Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: Rn/yNT1YEAnucm7FSpcnpPWry2VZpyNrXo2zrnDDnYs=
Subject key identifier: 22:F5:CE:AF:BD:BC:A5:51:C2:7D:95:DB:08:F8:3D:F9:47:CD:38:E2
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 0196BDB79BB2AB292DE5631E1A7008B73120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 141E
Signing time: Sun 11 May 2025 05:00:48 +0000
Manifest this update: Sun 11 May 2025 05:00:48 +0000
Manifest next update: Mon 12 May 2025 05:00:48 +0000
Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=)
2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: vu8FXNUP9pDVpudONB19tmAixtUsIhXQTpKHT4l1loU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:9b:b2:ab:29:2d:e5:63:1e:1a:70:08:b7:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: May 11 05:00:48 2025 GMT
Not After : May 12 05:00:48 2025 GMT
Subject: CN=22f5ceafbdbca551c27d95db08f83df947cd38e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:0a:c4:c0:f6:21:d3:66:e6:6d:63:6a:f9:
23:36:4b:ab:ce:9e:45:83:55:4a:a7:a3:2d:1a:74:
4f:62:11:1b:01:22:e9:02:19:ba:7c:04:47:81:82:
4b:7e:90:1d:29:57:be:19:d2:06:d5:53:2f:b5:df:
11:b7:f4:3c:ba:ef:cc:bf:3f:60:f4:6a:c8:5d:cd:
8c:fa:c8:65:3a:68:b2:24:90:fe:54:31:c1:ed:b5:
cf:a9:e4:4b:12:6c:84:df:c1:50:55:e1:19:be:63:
d9:15:a4:8c:8b:f9:d4:1a:16:bd:4f:b8:31:98:90:
d6:28:a5:46:d5:9d:27:03:99:50:b9:18:03:84:ab:
03:d1:ee:c7:71:63:e8:89:fd:87:42:ae:4b:38:18:
6a:cc:e1:50:72:39:0d:fc:aa:54:89:98:51:51:1d:
6d:c2:70:3c:93:53:c0:9b:16:f9:5b:85:aa:3b:fa:
67:f7:f8:74:b3:ad:06:18:74:a6:21:71:e5:44:54:
40:2a:53:fc:fb:ea:25:ab:57:c7:78:d9:75:e2:50:
5c:72:7f:af:88:ae:75:02:6e:bc:63:84:cb:70:65:
f2:cf:16:e5:eb:1e:96:f8:dc:c3:5b:88:f2:b0:b8:
ed:15:02:2c:82:53:cb:c7:7c:b8:0e:60:cd:dd:3b:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:CE:AF:BD:BC:A5:51:C2:7D:95:DB:08:F8:3D:F9:47:CD:38:E2
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:77:37:cb:a9:bc:f1:a3:10:40:bd:24:20:f5:3f:67:bc:e1:
cf:d9:0a:f1:77:41:fe:8b:11:d8:73:4c:75:d6:94:a4:3a:1f:
df:18:b9:83:e3:44:a8:4d:0f:4f:a1:8c:a9:bb:4c:62:6e:06:
e1:c0:92:7d:47:5f:98:4f:46:eb:99:40:66:74:54:56:b8:8b:
a7:14:5d:ab:dc:8a:80:38:94:f5:08:93:b9:84:84:a3:2c:74:
66:6a:32:d4:4c:b7:63:01:34:a6:a3:87:6b:73:89:79:6f:3e:
dd:57:c4:cc:b0:75:c5:d3:9a:22:30:1b:0a:97:bb:11:38:22:
09:ac:20:67:82:05:7b:76:3d:f5:32:14:bc:61:4c:e4:7e:5c:
74:7a:5c:b5:fd:a3:74:3c:8d:91:2d:8a:63:a2:8d:3d:ff:49:
f7:28:45:1c:31:0f:12:e4:b6:64:7d:35:ea:1f:2e:46:41:3e:
3b:0e:8d:e8:71:09:1d:64:21:0c:f4:8c:9f:16:46:21:66:05:
07:86:4c:39:e5:ba:1b:e6:fc:ab:b9:8e:27:a0:67:2e:8f:88:
3d:a7:13:19:87:6e:55:86:14:42:53:b8:03:82:d5:bf:2b:8b:
4d:19:6a:8a:85:06:b0:58:2c:9b:2c:e7:50:57:0d:4b:ba:8c:
db:b2:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:27:52 2025 by rpki-client