Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: V8DvZSxAVbEOrpqjvocF/dhpEnzuXydfpCqneC4g+D0=
Subject key identifier: D7:21:5A:7B:02:98:EF:51:22:70:79:E9:FB:31:60:1A:81:0F:27:6C
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 01964F6CCF39789203D24E5044128E1F5F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 1108
Signing time: Sat 19 Apr 2025 19:00:53 +0000
Manifest this update: Sat 19 Apr 2025 19:00:53 +0000
Manifest next update: Sun 20 Apr 2025 19:00:53 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: fmr8AprOlF7xbCsvbsWeW/OOQ0ns9mvoTMlzHc0orTI=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:cf:39:78:92:03:d2:4e:50:44:12:8e:1f:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Apr 19 19:00:53 2025 GMT
Not After : Apr 20 19:00:53 2025 GMT
Subject: CN=d7215a7b0298ef51227079e9fb31601a810f276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:86:39:df:d8:e6:eb:64:98:30:ec:b2:b1:
ca:ff:f9:d8:58:76:aa:90:5f:52:b8:e5:fe:5f:82:
87:01:ad:58:d3:27:20:64:94:3f:c8:a4:22:b8:8d:
73:8a:53:dc:0e:af:97:4d:05:ed:d9:34:c4:b3:2b:
3a:22:e2:5d:b7:4f:d9:0d:83:3e:61:7d:15:06:72:
5d:63:7b:1f:80:9f:04:e5:27:fb:49:2f:da:71:c1:
38:0a:b4:db:d3:a8:3a:76:9e:1c:a4:27:52:a1:08:
da:56:27:84:f2:cf:ff:b6:7a:fa:99:12:b8:5d:a0:
70:22:b6:8f:25:31:93:d2:19:a5:ce:46:a9:c3:df:
14:88:d0:50:98:22:6e:7b:bb:da:28:63:c9:1a:42:
45:03:0f:ec:7c:bb:ba:8b:07:e6:97:ca:3e:b0:58:
53:dd:7e:39:a1:43:55:6a:c1:94:d6:7e:6a:dd:60:
f5:50:5f:25:7a:f1:39:fc:10:ef:43:6f:9a:17:35:
c3:df:2e:f5:3d:a6:d4:5d:0c:3e:11:55:83:32:31:
18:74:84:47:07:54:92:54:ba:3e:cc:2a:6f:36:ec:
0a:92:96:ad:8d:3e:2f:4d:ed:0a:f7:92:ee:9e:f0:
e1:77:fd:05:e5:bf:36:48:40:bb:38:18:e7:12:14:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:5A:7B:02:98:EF:51:22:70:79:E9:FB:31:60:1A:81:0F:27:6C
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b6:82:e4:e3:e3:e7:7c:ff:5f:7b:69:2c:d0:e2:a6:44:ec:
6c:6b:14:a3:53:1a:66:0c:ba:e0:88:c0:f6:56:18:e0:d4:1a:
98:ed:cc:01:c0:70:e5:a3:ce:7c:56:e0:98:80:c2:9a:19:64:
8a:5e:ff:24:7c:c8:13:9a:39:75:74:9a:24:c3:3b:e9:93:9a:
e3:2a:b8:5e:55:29:3b:38:6c:5b:1e:f2:98:42:ef:88:07:06:
c5:7b:68:24:35:f9:76:b0:1a:b1:63:27:61:0c:4a:a3:85:ce:
2e:b1:e4:4a:53:78:55:ff:d3:29:fa:8b:8d:e7:01:a2:4c:8c:
79:c0:18:8c:ec:b1:f2:87:79:04:60:3e:81:53:45:d0:cd:31:
15:0f:a3:5c:05:8c:d2:db:52:73:77:fb:e6:cc:c6:c1:4c:95:
c3:72:9a:fc:5a:13:32:e3:2c:68:1c:da:09:29:4d:54:c1:20:
12:e9:bb:7b:4b:d9:8a:4b:43:9b:76:40:aa:24:57:3d:ed:d8:
62:42:58:65:3e:e6:90:1b:04:13:f1:9a:bc:81:03:29:57:71:
01:0d:c6:30:4f:5f:28:04:33:3f:78:53:e3:4c:9b:20:45:93:
d9:bb:37:a4:7e:f1:dd:7c:6b:36:89:c0:6f:8a:0e:48:dd:64:
9a:c2:21:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbM85eJID0k5QRBKOH19lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYjFjNTcwNTVjMjlkNjY5ZjI4OWE5ZjY4ZjM5MjgyMzk0
MjEzMmEwHhcNMjUwNDE5MTkwMDUzWhcNMjUwNDIwMTkwMDUzWjAzMTEwLwYDVQQD
EyhkNzIxNWE3YjAyOThlZjUxMjI3MDc5ZTlmYjMxNjAxYTgxMGYyNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbiGOd/Y5utkmDDssrHK//nYWHaq
kF9SuOX+X4KHAa1Y0ycgZJQ/yKQiuI1zilPcDq+XTQXt2TTEsys6IuJdt0/ZDYM+
YX0VBnJdY3sfgJ8E5Sf7SS/accE4CrTb06g6dp4cpCdSoQjaVieE8s//tnr6mRK4
XaBwIraPJTGT0hmlzkapw98UiNBQmCJue7vaKGPJGkJFAw/sfLu6iwfml8o+sFhT
3X45oUNVasGU1n5q3WD1UF8levE5/BDvQ2+aFzXD3y71PabUXQw+EVWDMjEYdIRH
B1SSVLo+zCpvNuwKkpatjT4vTe0K95LunvDhd/0F5b82SEC7OBjnEhQcBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNchWnsCmO9RInB56fsxYBqBDydsMB8GA1UdIwQY
MBaAFFuxxXBVwp1mnyian2jzkoI5QhMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2Yt
NWNlYWUxOWY5NGY5LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84MjIzNzYtODA4YS00NjVjLWE4N2YtNWNlYWUxOWY5NGY5
LzEvVzdIRmNGWENuV2FmS0pxZmFQT1NnamxDRXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbaC5OPj
53z/X3tpLNDipkTsbGsUo1MaZgy64IjA9lYY4NQamO3MAcBw5aPOfFbgmIDCmhlk
il7/JHzIE5o5dXSaJMM76ZOa4yq4XlUpOzhsWx7ymELviAcGxXtoJDX5drAasWMn
YQxKo4XOLrHkSlN4Vf/TKfqLjecBokyMecAYjOyx8od5BGA+gVNF0M0xFQ+jXAWM
0ttSc3f75szGwUyVw3Ka/FoTMuMsaBzaCSlNVMEgEum7e0vZiktDm3ZAqiRXPe3Y
YkJYZT7mkBsEE/GavIEDKVdxAQ3GME9fKAQzP3hT40ybIEWT2bs3pH7x3XxrNonA
b4oOSN1kmsIhIA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:16 2025 by rpki-client