d5:
62:c3:3c:ed:5f:86:ed:9f:48:92:4a:14:b8:98:79:72:3d:f1:
52:02:08:49:87:f0:70:83:98:29:3b:3a:e4:63:ff:d8:2b:a1:
5c:f1:05:6d:04:e3:ff:0b:a3:50:63:bd:69:e9:ea:3b:c4:41:
f3:23:38:6e:09:af:6e:5b:9b:8c:10:eb:50:5f:49:8d:5b:ae:
b1:c0:fc:d8:81:42:a9:14:73:d4:74:c2:3b:77:cc:df:80:cc:
24:84:d6:3d:43:2f:5b:62:bd:76:68:6f:20:13:df:63:a8:aa:
59:4d:b6:fc:bf:52:e2:3d:2f:32:37:fc:e3:20:9f:c3:ff:a6:
76:b8:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:23:12 2025 by rpki-client