Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File: w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier: 6cRRbd8WEe/XUtWg6LIiqLzhcpDz5Rg97kkBhwiPakg=
Subject key identifier: FF:BE:5B:BA:C9:59:77:E1:F1:09:FA:4C:0E:62:09:A6:50:7E:79:57
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 01965B71423F3E46AC0B28297AFC8F6D5546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number: 05C6
Signing time: Tue 22 Apr 2025 03:01:11 +0000
Manifest this update: Tue 22 Apr 2025 03:01:11 +0000
Manifest next update: Wed 23 Apr 2025 03:01:11 +0000
Files and hashes: 1: ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa (hash: tGIGMmrAiBAVPdoPhNgWbiaEcKncDLBEr0fehIJsIkA=)
2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: uWDX11g0QcWG5bu5bAtESCLulnUA3vFz5mnKitNsB4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:42:3f:3e:46:ac:0b:28:29:7a:fc:8f:6d:55:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Apr 22 03:01:11 2025 GMT
Not After : Apr 23 03:01:11 2025 GMT
Subject: CN=ffbe5bbac95977e1f109fa4c0e6209a6507e7957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:36:c6:83:b3:ca:97:a2:e7:c3:58:6c:f4:
f0:e3:7b:af:80:4a:5a:7d:a6:71:90:71:10:86:14:
66:b7:85:1e:fa:c6:58:a8:ef:1d:f6:39:0a:eb:50:
ef:ba:9a:a7:9a:e8:ce:f1:d8:08:06:13:82:69:2b:
5e:59:68:b8:48:3b:40:0a:9f:00:a4:ad:51:7d:9f:
5a:88:20:60:ce:5e:58:dc:f4:e3:cc:dc:dc:9c:d8:
21:e3:6c:5d:7d:e0:8e:31:bf:e0:59:48:2a:9f:5c:
ad:fd:4b:5a:84:1e:53:78:ff:9f:64:ee:30:cb:ca:
f4:d5:51:d5:80:3f:9b:7f:72:ff:53:88:43:bc:59:
b1:1c:9e:3b:78:cc:04:7c:6e:b2:fe:55:12:13:f7:
86:5e:d0:ea:91:59:a8:be:cb:8a:98:18:46:1b:ab:
ea:a8:55:6a:c4:ae:39:78:ac:f6:d4:26:86:3f:c4:
07:7e:10:69:f1:91:e2:fd:13:ff:81:80:24:fc:52:
a5:26:82:23:fb:fd:c2:fe:24:ff:47:db:ec:27:7b:
9a:2e:f1:b7:26:86:59:1c:74:88:92:b0:49:48:56:
5f:52:0b:3e:44:d2:14:6e:f4:e5:6d:88:82:b0:4c:
93:bf:64:1b:ca:d2:77:eb:56:cd:75:a4:34:0a:1c:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:5B:BA:C9:59:77:E1:F1:09:FA:4C:0E:62:09:A6:50:7E:79:57
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7b:40:59:bc:56:a4:43:51:a1:ad:14:b0:e9:a1:51:66:d9:
a8:a4:40:2c:a9:76:05:08:65:6b:ee:89:69:e1:de:7c:f3:9f:
60:77:65:0b:cf:84:7d:50:b6:ed:8c:7f:9f:c9:a9:b3:42:4a:
5b:a8:c2:ee:87:e9:35:9e:b0:19:f8:ff:a3:8c:1c:b7:97:36:
af:a0:aa:73:86:0f:70:48:42:0f:25:69:c0:37:63:e2:31:e1:
71:1f:5c:b4:05:65:a4:64:b0:1d:6c:d0:da:e5:45:0e:28:33:
a2:11:51:73:37:69:86:88:66:57:3b:c3:f0:1d:1c:08:2a:a1:
fe:52:31:bd:9e:72:82:37:cd:3b:dc:9e:b7:50:4a:63:17:bc:
82:73:c7:66:63:44:94:58:e7:e8:a4:50:28:64:be:64:6f:e9:
3b:2f:b4:01:b4:14:a0:1e:bf:b9:a6:76:59:c5:9e:ef:8c:ce:
33:d6:6b:02:07:dd:e1:1f:fd:f7:ff:c9:fb:36:de:3f:62:bb:
af:9a:08:b5:31:fa:19:f2:4c:d2:54:63:b5:b8:83:92:7f:8e:
57:74:3a:cf:7a:b4:91:47:b3:29:99:a2:01:c4:e9:d7:f3:81:
73:5d:11:30:fd:46:94:f7:03:44:9b:d6:36:e2:76:a6:5e:10:
db:0b:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:05:17 2025 by rpki-client