Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File: W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier: 9KWcG2NNiTdwyftn2aCc8z3tfeQ//uxYZ3Qq/fUxFkI=
Subject key identifier: 35:8C:4A:2A:18:AB:EF:8C:14:47:F7:50:7E:4E:EE:9A:F5:59:6F:8B
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial: 019655DCD825849B910E774FB1EE2CEA02F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number: 0938
Signing time: Mon 21 Apr 2025 01:00:58 +0000
Manifest this update: Mon 21 Apr 2025 01:00:58 +0000
Manifest next update: Tue 22 Apr 2025 01:00:58 +0000
Files and hashes: 1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: bm4gdJOzfXTMh9FRmK59FwI7UwSVBgV0/vpXRmP1T5s=)
2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:d8:25:84:9b:91:0e:77:4f:b1:ee:2c:ea:02:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Validity
Not Before: Apr 21 01:00:58 2025 GMT
Not After : Apr 22 01:00:58 2025 GMT
Subject: CN=358c4a2a18abef8c1447f7507e4eee9af5596f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:de:16:79:d0:c3:f5:2f:61:7b:08:ef:84:
93:c8:54:d5:d8:ae:54:94:f9:f4:8d:ec:59:bf:c8:
05:16:82:91:c0:53:db:5f:0f:f6:0a:72:69:19:ab:
fd:ea:9e:87:e0:64:4d:cd:f1:a2:94:7b:ab:10:d2:
59:5d:be:fe:96:b1:c5:76:b7:32:95:60:65:12:79:
7b:2a:59:d2:8e:7f:a4:8b:a7:b7:93:de:07:67:d6:
75:44:62:cd:66:d8:74:aa:d8:03:82:cb:42:7d:46:
91:b6:df:df:22:8c:da:f5:3a:d7:9f:80:d1:51:28:
e5:83:8d:85:bf:58:77:e6:19:f0:5c:9f:78:85:4f:
1b:44:e3:f5:50:b3:ae:dd:a5:5c:6c:f7:90:e0:e0:
0f:4c:f5:5c:d3:59:81:6d:e1:9b:11:c5:10:88:78:
cc:46:64:4f:50:d2:29:5b:d7:52:b8:84:17:96:fc:
ed:6f:eb:08:c7:15:68:c7:69:c6:c1:2b:ee:85:b1:
1e:44:00:94:a3:e8:d2:b1:ae:8f:ac:19:8c:ac:a1:
7a:19:45:2c:67:c9:eb:ed:4a:d1:d7:8a:1d:0e:59:
a9:05:78:ce:11:ec:1b:8d:be:a8:76:7b:16:56:b1:
26:99:8a:9a:74:59:ac:74:8a:72:f7:4f:ce:f9:b9:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:4A:2A:18:AB:EF:8C:14:47:F7:50:7E:4E:EE:9A:F5:59:6F:8B
X509v3 Authority Key Identifier:
keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f4:9b:07:d1:46:51:73:82:23:3b:8b:68:bb:4a:73:ed:50:
71:75:b5:2d:5a:0e:69:3c:3b:af:b4:64:96:2b:4a:47:3f:4b:
ab:2d:01:aa:ec:49:b0:6a:c5:36:a7:69:68:8a:e1:26:da:a0:
ff:4e:61:36:0f:92:0e:78:40:5e:e5:02:f8:3d:05:27:96:2b:
7e:83:16:53:ae:15:fb:d5:9d:00:33:87:58:0a:31:cb:f6:4f:
67:23:c0:49:39:6d:b6:31:e4:f4:d3:c1:67:03:1a:8d:99:b3:
a2:68:cc:e1:06:77:97:d0:0f:d1:44:3a:e3:3a:2e:cd:c5:e8:
2d:97:db:01:fb:47:3f:88:e0:a8:81:31:5b:cb:74:55:65:b3:
f6:ed:c1:69:03:32:96:eb:09:70:1c:06:03:51:3e:07:da:b1:
7c:e0:b4:de:60:8e:18:4e:ff:27:aa:d7:38:61:eb:c6:6d:1a:
3c:95:7a:8d:14:e3:52:2a:7e:b1:42:4c:01:03:e0:d0:00:98:
bd:e5:cb:f0:5d:36:16:94:ff:6f:c8:00:56:31:96:7e:58:94:
76:31:d5:4b:b2:20:d3:da:56:ba:ed:28:3a:e9:f6:32:a4:0e:
be:17:03:8f:da:57:80:4f:8b:5a:ef:b1:05:05:b9:4c:10:44:
30:51:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:50:05 2025 by rpki-client