Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: VhF/VhAyK032QTRSBfB/KqiXK/DnEyIcXQItT/j6wpY=
Subject key identifier: 84:2F:34:93:DB:50:0D:7B:CF:02:DC:91:1F:F1:5A:AB:65:69:15:64
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 019645FBB2BB6B49FEC819D7761EEBE0FE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 1175
Signing time: Thu 17 Apr 2025 23:00:45 +0000
Manifest this update: Thu 17 Apr 2025 23:00:45 +0000
Manifest next update: Fri 18 Apr 2025 23:00:45 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: q9fbVLvMnVNdWnfpF8Rf1S/XPy4LexVQ9c5jNJMUZ2o=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:b2:bb:6b:49:fe:c8:19:d7:76:1e:eb:e0:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Apr 17 23:00:45 2025 GMT
Not After : Apr 18 23:00:45 2025 GMT
Subject: CN=842f3493db500d7bcf02dc911ff15aab65691564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:53:a5:27:d6:dc:3c:f2:b6:63:cb:76:6f:
ef:e4:2f:cd:b8:64:f6:1c:d2:2a:de:a0:36:d4:36:
75:5d:c5:80:51:b9:54:72:e6:9e:4f:3f:f6:92:10:
50:2b:55:74:a7:9f:bb:59:69:28:92:5f:2a:b8:fa:
d0:30:76:8b:b5:84:28:2a:04:03:06:db:1a:82:c7:
3b:2a:a8:5b:d5:5f:de:48:97:06:f1:32:97:44:41:
88:2d:4c:bc:71:b4:2b:fa:29:f0:5b:cc:14:da:98:
73:dc:e3:9f:b3:71:fd:20:ea:a0:fa:92:d2:e2:4a:
d7:5f:15:88:7d:85:fd:96:43:4c:7f:99:67:ac:a0:
fb:bc:50:60:eb:ee:68:77:28:b6:ce:4d:b3:fb:f6:
6b:1c:92:6b:93:b0:b4:b6:4e:e0:33:51:de:fa:ca:
25:67:86:7a:8a:1c:6a:b5:4b:fe:5b:cf:40:66:13:
ab:76:43:c6:1c:ef:01:85:7e:fc:3c:9e:11:5c:ed:
d8:df:b9:e7:97:bf:38:cf:47:d9:cc:97:95:ab:19:
df:68:4f:d8:16:b8:39:eb:52:9f:d6:86:62:9f:43:
31:64:a5:05:0d:c6:cb:bb:ba:f6:db:2a:4b:3a:96:
fb:b4:a7:bf:59:3c:52:ea:f2:6b:3c:af:bd:a2:71:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2F:34:93:DB:50:0D:7B:CF:02:DC:91:1F:F1:5A:AB:65:69:15:64
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f8:1b:f0:05:d5:a9:76:d8:9c:f0:ac:cb:89:0b:6b:31:c8:
b0:88:64:56:ff:85:d2:2f:15:27:9a:02:e1:66:1c:73:74:d4:
6a:fe:29:fe:e3:d4:eb:ec:18:fe:24:28:08:a2:28:bf:6f:d5:
50:a6:1a:62:7e:dd:e8:1b:95:d3:8f:a5:64:3a:4c:70:a1:9f:
d3:d5:8e:dc:a0:26:5f:31:f2:9e:ab:20:74:26:c3:4a:be:37:
da:4e:bd:dd:c0:0c:32:e6:b0:ff:3f:01:22:43:9b:23:f6:95:
99:ad:c5:92:32:b4:71:9f:c4:d0:3c:bd:4d:84:45:ae:2b:72:
0b:7b:fc:29:20:17:2f:96:bf:8c:d9:67:25:46:f1:68:08:7b:
92:80:3a:0a:ba:75:66:29:a1:eb:fb:63:3d:61:71:b1:f7:64:
49:fa:42:e0:e0:b1:f7:e8:81:4d:ed:62:69:fe:af:17:c5:ab:
10:e2:4d:c3:02:86:c0:1e:98:d9:5b:5e:2c:ee:54:93:2f:96:
86:cc:af:61:9d:cc:0c:cd:df:f1:20:d5:ca:8c:d6:2c:f7:80:
df:26:b7:09:af:3d:94:5e:bd:91:f0:28:64:c8:60:9a:e0:1a:
d7:5b:c9:ee:a4:99:77:b6:3c:06:ef:a0:31:58:7c:73:0f:fa:
58:eb:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:59:23 2025 by rpki-client