Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File: W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier: dR3d0sIO29Ts1bmEL1soLCmCmLyf5UZ8nUaSH7yMPBc=
Subject key identifier: 19:35:12:61:EA:11:28:DD:08:48:FB:B0:AA:17:29:12:21:B6:F5:E1
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer: /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial: 0196545C2550D9CE547A108EA38D235806C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 18:00:47 +0000
Manifest this update: Sun 20 Apr 2025 18:00:47 +0000
Manifest next update: Mon 21 Apr 2025 18:00:47 +0000
Files and hashes: 1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: yB7dnq1zd7Ir/QJ9DxKCYhbNEdwO4V9Bxyr2emCuZIk=)
2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:25:50:d9:ce:54:7a:10:8e:a3:8d:23:58:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Validity
Not Before: Apr 20 18:00:47 2025 GMT
Not After : Apr 21 18:00:47 2025 GMT
Subject: CN=19351261ea1128dd0848fbb0aa17291221b6f5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:b8:4d:56:c7:7f:be:ba:22:2e:1e:21:2c:
00:4e:96:94:00:a1:ee:59:d2:0b:bd:32:00:10:7c:
e2:86:48:45:34:b5:aa:19:c7:bf:5d:58:b2:56:c2:
8c:66:25:c2:d7:75:bf:3c:8a:19:36:a7:1d:7e:17:
a4:b7:54:24:68:70:b6:d7:b5:a5:8c:20:46:ea:fc:
c0:9b:34:d9:a0:ae:5c:8d:11:c8:c2:a7:0e:fa:55:
ae:2e:db:61:32:78:49:84:83:9e:90:d5:cd:2f:ed:
b3:01:3f:37:0c:e2:cf:74:e9:d0:86:6a:bc:2a:8f:
f2:3c:de:67:a0:f4:c0:a2:96:d9:fc:ec:b6:67:3e:
f6:4e:f6:c9:b5:ea:ac:85:f0:7d:7e:81:5c:91:3c:
a8:9f:d6:79:ea:3b:af:c9:70:81:51:3f:6e:a4:1e:
cd:a4:16:c4:56:be:f0:d9:ac:1e:e7:96:8b:ec:09:
ad:8f:a9:29:7f:cb:d3:56:f1:68:2a:81:5b:46:c6:
da:48:61:10:8a:6a:54:0c:0a:b4:e7:d7:1d:19:25:
ab:44:fc:99:4a:cf:14:7e:1c:61:27:82:b6:1c:f5:
1d:a5:1d:f2:3f:d1:43:66:b1:74:80:5a:d2:57:06:
58:27:5f:43:88:08:c0:39:73:89:31:4c:d7:c9:b0:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:12:61:EA:11:28:DD:08:48:FB:B0:AA:17:29:12:21:B6:F5:E1
X509v3 Authority Key Identifier:
keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b3:09:0d:89:9b:64:c6:bb:d8:70:4d:cd:4e:79:00:83:52:
89:9f:21:1f:78:cc:d0:7c:d4:8b:b9:de:d3:4d:68:a0:71:bf:
f5:48:27:cb:f4:de:50:0b:13:76:15:c3:f9:a3:06:0a:5a:3c:
44:d4:4d:96:76:b3:a5:bb:b2:30:3b:ab:b7:b9:8f:e2:92:71:
57:bf:19:db:bc:f3:cf:38:77:e6:d5:69:2b:83:17:08:d1:77:
a7:a6:1f:eb:2b:62:6e:fb:b8:5f:90:fe:d9:ff:41:d2:6f:69:
43:d5:3c:92:4e:3d:c3:13:06:22:6c:0b:5d:27:3f:89:76:1d:
38:12:f8:18:e7:2b:ed:e4:75:c9:1c:5c:c0:55:7a:34:ef:7d:
35:bd:e5:b4:83:6d:23:1a:11:cb:58:96:e0:16:cd:04:de:c7:
68:5f:b4:a9:9a:6a:e4:d3:76:9d:c5:91:97:eb:fb:41:d0:0d:
92:0c:3f:ac:96:9d:85:9c:3d:18:4d:25:7e:f4:d9:71:1a:a5:
6b:27:ca:02:4e:28:45:3f:90:11:fe:e2:8c:b2:94:dc:b5:22:
7e:b2:ff:b2:63:9e:8a:32:e8:7b:80:51:05:44:e3:95:ce:93:
9f:2b:f9:57:c9:88:cb:87:57:d2:e1:33:3b:ed:a7:b2:4f:65:
65:38:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:55 2025 by rpki-client