Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
File: w5JjfwbbxBhtlQKakrKbMOn0lA0.mft (raw, json)
Hash identifier: xnDt+0Ib5p0A6OJ5Dh4xIYPh9KTQ6wVuNIzKDTU03Ds=
Subject key identifier: 21:46:79:F0:53:A0:A6:D0:B2:06:2F:29:6B:C3:09:12:6A:FD:BB:8F
Authority key identifier: C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
Certificate issuer: /CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Certificate serial: 01964556EF9656E4EC3C314DE0C47B4A298F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
Manifest number: 026E
Signing time: Thu 17 Apr 2025 20:00:47 +0000
Manifest this update: Thu 17 Apr 2025 20:00:47 +0000
Manifest next update: Fri 18 Apr 2025 20:00:47 +0000
Files and hashes: 1: w5JjfwbbxBhtlQKakrKbMOn0lA0.crl (hash: 9wcSD5rdAAlHg/IHeBeFaXEz16Y0Qpa221imc/wiNTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:ef:96:56:e4:ec:3c:31:4d:e0:c4:7b:4a:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c392637f06dbc4186d95029a92b29b30e9f4940d
Validity
Not Before: Apr 17 20:00:47 2025 GMT
Not After : Apr 18 20:00:47 2025 GMT
Subject: CN=214679f053a0a6d0b2062f296bc309126afdbb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:99:c0:06:68:64:1f:c7:89:df:8f:9d:a4:
d4:a3:e7:9f:6c:24:6c:70:70:97:5e:98:8a:36:8a:
76:61:d1:40:35:43:06:fe:a0:39:dc:c5:40:14:68:
56:15:9c:9f:1e:bd:07:6c:c1:b7:86:91:b4:8f:41:
fa:c2:29:e8:fe:f8:5f:da:04:91:10:02:0b:b1:8c:
9b:46:f7:5d:12:a3:c9:08:66:95:03:cd:2f:e7:d6:
6f:de:a4:c2:f9:ed:b6:8f:02:29:17:10:40:b7:e9:
45:93:35:a1:53:e7:17:e3:d3:7a:e8:55:44:4f:a8:
4e:da:ca:cb:ff:cc:d2:aa:94:38:ff:a5:50:32:59:
06:98:81:85:7e:e7:a8:c7:20:d2:f9:b7:3f:4f:03:
53:cd:0b:59:7c:21:0b:31:df:cf:eb:76:e1:00:84:
76:ab:34:48:aa:ac:cb:47:ec:88:1b:ee:27:34:5c:
67:ba:07:53:75:c5:8c:f8:32:7c:15:ed:86:e5:a7:
1c:73:ba:29:4a:71:96:da:8a:d4:b2:d2:20:7c:bc:
12:71:5d:12:e4:4c:4a:ed:37:46:00:35:91:69:f3:
b5:0d:72:21:b3:33:1b:3d:5b:d0:fb:89:00:b7:55:
5e:b5:b9:f9:07:83:18:ad:80:a9:5f:9c:13:b3:21:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:79:F0:53:A0:A6:D0:B2:06:2F:29:6B:C3:09:12:6A:FD:BB:8F
X509v3 Authority Key Identifier:
keyid:C3:92:63:7F:06:DB:C4:18:6D:95:02:9A:92:B2:9B:30:E9:F4:94:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5JjfwbbxBhtlQKakrKbMOn0lA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/825b0b-976f-472e-a6a1-ce4d96f492ec/1/w5JjfwbbxBhtlQKakrKbMOn0lA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:c5:14:d1:3b:a8:b3:91:14:85:ad:16:e5:ed:8f:f6:88:
