Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: BSJj52EO00Ze2J3vpURUxZjkYv8zH+5XW35vYSmBAWU=
Subject key identifier: EB:13:C6:C1:E2:B8:BE:CF:39:7F:AA:91:14:AF:40:F6:29:7C:E5:38
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019652DB5446CD335AB1597C292B11FD00F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 11:00:27 +0000
Manifest this update: Sun 20 Apr 2025 11:00:27 +0000
Manifest next update: Mon 21 Apr 2025 11:00:27 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: CS9rEGg8hlqbW92DpicUgBRBRG6DRC+4lhvF5ShqoDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:54:46:cd:33:5a:b1:59:7c:29:2b:11:fd:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Apr 20 11:00:27 2025 GMT
Not After : Apr 21 11:00:27 2025 GMT
Subject: CN=eb13c6c1e2b8becf397faa9114af40f6297ce538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:d9:cf:63:9b:e1:22:48:fb:7f:c2:0a:b9:
e4:d5:5a:11:3f:eb:96:29:1e:9e:0f:9a:57:79:d7:
25:86:50:60:91:63:64:78:2a:f4:d8:68:27:91:41:
ce:8c:b0:90:b1:19:2e:6d:ae:b6:f2:fc:76:be:cf:
95:7d:29:67:61:e3:61:c0:0f:58:f5:9e:19:3d:a2:
17:33:62:6d:73:a7:08:1f:4e:e6:2a:8a:3b:b6:35:
4b:27:d5:90:3e:58:15:c9:ce:20:8d:7d:f6:22:96:
84:3e:d4:e6:47:4f:0a:4b:84:5e:4f:f7:49:22:a0:
a6:16:c7:f3:c6:26:10:df:4b:65:21:d3:67:81:48:
a5:07:4f:76:6b:9b:0a:0b:ee:35:2d:b3:19:c1:e0:
3b:43:56:b6:e7:cc:72:d6:f3:c5:80:9b:0a:19:10:
72:1b:5a:b9:32:f5:ca:48:97:0c:56:22:7f:c7:f0:
94:8b:c9:3d:37:d5:70:05:22:4d:c8:66:80:a2:de:
d3:93:52:ca:d0:79:d5:e6:4c:d2:55:b5:b3:9b:2d:
01:b5:c3:46:e3:b9:56:56:2f:7c:16:d8:83:f6:32:
90:58:98:1b:59:c7:cb:88:4a:d4:39:82:66:5e:2b:
3a:e8:88:36:08:54:ed:c1:66:fa:9d:5e:1c:d4:46:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:C6:C1:E2:B8:BE:CF:39:7F:AA:91:14:AF:40:F6:29:7C:E5:38
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:70:7c:a1:86:8d:b4:b3:40:b3:4a:e9:55:11:7a:45:dd:0f:
3d:07:1e:ca:33:78:10:c5:c0:53:73:91:08:26:25:90:ea:35:
d6:fd:29:c4:96:b5:8b:71:4a:51:70:0a:07:1c:51:44:43:65:
ab:fe:7f:47:58:1a:af:88:ec:84:6e:b5:22:ac:fe:ef:71:17:
39:c2:48:fc:04:79:4c:26:d4:17:eb:71:d3:b6:a0:be:32:68:
eb:c3:9d:91:03:14:09:21:69:37:62:a7:e0:8c:61:9c:d0:ec:
0b:52:cc:5e:11:4d:06:05:eb:c8:41:aa:2b:35:91:7a:7f:6c:
53:4a:04:c2:c9:b2:9f:4b:6f:7a:22:02:ac:21:ec:18:ad:79:
b0:45:ab:87:64:c6:4c:c8:0a:d8:79:f8:5e:be:36:d9:68:60:
46:ed:81:a9:9a:e0:53:ef:c7:ef:4d:c4:24:44:4d:4e:67:51:
99:d3:75:8d:f4:5c:fd:18:e5:01:cb:ce:cb:16:d2:ff:66:76:
2b:97:73:9b:a7:ed:d6:5f:3a:a2:10:6a:9b:49:7c:c6:f0:b8:
8a:56:9e:6c:bf:8a:89:48:97:c7:f2:86:ad:f0:9b:c0:1a:ad:
52:2d:91:df:3c:31:6f:06:70:26:35:50:d9:95:7b:6a:7c:07:
2a:e1:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:46 2025 by rpki-client