Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
File: W2k88e71-wv3LtXC4ihn0RJK89g.mft (raw, json)
Hash identifier: Zi4YGocr25Cq2zuGmB9bIDMlKhPqC970qpQdt62D0s0=
Subject key identifier: F6:6F:4E:53:17:EE:12:44:09:6F:E1:CD:8A:12:41:F8:AA:2E:62:09
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 0196545BDEF3C0061C7FC59BF116550800A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 18:00:28 +0000
Manifest this update: Sun 20 Apr 2025 18:00:28 +0000
Manifest next update: Mon 21 Apr 2025 18:00:28 +0000
Files and hashes: 1: SV9kNq2IEFMcsiU27EYmGZik5t0.roa (hash: 4jyjlSiN/7n2r//5rSK3grDPFtbjn3ApiThCyxJ+2wk=)
2: W2k88e71-wv3LtXC4ihn0RJK89g.crl (hash: IiqRm92llEdqDMGeJXw302y2MS2dtxioIM8FLGNqGSg=)
3: g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa (hash: Vtrkb6OsU8qQ3CnvGKXLNE1uPP6pvCa3n/XLcp+xWOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:de:f3:c0:06:1c:7f:c5:9b:f1:16:55:08:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Apr 20 18:00:28 2025 GMT
Not After : Apr 21 18:00:28 2025 GMT
Subject: CN=f66f4e5317ee1244096fe1cd8a1241f8aa2e6209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:72:eb:e2:84:d0:a3:8e:b7:66:24:3c:6b:ef:
40:a5:c2:14:13:22:92:3e:3c:b9:50:39:4e:bb:c3:
fd:2d:89:95:1d:cb:00:67:8a:9f:8b:12:b8:dd:9f:
e8:d1:f9:55:31:59:40:93:33:c4:ee:23:90:9e:fa:
01:0d:27:26:25:87:c6:b2:95:fe:78:b6:2d:2e:9c:
6c:c7:65:40:78:df:e2:42:b7:b8:f7:7b:25:36:7e:
e1:4a:b3:a3:bd:c8:62:af:72:4e:ad:bc:5c:32:57:
b7:aa:95:b6:c3:6f:ac:05:92:b1:2d:81:29:2a:b7:
d8:c7:90:ac:01:a8:be:2e:08:44:09:9e:ee:80:ac:
31:1e:e1:8b:17:20:3e:dc:15:73:dd:c3:4e:33:3c:
c9:46:13:79:cf:45:dc:2e:d4:e7:ab:4f:85:02:97:
77:2e:93:8a:e5:2a:6c:ec:69:17:da:00:b3:82:e0:
92:69:56:ce:13:2c:37:bd:e8:6e:fb:b0:57:8c:f6:
20:13:b8:50:00:74:de:32:26:e2:18:25:c3:47:61:
cc:c6:4a:27:71:36:5f:44:f6:f6:bf:09:47:4e:ed:
06:29:02:93:ca:ab:66:2e:05:75:b7:2a:68:6f:a4:
bf:2a:ab:0f:93:b1:73:ef:45:55:df:28:b4:ba:99:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6F:4E:53:17:EE:12:44:09:6F:E1:CD:8A:12:41:F8:AA:2E:62:09
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f5:e8:59:ac:9c:d6:95:65:d9:d7:a8:8a:a1:5d:a8:33:6c:
d2:4e:5b:3d:2a:02:24:69:6a:ae:03:b2:69:2b:83:a8:13:10:
17:2e:59:72:a2:e3:4e:b7:ec:a0:cd:35:61:87:e3:19:8b:3a:
29:88:3c:36:95:93:08:77:9e:78:2c:13:64:bb:8e:f7:7c:9e:
87:ab:e4:d9:0b:5b:d8:6b:51:24:93:c5:6e:6d:1b:ce:6f:e6:
3d:8e:94:2a:8a:d2:0c:06:7a:a9:48:85:2d:39:a3:73:95:c3:
d4:f6:92:23:7d:55:ef:aa:dd:c3:94:fa:bf:99:d1:2b:87:16:
47:4f:b8:1f:31:95:17:f2:cb:e6:55:7f:64:fe:93:14:ef:f3:
ab:65:3d:38:73:b4:6f:a4:46:2a:81:4d:1a:b8:08:47:09:32:
40:a5:5d:93:ed:c8:01:ea:33:71:34:28:3b:8f:91:0d:38:23:
2a:d9:d2:7e:8c:3c:23:89:6a:12:f5:93:6f:ea:01:75:0f:98:
7b:fd:44:34:6b:6c:3f:2c:7b:b3:e6:6d:09:4f:ae:a7:bb:f5:
b7:5d:76:ac:88:a9:c0:c9:ee:d0:fe:fb:b0:e8:c6:65:53:ce:
bd:69:08:1a:c8:a4:f9:b4:79:5f:a7:90:a6:12:dd:1f:23:58:
e3:91:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:59:06 2025 by rpki-client