Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File: W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier: nOn1VT47yunx2mtfxHtj5BQSb+KKtwkkocEGPGZbaNw=
Subject key identifier: D9:AF:D3:65:4D:81:21:EE:13:8B:02:F8:36:B9:C0:E1:68:45:95:26
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer: /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial: 01963EE68C5024542182E241C91CAEDD73D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number: 049D
Signing time: Wed 16 Apr 2025 14:00:18 +0000
Manifest this update: Wed 16 Apr 2025 14:00:18 +0000
Manifest next update: Thu 17 Apr 2025 14:00:18 +0000
Files and hashes: 1: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: 7BBOmhORpHv+tx4iVDv9iiMEwjMoXZwVZXhMWcVPkas=)
2: aC3k6Pc-VbYaZAExCYMf-r0FJik.roa (hash: sjHut+jtNlmiU2BIEntfi+uVsFkRaMGa8qqarc0jF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:8c:50:24:54:21:82:e2:41:c9:1c:ae:dd:73:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Validity
Not Before: Apr 16 14:00:18 2025 GMT
Not After : Apr 17 14:00:18 2025 GMT
Subject: CN=d9afd3654d8121ee138b02f836b9c0e168459526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c2:79:90:0f:b8:23:c4:47:94:93:e3:df:eb:
d1:59:df:d9:72:57:4e:1b:99:07:d3:c9:a8:87:d0:
b0:3b:0b:bf:a6:cc:e4:8b:2b:26:d6:c3:28:f5:25:
8f:56:c8:cc:02:bd:ba:a2:e0:b5:8b:9a:56:c2:49:
9c:27:74:eb:be:06:4e:f0:3a:e6:12:f0:b3:7a:f9:
b4:ea:28:ed:b2:f1:e5:36:46:dd:6d:53:09:90:ff:
87:90:a6:8d:aa:17:48:a7:a4:82:e0:a5:b3:6a:dc:
c9:cd:e5:d6:e6:66:17:18:c0:cb:8a:05:9c:41:f8:
ea:55:a3:c8:1c:7c:ab:58:6c:d1:4c:c8:9e:4a:95:
a3:5c:f0:eb:ce:25:c2:63:58:f8:d1:b5:55:fb:85:
40:a8:6c:d8:04:18:6e:34:a6:56:70:60:94:ba:2e:
7d:90:2d:cd:bf:f5:d3:85:3d:1a:79:2e:c0:17:a4:
54:55:d8:5a:30:a2:94:dc:d1:50:90:eb:4f:c1:05:
ff:51:f8:40:36:47:7d:e0:f7:a1:ec:f8:08:b8:a5:
07:87:fa:75:ba:11:47:ba:53:88:b0:ea:99:fe:af:
d7:41:25:eb:6a:86:8c:d0:f3:35:b3:7e:0e:45:f1:
87:e5:5c:09:c7:39:68:81:cf:04:0f:82:b4:ca:84:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:D3:65:4D:81:21:EE:13:8B:02:F8:36:B9:C0:E1:68:45:95:26
X509v3 Authority Key Identifier:
keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:60:34:7b:14:d6:fb:04:25:53:b8:f3:9e:74:95:70:0a:67:
40:de:b4:d9:10:8e:22:cd:75:82:cb:fb:c3:cc:ba:36:0b:d6:
23:d4:30:af:93:61:24:6a:a9:a7:17:5c:ff:21:6e:b7:a9:c3:
4d:2d:f8:38:bb:49:e9:44:45:8b:ff:34:5a:ca:f7:71:bb:2c:
b2:56:37:ab:d9:f7:27:4a:66:9c:21:7c:8c:ec:03:4b:c9:1d:
8f:d2:fe:9c:43:40:63:85:e1:f0:2f:5a:56:40:6c:cd:5f:5f:
bc:3c:a5:50:cd:96:a3:a6:12:90:0d:7d:63:ab:7c:34:41:3f:
8b:26:4b:c3:ba:f1:17:98:d6:bc:7b:10:74:8a:9c:c6:9b:88:
0a:c2:de:d0:f1:cf:4c:04:ba:37:37:9b:f6:da:a2:2c:72:4b:
0d:18:36:1b:3b:7d:8d:a6:69:fb:1b:1a:4b:c4:c4:97:4e:1c:
b4:aa:90:5f:42:21:1e:a2:3c:17:ae:70:0c:1f:21:d6:ae:88:
e6:cb:38:85:6c:b5:f2:9f:30:cf:92:81:be:18:d3:a0:08:97:
df:a3:fe:a4:e1:2e:67:ac:2c:43:d2:2f:e1:05:6e:2d:59:73:
42:6e:aa:4f:3a:c4:c4:87:e8:64:aa:96:8f:21:c5:01:8e:d6:
06:c0:32:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5oxQJFQhguJByRyu3XPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTYyMjFkYTg1ZjZjOGE4MDcwMzU3NjY4M2FkMmMzOTNm
MjNiY2MwHhcNMjUwNDE2MTQwMDE4WhcNMjUwNDE3MTQwMDE4WjAzMTEwLwYDVQQD
EyhkOWFmZDM2NTRkODEyMWVlMTM4YjAyZjgzNmI5YzBlMTY4NDU5NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisJ5kA+4I8RHlJPj3+vRWd/ZcldO
G5kH08moh9CwOwu/pszkiysm1sMo9SWPVsjMAr26ouC1i5pWwkmcJ3TrvgZO8Drm
EvCzevm06ijtsvHlNkbdbVMJkP+HkKaNqhdIp6SC4KWzatzJzeXW5mYXGMDLigWc
QfjqVaPIHHyrWGzRTMieSpWjXPDrziXCY1j40bVV+4VAqGzYBBhuNKZWcGCUui59
kC3Nv/XThT0aeS7AF6RUVdhaMKKU3NFQkOtPwQX/UfhANkd94Peh7PgIuKUHh/p1
uhFHulOIsOqZ/q/XQSXraoaM0PM1s34ORfGH5VwJxzlogc8ED4K0yoTW8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmv02VNgSHuE4sC+Da5wOFoRZUmMB8GA1UdIwQY
MBaAFFuWIh2oX2yKgHA1dmg60sOT8jvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVZaUhhaGZiSXFBY0RWMmFEclN3NVB5Tzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8yNjAzYmQtODE1Yy00ZmIwLTliOWMt
NTUzNDU4YzkwODk5LzEvVzVZaUhhaGZiSXFBY0RWMmFEclN3NVB5Tzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8yNjAzYmQtODE1Yy00ZmIwLTliOWMtNTUzNDU4YzkwODk5
LzEvVzVZaUhhaGZiSXFBY0RWMmFEclN3NVB5Tzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2A0exTW
+wQlU7jznnSVcApnQN602RCOIs11gsv7w8y6NgvWI9Qwr5NhJGqppxdc/yFut6nD
TS34OLtJ6URFi/80Wsr3cbssslY3q9n3J0pmnCF8jOwDS8kdj9L+nENAY4Xh8C9a
VkBszV9fvDylUM2Wo6YSkA19Y6t8NEE/iyZLw7rxF5jWvHsQdIqcxpuICsLe0PHP
TAS6Nzeb9tqiLHJLDRg2Gzt9jaZp+xsaS8TEl04ctKqQX0IhHqI8F65wDB8h1q6I
5ss4hWy18p8wz5KBvhjToAiX36P+pOEuZ6wsQ9Iv4QVuLVlzQm6qTzrExIfoZKqW
jyHFAY7WBsAyag==
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:06:19 2025 by rpki-client