14:fd:16:2d:1e:b1:1f:8c:d7:a7:90:03:b6:06:97:44:b0:f6:
c0:6d:62:e5:5b:28:93:a1:17:cf:ac:5a:46:e5:f5:e3:89:27:
d5:b9:59:9b:22:e4:a2:28:d4:38:e7:d3:5c:c6:c0:16:2a:80:
64:78:f8:27:57:ab:bd:be:f7:e0:89:69:5c:fd:59:95:16:45:
0a:ed:19:5a:c2:91:7b:63:43:5c:33:33:5e:5c:b1:16:d1:30:
f5:22:46:3c:10:78:e6:96:cb:65:b0:52:ff:c7:ad:e4:c8:6f:
ab:9f:4a:db:e6:1c:39:7e:f0:64:1d:62:6c:f5:29:5d:b1:46:
1a:a5:6d:e1:9f:4c:8c:cf:49:f3:57:61:0c:ec:f1:93:0a:a6:
b9:bc:52:6a:c7:a6:0c:87:e0:4d:e2:87:9e:12:a7:aa:f4:89:
9f:26:97:e6:68:8c:11:ce:b9:1e:e5:85:0c:0f:f2:e4:e0:45:
41:ad:eb:84:42:f2:a1:7b:df:92:6e:92:fb:7a:97:19:b9:31:
45:bc:33:7e:10:ed:c2:d4:de:8a:41:ef:cb:8d:24:67:5f:ff:
31:f6:f8:63:b5:65:f2:3a:70:45:d3:28:33:45:1a:5b:f3:19:
60:5d:ab:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVu+WVuTsPDFN4MR7SimPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTI2MzdmMDZkYmM0MTg2ZDk1MDI5YTkyYjI5YjMwZTlm
NDk0MGQwHhcNMjUwNDE3MjAwMDQ3WhcNMjUwNDE4MjAwMDQ3WjAzMTEwLwYDVQQD
EygyMTQ2NzlmMDUzYTBhNmQwYjIwNjJmMjk2YmMzMDkxMjZhZmRiYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbqZwAZoZB/Hid+PnaTUo+efbCRs
cHCXXpiKNop2YdFANUMG/qA53MVAFGhWFZyfHr0HbMG3hpG0j0H6wino/vhf2gSR
EAILsYybRvddEqPJCGaVA80v59Zv3qTC+e22jwIpFxBAt+lFkzWhU+cX49N66FVE
T6hO2srL/8zSqpQ4/6VQMlkGmIGFfueoxyDS+bc/TwNTzQtZfCELMd/P63bhAIR2
qzRIqqzLR+yIG+4nNFxnugdTdcWM+DJ8Fe2G5accc7opSnGW2orUstIgfLwScV0S
5ExK7TdGADWRafO1DXIhszMbPVvQ+4kAt1Vetbn5B4MYrYCpX5wTsyGCLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFGefBToKbQsgYvKWvDCRJq/buPMB8GA1UdIwQY
MBaAFMOSY38G28QYbZUCmpKymzDp9JQNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVKamZ3YmJ4Qmh0bFFLYWtyS2JNT24wbEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84MjViMGItOTc2Zi00NzJlLWE2YTEt
Y2U0ZDk2ZjQ5MmVjLzEvdzVKamZ3YmJ4Qmh0bFFLYWtyS2JNT24wbEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84MjViMGItOTc2Zi00NzJlLWE2YTEtY2U0ZDk2ZjQ5MmVj
LzEvdzVKamZ3YmJ4Qmh0bFFLYWtyS2JNT24wbEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADP3FFNE7
qLORFIWtFuXtj/aIFP0WLR6xH4zXp5ADtgaXRLD2wG1i5Vsok6EXz6xaRuX144kn
1blZmyLkoijUOOfTXMbAFiqAZHj4J1ervb734IlpXP1ZlRZFCu0ZWsKRe2NDXDMz
XlyxFtEw9SJGPBB45pbLZbBS/8et5Mhvq59K2+YcOX7wZB1ibPUpXbFGGqVt4Z9M
jM9J81dhDOzxkwqmubxSasemDIfgTeKHnhKnqvSJnyaX5miMEc65HuWFDA/y5OBF
Qa3rhELyoXvfkm6S+3qXGbkxRbwzfhDtwtTeikHvy40kZ1//Mfb4Y7Vl8jpwRdMo
M0UaW/MZYF2rrw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:54:07 2025 by rpki-client