Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier: vbS2p03DU1a6AJtYVgTs8GHoR6DbkXwzkhzKwiC9tMM=
Subject key identifier: DF:BA:89:48:17:6E:C3:56:EA:47:CB:D9:96:31:91:CE:BB:3E:2E:12
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial: 019654251D732D8BB3EB75A30E339DB8648D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 17:00:40 +0000
Manifest this update: Sun 20 Apr 2025 17:00:40 +0000
Manifest next update: Mon 21 Apr 2025 17:00:40 +0000
Files and hashes: 1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: 8JaPJcg5l7ZfUdk5E9kPVYSwWRXVmq9x4mYBs2+Y/Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:1d:73:2d:8b:b3:eb:75:a3:0e:33:9d:b8:64:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Validity
Not Before: Apr 20 17:00:40 2025 GMT
Not After : Apr 21 17:00:40 2025 GMT
Subject: CN=dfba8948176ec356ea47cbd9963191cebb3e2e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:7d:a4:90:67:1a:db:b7:17:9a:69:c4:37:
45:aa:ee:d5:c6:ac:9b:54:36:76:aa:90:f2:3e:1f:
17:77:2d:ce:2a:eb:d7:26:1d:f3:c8:39:6b:54:aa:
f7:b0:f9:c9:8f:68:cc:a4:52:28:cb:25:af:73:40:
ae:42:0b:1b:3e:b5:e9:71:ce:cd:6e:d4:b1:6e:99:
77:d5:e8:62:e7:25:30:6c:89:ec:73:fc:b4:a9:eb:
a9:c9:7e:13:ea:d4:fe:ee:9d:42:dd:b0:5f:aa:b2:
67:ce:eb:b0:f5:b8:1d:3a:58:f6:9e:88:3c:13:4a:
53:84:9c:96:a2:d3:64:f7:dc:83:59:05:9a:7e:7a:
d2:ae:9a:70:bd:b6:54:a1:23:5d:27:28:25:79:5f:
0c:f4:e6:23:bb:7b:d8:2b:44:a3:1e:bf:35:d8:ab:
2c:76:13:97:61:5e:ad:ee:0e:b1:4f:14:1d:68:20:
e2:b9:34:40:8c:a3:bc:9d:3c:d9:57:19:01:00:5f:
28:d6:de:da:1a:77:84:ff:eb:25:4e:14:51:70:86:
c4:2b:4c:93:99:3c:4b:2f:96:ab:9a:ae:10:dd:6e:
d1:80:4a:58:79:70:e6:eb:f2:91:28:71:5a:eb:e4:
da:d6:9d:36:c6:57:b3:64:95:4e:b7:cf:15:c8:ba:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BA:89:48:17:6E:C3:56:EA:47:CB:D9:96:31:91:CE:BB:3E:2E:12
X509v3 Authority Key Identifier:
keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b7:ed:4a:4b:84:f5:12:c2:2e:00:96:09:28:fb:9c:46:bc:
9f:98:c8:57:7e:e1:61:74:dd:a3:d9:df:19:4f:46:ce:94:82:
95:10:9f:f8:65:34:0f:ad:e0:f2:be:ae:83:29:5e:43:77:e8:
2f:45:f4:e3:e7:83:60:58:36:9a:b5:d8:1f:21:61:b3:31:d8:
9b:93:74:e2:9c:ae:a7:e3:ee:db:7b:c8:fe:21:4d:87:27:d7:
7c:82:5b:b6:23:23:55:f5:dc:e7:d8:7f:cd:de:64:24:f5:b6:
2b:ad:ab:e6:0a:b4:79:65:cf:fe:38:01:85:cd:1a:f0:22:be:
6d:76:78:a1:a1:d5:a1:2c:3f:07:e0:a0:da:f6:dd:6f:c5:39:
b9:b7:db:a7:04:d4:e0:8d:38:80:6e:fc:3c:62:82:e3:ca:95:
3c:14:73:ee:7d:7a:9a:86:ce:77:27:0b:22:f4:43:be:22:10:
3a:c4:64:ac:38:35:4f:02:bd:61:3f:e3:6b:48:5f:f1:d4:f3:
83:f0:31:be:c8:d5:0c:8d:08:32:b2:8f:90:f1:26:12:9c:d2:
3b:59:88:34:84:3e:e8:32:6b:9a:c1:fc:0d:00:af:f2:69:43:
dd:78:01:71:57:5b:f1:8a:c3:24:06:6f:00:59:03:fd:d3:26:
a8:e0:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:22 2025 by rpki-client