Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: f8y7h0W6s+6bu9S47JLzkxT2EJWHvXU+HZwcq5XDZMQ=
Subject key identifier: 80:1A:95:2D:E2:3D:CD:9D:B8:79:8F:DA:BA:40:E7:F2:3D:80:E0:71
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 019645C5BBE37EE1F02822879EFA8A75FC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 14FA
Signing time: Thu 17 Apr 2025 22:01:48 +0000
Manifest this update: Thu 17 Apr 2025 22:01:48 +0000
Manifest next update: Fri 18 Apr 2025 22:01:48 +0000
Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: XIHiN8HWCrTusneOIeIstjGPIU5UKhhzNOf9QnPBMaE=)
2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:bb:e3:7e:e1:f0:28:22:87:9e:fa:8a:75:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Apr 17 22:01:48 2025 GMT
Not After : Apr 18 22:01:48 2025 GMT
Subject: CN=801a952de23dcd9db8798fdaba40e7f23d80e071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:29:17:67:10:76:3e:8e:a3:1a:d1:c8:df:
6c:b0:d1:92:17:1c:1d:72:b3:27:1f:ef:89:26:4d:
d9:e2:67:4f:48:ea:d7:fa:80:83:ac:c0:91:94:8b:
f6:6a:10:be:5c:84:3a:b2:09:7d:1b:68:52:0d:64:
c1:3b:21:65:6c:5e:75:be:f9:df:8a:98:5d:4e:f0:
3a:20:5d:56:7c:05:0c:74:4e:cf:6d:e4:60:f8:e5:
b1:69:de:c6:67:68:25:d1:e9:df:f7:a9:00:af:0f:
3f:53:5f:4b:6d:90:48:a5:28:92:32:af:14:52:a6:
7a:34:56:ac:1e:4e:b8:81:17:a7:3c:9f:9d:89:34:
9e:6e:d3:c9:5e:ea:01:24:dc:23:a0:29:b6:4b:96:
d2:07:15:ee:5d:a2:28:41:ba:17:20:7e:74:80:b3:
71:69:1b:5f:0f:ba:b4:37:7c:77:44:ad:79:9b:11:
63:b9:b7:a7:08:82:e3:fb:d0:c3:d1:72:82:05:3c:
54:e9:10:3c:25:dc:8a:6c:ff:14:90:cd:52:ae:45:
0e:1d:00:54:d3:82:9f:69:7d:e3:98:33:7f:96:26:
3b:01:d8:ed:6f:3f:a1:fb:24:d2:c7:58:61:85:e7:
8f:f2:6e:d1:d6:c4:de:d2:a7:64:7f:f7:d6:56:89:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:95:2D:E2:3D:CD:9D:B8:79:8F:DA:BA:40:E7:F2:3D:80:E0:71
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ef:89:d3:c4:4e:9c:ad:39:5f:96:8e:89:77:52:2d:0f:f9:
74:62:2a:7c:ed:76:38:2b:55:87:18:c0:c6:a8:9a:c4:0c:95:
29:2d:8f:9a:f1:57:99:7a:02:f3:a9:b8:31:0d:a2:f9:d6:67:
af:46:bd:49:26:74:67:38:24:c8:2d:4c:3a:8a:39:62:f0:6f:
7d:01:ac:dd:00:1f:a4:5b:e9:c7:a0:b3:90:7a:64:9a:f8:c9:
7a:51:69:50:79:1d:1b:4c:83:77:78:44:15:98:6a:5e:92:1c:
47:e8:81:39:03:8d:dd:fb:c0:40:ef:d5:a2:74:7d:51:ae:03:
18:a7:82:51:2b:f6:29:dd:dc:6b:d7:61:c7:43:08:53:e7:cc:
78:e7:ca:19:6b:3e:8c:10:7a:36:f7:89:08:e9:ac:1d:28:ce:
07:36:08:2d:af:b7:cc:97:75:f9:01:20:c6:6b:e9:ae:33:29:
b1:31:3c:54:7c:07:b1:89:31:3c:ea:59:0a:62:a7:7b:5a:7e:
7e:e6:99:27:6c:72:f1:2e:6a:b4:50:ba:cd:d9:ac:54:a4:23:
b8:61:d7:40:12:7a:d7:17:bb:8e:fd:b7:45:a9:73:7c:62:d2:
57:e0:e2:b1:47:5a:f6:17:67:f2:01:03:81:cb:ab:1a:b7:c1:
a6:58:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:55 2025 by rpki-client