Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File: W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier: Gw2F47usYAt5CQ6whTi00mjgyGJ7LBKtRG+NtNKA4vg=
Subject key identifier: EC:79:C6:96:0A:29:4C:F9:68:86:FB:C9:26:4E:74:2A:89:FF:C4:21
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer: /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial: 0196B5C6F98AB45B369BBCD98B74DA7BD60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number: D9
Signing time: Fri 09 May 2025 16:00:38 +0000
Manifest this update: Fri 09 May 2025 16:00:38 +0000
Manifest next update: Sat 10 May 2025 16:00:38 +0000
Files and hashes: 1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: rEYE8fSvH1/zqQ+9bcFy+n4eMM36i7qZ2rmTLd/rtyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:f9:8a:b4:5b:36:9b:bc:d9:8b:74:da:7b:d6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Validity
Not Before: May 9 16:00:38 2025 GMT
Not After : May 10 16:00:38 2025 GMT
Subject: CN=ec79c6960a294cf96886fbc9264e742a89ffc421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:4e:95:f6:cd:2c:33:65:c4:62:45:2d:89:
22:1c:8d:e4:44:cd:b4:a8:36:a6:bd:6b:ec:16:86:
4f:71:01:02:41:38:ce:0a:18:54:af:90:f5:83:68:
98:04:96:71:13:99:80:08:e8:ec:1a:80:2e:27:5a:
43:5c:a2:05:95:9e:6a:3e:d5:b6:96:a0:4d:68:19:
78:25:ea:44:09:84:16:93:f5:22:9d:72:d2:0f:2a:
ee:a0:bd:f8:a7:71:72:85:6c:cb:f8:76:01:5e:55:
3c:96:d4:98:01:49:85:f2:f2:c5:37:a4:c4:6e:5d:
a6:7a:f8:b1:09:3b:cf:1b:2c:2a:92:c7:96:10:13:
e7:40:bd:77:f8:73:51:5e:79:cd:42:2d:ae:5c:b7:
23:2c:49:df:dc:86:92:0f:d0:76:4b:7d:04:fe:a2:
97:61:63:94:05:4f:36:47:73:e7:bf:19:c0:c7:dc:
a0:90:1c:7c:ed:01:15:47:20:06:7c:36:5c:b7:e2:
b5:66:f0:c8:ca:38:1c:6c:86:59:4d:61:8f:e4:6e:
c7:1d:7e:5f:a2:ca:47:61:9e:50:65:de:01:4f:65:
49:5b:4c:fe:46:7d:db:e6:a9:f6:c9:be:a4:c5:ed:
4b:6b:b5:c5:5b:72:2a:00:4a:e0:be:b8:a8:2b:24:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:C6:96:0A:29:4C:F9:68:86:FB:C9:26:4E:74:2A:89:FF:C4:21
X509v3 Authority Key Identifier:
keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:81:80:bc:5f:bf:83:da:4c:08:3c:20:e6:f3:91:73:c0:b0:
75:09:15:c9:c6:a0:0d:ca:26:ba:d3:7f:f3:d6:b6:82:d9:bd:
76:12:2a:13:e7:00:b0:66:63:b1:e3:cb:c5:34:c5:f3:7b:b6:
13:31:68:b9:7e:17:66:be:00:f3:0e:cb:79:c5:9b:ad:fe:ef:
db:28:3e:2e:b2:9a:fa:57:df:a3:11:50:5b:4a:cc:65:c4:65:
3f:52:58:c6:0b:e1:1c:c0:3b:71:e5:bb:ff:35:26:df:38:e0:
ff:c0:36:4c:2d:15:c2:4b:eb:e0:b7:63:99:b9:e9:bb:48:e9:
13:7a:36:80:05:dd:8e:68:ce:92:42:c4:64:86:af:71:fe:67:
13:61:9e:ca:eb:d4:5c:54:59:03:0c:61:1a:ff:e5:f2:bb:5f:
ec:7c:28:75:23:33:17:28:a6:90:48:0a:64:19:00:9d:2e:f7:
a7:82:ca:ad:e3:ea:5f:c1:ac:42:a8:6f:54:98:27:01:01:6f:
b1:f8:53:b2:3c:50:8c:79:9d:01:6f:8f:4b:f0:4a:47:30:ab:
55:86:54:0c:55:8e:8d:f5:d9:95:3a:82:85:25:44:65:a7:95:
de:57:8f:27:d2:5f:16:c8:9b:fa:1f:a6:00:ad:d7:e4:cf:e3:
57:bd:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:33:52 2025 by rpki-client