Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File: W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier: GI2BDpIBdAPalTBpcvrIAac7sPhm3xCw9SncNKiaVmk=
Subject key identifier: E2:28:AF:B7:92:FD:67:71:20:4A:EE:B4:2A:5D:5C:9A:16:03:03:E8
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 0196575CF2FF738047F97DFD528C1FC893E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number: 0AAF
Signing time: Mon 21 Apr 2025 08:00:31 +0000
Manifest this update: Mon 21 Apr 2025 08:00:31 +0000
Manifest next update: Tue 22 Apr 2025 08:00:31 +0000
Files and hashes: 1: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: ZPrzb4tE4s4RsBDlaSf5cbG1sqlIFld5Gg7XO5p+3n8=)
2: WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa (hash: 9FkYuv3N9sKiJBFCLi9r1CgkkKmg2nuXBs/YrWrih48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:f2:ff:73:80:47:f9:7d:fd:52:8c:1f:c8:93:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Apr 21 08:00:31 2025 GMT
Not After : Apr 22 08:00:31 2025 GMT
Subject: CN=e228afb792fd6771204aeeb42a5d5c9a160303e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:54:28:9c:b5:ab:0d:93:81:5c:93:c1:e0:
27:88:05:a4:1d:15:fa:db:2e:b6:e7:f2:12:8d:19:
e2:9a:c2:70:cb:68:a9:c0:c3:4a:d2:d5:b1:b3:ff:
24:66:e4:50:d4:4e:8b:ed:9a:77:ea:45:68:36:ef:
f3:51:08:48:7c:43:72:14:b5:ab:e4:2c:a3:96:9e:
38:50:d1:d4:f9:0a:05:2e:b0:e3:91:93:cf:88:53:
9b:76:8f:30:20:dc:02:28:17:67:f1:e4:4b:90:f9:
7a:8b:ed:df:36:34:1e:2c:e7:ea:b1:75:20:89:bc:
d8:2d:37:f6:d0:55:35:8e:77:1b:2e:d4:0d:4e:a9:
50:32:9e:21:ef:d5:df:89:5f:0c:89:ba:f1:fe:9f:
2f:0a:73:34:2f:9a:99:c1:19:54:f5:0b:1a:f5:22:
16:78:19:f6:3a:20:33:09:00:48:c4:a4:56:73:72:
72:f4:d3:53:04:5d:fb:3f:2d:35:ae:b3:63:2b:14:
78:64:ef:5e:7d:d5:55:13:1f:f6:56:36:9b:84:bc:
72:d9:4f:36:5a:38:52:56:d6:4a:1d:3e:ce:41:be:
d8:be:01:aa:8a:5d:d8:10:ee:53:e0:7b:e0:3c:e4:
67:06:8a:b0:e2:70:f5:7f:ed:9c:e4:a4:2d:1c:d9:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:AF:B7:92:FD:67:71:20:4A:EE:B4:2A:5D:5C:9A:16:03:03:E8
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f1:de:ce:f8:1a:f0:aa:5b:42:a4:22:11:96:ee:60:00:3e:
fa:e5:a1:80:e5:80:18:a4:31:75:16:8f:11:69:04:03:36:ad:
5d:bc:50:9b:b1:5a:29:14:03:72:f2:2a:c5:bc:ea:18:97:7a:
44:c8:28:8f:e5:e8:9d:3b:09:42:6a:47:9a:5c:09:8d:a4:9d:
84:81:b6:78:3f:54:9a:b0:11:82:5b:6b:2c:fa:40:d6:bc:1d:
3b:b6:5c:1d:df:68:5f:ba:2a:2a:b4:00:b0:fe:54:42:e6:48:
29:e7:c1:99:01:6c:b4:95:16:ec:5f:31:08:ac:14:b8:5a:be:
2b:75:3a:94:80:aa:aa:e3:2b:42:73:10:79:a7:ef:66:82:cc:
7d:65:72:09:08:98:98:81:1d:cf:a3:6f:44:43:de:54:88:c5:
6a:fb:98:9c:f4:80:73:e3:59:78:cc:7d:b2:c0:7d:b5:3c:f3:
2a:ef:1e:c9:86:c1:09:05:87:99:f9:20:e0:40:16:39:c1:75:
43:ef:f9:ec:fe:7b:c6:f1:7d:0c:66:4e:23:39:b4:f0:5b:2d:
84:57:8b:49:f7:45:d5:f2:69:79:67:52:fc:3e:f9:b1:d6:1d:
ec:79:67:63:24:de:9b:42:67:0b:86:68:09:8f:a8:a2:cb:7a:
93:d6:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:42 2025 by rpki-client