Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: wb+ZdQo1+LsWFXksygtEd+WE4QzmVl2e3h7/efPiaCQ=
Subject key identifier: FC:98:9A:87:70:4F:54:12:6A:D2:F6:CC:DB:7C:9C:0E:E5:D9:5A:5D
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 01974AB19B666AD801FCD7BF26342176C464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 11FC
Signing time: Sat 07 Jun 2025 14:00:42 +0000
Manifest this update: Sat 07 Jun 2025 14:00:42 +0000
Manifest next update: Sun 08 Jun 2025 14:00:42 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: o9ATpvTti9MkH2FsJv2nZjI576AVSFLtmuW1VHELoqM=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:9b:66:6a:d8:01:fc:d7:bf:26:34:21:76:c4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Jun 7 14:00:42 2025 GMT
Not After : Jun 8 14:00:42 2025 GMT
Subject: CN=fc989a87704f54126ad2f6ccdb7c9c0ee5d95a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:af:e2:52:1d:44:0f:37:c1:60:9b:83:ff:
6b:c1:a3:ed:1d:93:9c:17:6d:43:d8:c9:20:33:86:
7f:f1:42:e0:cb:ee:a6:69:cb:82:cc:c4:cc:de:5a:
00:f8:eb:dd:6b:96:9b:4c:67:46:9a:90:6e:5b:0d:
9b:63:3d:c1:2e:12:aa:ec:06:4b:43:bd:55:a4:2b:
3f:93:86:fa:8d:38:25:1a:1e:d1:b5:25:d3:f4:7b:
86:c0:17:40:e3:a4:73:f1:23:fa:4e:4d:f8:3c:d5:
34:68:40:26:9d:5d:c9:14:78:c0:75:fe:11:91:1e:
a4:84:b5:42:c1:f3:6f:25:a8:cc:75:ea:d7:e3:00:
4f:76:6f:f5:bb:b8:af:e4:5a:d0:cc:6e:27:1f:87:
f4:8d:87:20:94:a2:1c:8e:17:f8:d5:a5:62:1e:6f:
30:78:fb:33:b5:1a:45:9d:22:9f:cc:df:b7:6a:93:
b0:c3:c7:6a:47:c1:08:a9:6a:b7:91:76:da:91:28:
4e:8a:6a:a2:d7:01:14:9d:22:3a:d1:8d:2c:c5:9a:
80:b2:91:8e:3b:e8:2c:7a:7c:55:48:47:bd:12:85:
5c:08:c2:b2:11:b2:43:e2:c6:ba:ec:04:65:1c:eb:
77:85:96:53:64:8a:3d:7f:4d:80:48:e2:e4:a0:d8:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:9A:87:70:4F:54:12:6A:D2:F6:CC:DB:7C:9C:0E:E5:D9:5A:5D
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e0:23:4f:70:8b:3a:f1:0a:3d:67:ae:5f:2d:6c:a9:ff:76:
b5:45:20:fe:ec:10:a8:11:52:e3:29:08:8c:21:eb:73:63:54:
a2:f4:63:17:53:ed:28:4b:b8:25:ef:1d:71:e4:c7:9f:a5:2b:
b4:f0:ac:da:9c:9e:a2:ce:95:e1:11:ad:00:de:f6:db:d9:62:
0c:46:b3:e8:81:bf:c1:b5:1d:ea:02:36:33:68:6e:ae:f8:be:
6f:62:c7:62:cb:c5:56:f3:0b:5c:a4:56:27:9b:ca:1f:c4:96:
d8:0d:ab:11:09:24:53:20:10:33:cf:59:53:b6:80:d5:a2:f7:
55:c5:df:c4:fe:3f:34:2a:19:36:c4:0f:4f:63:0d:19:05:cc:
aa:ad:61:48:84:51:b2:14:8e:d5:aa:93:fa:f3:5a:77:bb:8c:
a1:28:23:1c:9e:a8:dd:f5:70:cb:40:c3:52:e2:cb:dc:62:9c:
63:c4:c2:50:7c:f6:66:e7:9d:06:f1:71:05:20:8d:e8:1c:a7:
22:45:30:9e:90:d1:d6:1e:8b:e0:5a:f2:0f:b7:88:83:c3:e3:
cd:df:d0:a7:2c:6c:a4:e9:de:2e:03:b4:7a:28:54:33:bc:82:
5a:d9:6a:94:0e:3e:55:6f:db:46:e2:44:d8:50:27:7c:e2:a2:
f3:35:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:04 2025 by rpki-client