Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: e5Dz9lXnW2JFeogWZW0DRAEfDXDlcOT0bbJYUZPuJgM=
Subject key identifier: 65:95:F6:A6:F1:85:91:2C:BD:25:25:56:D1:D4:EF:16:39:12:9F:91
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 01964D477740A539A930F5BBBD5ED76FDA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 09:00:51 +0000
Manifest this update: Sat 19 Apr 2025 09:00:51 +0000
Manifest next update: Sun 20 Apr 2025 09:00:51 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: d2Fs9A1h0+xZL0tNRITZ8hc+WmoC4UXpQUejTLMwcls=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:77:40:a5:39:a9:30:f5:bb:bd:5e:d7:6f:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Apr 19 09:00:51 2025 GMT
Not After : Apr 20 09:00:51 2025 GMT
Subject: CN=6595f6a6f185912cbd252556d1d4ef1639129f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:34:50:23:d5:b7:78:93:59:77:3d:14:06:
38:31:fd:a9:cf:c2:d5:e8:84:a8:03:7c:a9:d5:2c:
7d:1d:8b:b6:e6:da:6c:cf:1b:50:bd:11:72:56:54:
13:91:a9:bc:88:63:6b:82:28:97:32:59:a3:48:82:
e6:c0:33:04:8a:d0:af:d4:10:46:c6:d0:49:0d:2f:
4e:7c:f6:95:3d:7f:4c:df:f0:52:74:c6:0c:ad:48:
11:72:ef:13:94:86:c0:a5:f9:8d:38:8c:bf:78:18:
7f:c2:23:79:f8:92:38:51:ae:32:ef:70:d7:6c:48:
17:96:43:e4:27:b2:26:4c:5c:7f:38:77:fa:1c:5d:
b2:94:72:46:c0:7b:14:d2:1f:15:b7:da:d0:32:8c:
e1:e5:0f:f9:00:4f:57:4e:25:b2:03:7e:b4:15:4c:
95:7c:18:65:33:25:02:86:89:cc:52:12:d5:e9:f7:
bf:09:c6:6a:55:9c:b1:ac:4b:4b:8c:d5:aa:f4:5d:
5b:53:f3:d3:18:ec:06:5d:6e:b5:0e:0e:72:40:67:
a4:92:41:cd:b9:6f:ba:af:e7:94:d1:81:86:e4:6d:
ea:4d:46:84:69:0c:ae:c6:f7:94:77:12:0e:3c:3d:
7b:9d:89:d4:ad:80:73:60:3d:5e:a2:20:7b:f1:e3:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:F6:A6:F1:85:91:2C:BD:25:25:56:D1:D4:EF:16:39:12:9F:91
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f7:da:ce:19:01:14:00:3f:91:5f:c1:96:c6:83:58:93:49:
1b:f9:1b:c4:c3:3b:31:ad:a6:c4:f6:b1:54:be:dd:b1:05:40:
c6:61:e8:78:22:20:ec:8c:82:f8:6f:73:63:6a:45:c2:ab:15:
4e:f7:ce:dd:96:60:34:b2:3c:26:53:72:d1:77:ea:ad:19:09:
92:7f:12:25:47:17:f6:24:ea:50:0e:79:43:04:c7:28:7b:1d:
96:e1:22:af:36:d9:a5:ac:6c:a8:eb:0f:da:ef:f0:5f:de:43:
59:f0:d8:4c:2c:ea:56:e7:d5:84:e2:0d:23:19:27:ba:a0:96:
78:92:34:c9:0f:2b:6f:e9:09:5a:fb:3e:77:ef:4b:21:9f:b8:
80:e3:af:c5:d7:e4:9d:59:ff:32:82:8d:03:6a:9b:a7:e0:7d:
71:7a:28:f8:26:a8:17:96:8c:ac:ea:46:f3:b5:1f:24:84:51:
83:c2:f9:40:6e:63:e6:85:70:a1:24:b5:9d:72:75:2d:0d:7f:
76:49:c4:30:91:c5:05:e6:3a:c3:cd:f6:92:d6:cf:cc:40:1c:
41:6a:dd:27:42:e0:25:77:28:7c:de:91:02:83:26:8e:ed:e5:
92:3e:13:9f:45:de:1a:b7:ab:56:3b:55:db:b1:c5:42:39:48:
1c:5f:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:49:41 2025 by rpki-client