Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json)
Hash identifier: QxcXq05Tx2quPDRSOylAJ/YYJf7Og4/W8XXecHrZvZ8=
Subject key identifier: 1B:FC:B4:7B:AD:6E:2E:45:4C:3D:A4:25:61:A1:BA:76:2A:99:4A:75
Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Certificate serial: 019653B72084AFD9B0B06F8B3108D5CB93D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
Manifest number: 016B
Signing time: Sun 20 Apr 2025 15:00:32 +0000
Manifest this update: Sun 20 Apr 2025 15:00:32 +0000
Manifest next update: Mon 21 Apr 2025 15:00:32 +0000
Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=)
2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: ekg8ZpBgTjHr9llmJMyR+BKmzUgf8dx8sGHuQu8yCHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:20:84:af:d9:b0:b0:6f:8b:31:08:d5:cb:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Validity
Not Before: Apr 20 15:00:32 2025 GMT
Not After : Apr 21 15:00:32 2025 GMT
Subject: CN=1bfcb47bad6e2e454c3da42561a1ba762a994a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:43:73:03:50:51:fc:d1:82:87:d5:64:91:
8f:e1:af:a7:3d:03:5a:db:1a:4e:c6:5f:e2:7a:8a:
f4:cd:dd:f5:fb:33:75:d5:cb:c2:23:ac:ab:65:75:
44:45:3d:10:8c:fd:06:69:ad:92:28:d8:e4:4e:68:
1d:e8:18:e9:8a:c4:2b:9a:2a:76:01:75:8e:cc:64:
ec:48:55:c2:58:10:49:02:e8:ae:a4:88:44:58:63:
72:db:fd:e4:22:1d:de:f4:45:e7:77:d8:81:36:87:
a8:16:fe:da:95:c9:0d:d0:2e:93:19:22:a4:36:1a:
66:87:f7:e3:9b:22:2e:1e:bb:9f:d8:aa:d5:76:48:
83:e8:b9:7f:58:45:9c:be:7b:23:71:b3:4a:13:b4:
91:bf:f3:50:39:7f:82:51:78:e6:f8:a2:12:8f:23:
39:63:0e:71:56:33:47:10:11:bd:38:7a:5d:57:df:
d2:f5:29:c4:38:81:77:b0:7f:9d:1f:24:36:bb:06:
de:5d:e9:cb:4e:86:52:30:7f:22:d0:20:d9:16:5a:
58:ec:93:a7:cc:cd:f6:fb:a8:82:9b:27:81:23:08:
ca:a1:c8:cc:ba:52:60:03:ec:34:a5:c6:ad:c7:59:
dd:5f:6a:27:af:d0:47:e5:58:ff:65:3e:b0:d1:d3:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:B4:7B:AD:6E:2E:45:4C:3D:A4:25:61:A1:BA:76:2A:99:4A:75
X509v3 Authority Key Identifier:
keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:77:9e:72:e7:1b:1a:d7:52:45:71:b8:22:9b:12:19:51:
c1:e3:4b:b2:0e:34:26:79:7a:7a:5c:61:fc:9a:57:32:3a:e8:
8f:99:ee:76:4c:d0:1f:04:30:52:32:12:ab:96:6e:d4:0d:b9:
55:98:c5:b3:88:f8:16:3c:76:73:dc:84:e4:7c:b8:cb:4c:c9:
39:83:24:71:9f:69:7e:3e:d6:a0:b7:b5:3e:d5:2e:9b:25:57:
b6:79:33:7f:c9:9f:f8:3b:68:21:40:8a:e9:70:14:37:ba:a7:
2c:c7:70:e5:82:d4:01:b5:ae:67:86:1b:a6:f9:e5:c8:81:b5:
95:2c:8a:bb:74:5a:0d:ae:75:33:81:03:66:e1:bd:68:3f:94:
2a:3d:01:d4:c1:8d:de:77:a0:ed:31:56:a1:28:51:bd:e0:29:
2a:90:b3:2a:a4:fe:3b:2c:31:34:c8:80:04:ed:23:cb:e8:05:
ea:37:98:5c:67:7f:a0:33:4b:93:8a:d6:51:2d:73:e1:4e:6d:
89:d9:a0:82:56:1c:00:81:80:b1:55:be:8f:6d:72:31:e6:e5:
2c:76:b7:aa:57:14:79:df:4a:4c:7a:5c:ec:b2:bf:43:60:9d:
48:87:88:21:79:8a:0d:b7:d9:3d:47:a0:d0:12:64:63:24:2b:
e5:12:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:12:12 2025 by rpki-client