Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File: AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier: pm0WTa0YwSwzVesYb8AfnXn8kTD4PaTe7gQS7q/SJ+c=
Subject key identifier: 5D:84:8B:1C:3A:A0:53:1F:E6:09:17:BA:0F:EC:AB:12:31:5D:54:70
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 0196CD98B6A179D2F1EDB0CAA254E98324FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number: 1442
Signing time: Wed 14 May 2025 07:00:59 +0000
Manifest this update: Wed 14 May 2025 07:00:59 +0000
Manifest next update: Thu 15 May 2025 07:00:59 +0000
Files and hashes: 1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: xv7UOOaiOjRo8frL8GueAkIemjR7ryS7dkofuiXhK5o=)
2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:b6:a1:79:d2:f1:ed:b0:ca:a2:54:e9:83:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: May 14 07:00:59 2025 GMT
Not After : May 15 07:00:59 2025 GMT
Subject: CN=5d848b1c3aa0531fe60917ba0fecab12315d5470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:51:ca:b0:46:0b:5e:f6:02:f3:2f:2a:2f:
af:5e:f2:a2:7d:66:47:1a:63:1f:b6:7a:d9:2b:36:
a6:c8:76:b5:81:73:fd:16:c8:5a:5e:a6:e5:92:5c:
5a:d9:94:22:af:b0:3c:ac:76:9d:ac:8a:f5:aa:3e:
90:5a:4c:a3:e1:9b:5e:58:5d:76:aa:bb:c3:3e:16:
89:72:c1:8b:c2:1f:00:b9:75:07:79:0d:94:d0:dd:
56:c3:e3:02:9a:0e:3f:d1:ee:ee:81:17:31:c6:61:
6f:d9:f1:42:88:26:59:3e:9e:aa:5b:9b:62:96:5c:
0d:fe:84:68:30:c6:d6:f2:e2:4e:8b:8d:24:be:86:
09:e0:8d:58:94:19:04:d3:1f:3b:9f:98:d2:da:61:
00:9f:d3:bf:09:3a:23:7a:2c:59:39:30:76:16:d0:
02:74:7f:ee:49:07:8b:e4:f0:9b:db:ef:34:8b:91:
bb:d0:a2:f1:d3:65:fe:18:3c:e3:6d:88:de:1e:a3:
77:bf:a5:15:f0:8e:c7:31:26:6c:b9:fc:c9:ca:68:
7a:17:32:cf:c3:10:a9:39:90:8d:27:42:8a:e9:bc:
8b:70:fb:1a:25:cc:6e:5c:d7:65:ec:a1:85:3e:b0:
40:db:5c:c7:78:88:b4:ba:a4:5a:14:d8:f0:f1:a8:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:8B:1C:3A:A0:53:1F:E6:09:17:BA:0F:EC:AB:12:31:5D:54:70
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3b:58:eb:95:44:6b:89:cd:1a:01:46:64:ff:b0:3e:43:58:
04:db:74:16:57:ae:5c:06:0f:68:f4:86:33:f2:6e:8e:3d:33:
38:56:9c:12:fa:9b:9d:bf:a2:74:a8:f1:7e:c7:e1:bb:eb:9f:
f4:2c:4c:41:ad:a9:6e:f2:d8:ec:8f:90:60:fb:92:52:00:86:
52:ec:de:7a:35:7f:c2:cb:5e:aa:1f:81:c4:c0:dc:86:09:a7:
ff:10:86:21:d0:3d:73:9a:52:12:b5:8e:ab:25:f5:a2:98:6d:
a5:31:20:18:1f:fb:7d:29:a7:bb:d4:1a:c9:83:75:e3:3c:67:
3c:9d:1f:c4:bd:f0:75:fa:d6:00:4d:f6:13:13:f6:69:ac:75:
20:b5:72:71:5a:a4:a5:03:54:62:cd:35:90:ab:bd:04:2b:45:
55:82:c5:33:63:53:fd:93:2a:e0:ce:e5:d1:5e:f1:e3:21:21:
55:3a:31:96:46:15:4c:56:53:e7:bc:d6:ec:3a:05:6a:a8:71:
7a:f1:25:51:94:75:2e:47:e0:07:e6:2c:a0:69:ea:c0:ba:59:
e0:81:d2:9d:77:a1:c8:e0:8c:b1:0e:1f:07:c5:fa:e9:4f:d2:
3d:34:39:5b:0e:46:37:10:8e:99:b9:68:e1:b2:b5:d3:5e:0c:
f4:73:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:23:44 2025 by rpki-client