Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: q2E2r20LnUF9myAIN79hYpyem9+dtgN18kT7zS6YP8I=
Subject key identifier: 5E:00:CB:A1:D3:D5:74:03:83:42:01:E5:82:23:1C:60:37:18:91:5D
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 0196477C096292DCA5424BB54112EB4D58F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 06:00:33 +0000
Manifest this update: Fri 18 Apr 2025 06:00:33 +0000
Manifest next update: Sat 19 Apr 2025 06:00:33 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: 9Rul70ui7/0Ep9VjmoEPRCBpaVWpsoM5MVNxz7DuwQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7c:09:62:92:dc:a5:42:4b:b5:41:12:eb:4d:58:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Apr 18 06:00:33 2025 GMT
Not After : Apr 19 06:00:33 2025 GMT
Subject: CN=5e00cba1d3d57403834201e582231c603718915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:44:44:56:02:d9:dc:9a:38:a0:1a:0e:82:
1a:1c:b1:ba:15:84:7f:59:f4:d0:0e:75:94:45:48:
71:60:ff:ab:79:fb:90:cb:78:88:74:44:c3:fe:5d:
6a:1d:d4:e6:44:98:9b:57:52:cf:b0:a5:f8:01:01:
ca:67:41:75:f6:6f:b2:09:a6:36:3d:8d:82:0a:d3:
75:4e:ba:a9:7b:2d:f1:5c:e4:de:cd:ad:c0:20:46:
ff:0b:c2:36:c5:74:89:46:ca:70:16:97:57:fe:08:
a4:81:ee:0f:be:b7:39:69:0c:76:b0:92:bd:de:cd:
43:0c:0a:1e:b2:f7:b8:fa:b8:a0:ec:c9:e0:94:bc:
80:3d:ca:14:63:9e:64:52:a1:74:0c:ff:d1:96:48:
b8:4f:fc:3c:fa:27:cc:ba:b5:a2:e3:57:46:9f:c8:
41:77:c5:5b:02:94:30:61:db:c0:4e:41:68:45:33:
67:d9:c1:f5:e2:60:34:e7:a7:64:00:52:26:f4:3a:
b8:2e:21:65:ef:ec:96:9a:f8:b6:6e:10:5c:ee:b4:
0d:32:a6:7d:4e:d4:db:db:ab:10:ec:21:e8:3c:37:
f0:75:37:b8:4a:51:da:fa:0d:44:37:c3:00:e4:93:
ce:d9:c5:3b:b9:35:72:cc:c7:7b:3f:db:24:22:c2:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:CB:A1:D3:D5:74:03:83:42:01:E5:82:23:1C:60:37:18:91:5D
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:86:94:c6:05:6e:e9:ba:30:35:5a:be:47:fa:a9:1d:25:e8:
d2:cb:52:4f:ab:b4:0c:23:e1:c6:3c:8a:d7:08:47:2f:e0:32:
56:73:48:59:4d:94:ea:54:f8:27:89:cb:e9:05:c7:11:e4:e6:
be:8b:90:24:10:1f:0a:9a:f0:3f:dd:90:18:c4:30:39:c4:da:
2f:bd:66:2c:db:fb:0d:93:9d:59:11:0c:cd:6d:fc:68:ed:18:
e4:46:87:29:ca:0d:1f:da:47:96:01:ac:ce:62:7c:a0:07:d7:
65:96:29:eb:6b:ad:79:2f:f5:49:6f:2a:d2:a8:45:17:ee:92:
4e:32:8a:bc:f9:6e:75:7f:f7:fa:1f:75:ed:8f:9f:b9:54:f4:
ce:9f:c2:6b:92:7b:cb:55:bd:5d:53:a4:45:6f:40:30:01:fb:
b3:d6:17:47:64:73:6d:bf:d9:84:b4:8e:43:9e:c9:be:fa:27:
e1:98:29:d5:42:ed:a1:c3:f1:8e:81:27:8e:be:65:91:08:06:
21:47:74:af:a1:cb:fe:7b:47:b6:15:0d:70:20:46:8f:47:50:
23:67:d5:06:f4:7f:21:8d:24:85:0f:7b:ca:af:a6:64:ec:e5:
12:71:20:64:32:70:d0:1d:52:11:fd:7a:06:84:89:0e:f7:f4:
c2:07:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:50:12 2025 by rpki-client