Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: Ur24KkTTQBrM2pjAuYRDQ9yRkoA45qCcASCsidKiKsE=
Subject key identifier: 41:D5:8C:B0:F8:5C:3F:85:1D:01:A7:59:B0:54:A8:9C:1D:C0:1B:CA
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 0196545BB61879F83DCABEC570CE60117BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 1D
Signing time: Sun 20 Apr 2025 18:00:18 +0000
Manifest this update: Sun 20 Apr 2025 18:00:18 +0000
Manifest next update: Mon 21 Apr 2025 18:00:18 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: pdZQDUkyUn1eCZN3oGAtkCb+RIRKIlCZN1+sZgLNhmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:b6:18:79:f8:3d:ca:be:c5:70:ce:60:11:7b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Apr 20 18:00:18 2025 GMT
Not After : Apr 21 18:00:18 2025 GMT
Subject: CN=41d58cb0f85c3f851d01a759b054a89c1dc01bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:3f:01:c6:f0:bb:bc:a1:cc:84:7d:c6:c2:
22:8e:d7:ac:ff:61:39:99:97:20:6e:16:12:14:91:
c4:6d:3d:07:89:5c:38:98:c4:29:2e:24:b4:b8:66:
c7:8f:db:46:f4:49:4c:ee:63:cd:0d:2c:bd:99:12:
d8:be:cc:c0:1f:54:63:d4:11:dd:0e:7b:d3:b8:8d:
93:e1:25:94:ec:1c:bd:91:7a:9b:f3:c7:8e:ae:74:
88:9c:17:59:e3:d0:ae:c2:3a:14:96:9c:03:15:99:
c0:ed:b5:c2:bb:47:fa:f4:6e:a7:25:ac:a7:23:6c:
1f:fa:cd:d5:99:f0:91:1c:20:c4:5c:df:a6:52:00:
4a:f9:b5:e4:fe:44:c9:31:05:a5:91:5d:73:a6:65:
77:18:96:cd:36:8c:5b:6d:97:1c:0c:3f:af:1e:e0:
a3:65:bd:f5:ff:e7:bf:27:84:43:07:75:a8:7d:7a:
10:d8:de:1b:dc:84:71:72:79:03:10:71:ab:e4:91:
91:68:11:f2:59:94:12:2b:41:c3:b1:d7:49:cf:7e:
7a:2f:27:61:47:7e:1d:92:4a:22:9d:4a:c6:40:b3:
12:7f:a2:41:2c:00:58:c8:99:0f:77:73:44:2a:2e:
4d:77:36:0c:5a:15:4c:4f:a5:78:fd:c5:9d:16:59:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:8C:B0:F8:5C:3F:85:1D:01:A7:59:B0:54:A8:9C:1D:C0:1B:CA
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7c:97:ea:5c:a7:60:af:54:81:4a:2f:e9:ae:21:4c:fa:0d:
f1:3e:7a:64:8c:78:12:10:13:b5:03:55:fa:8d:54:46:b9:e2:
5f:6c:7e:e5:6c:5a:32:78:dc:02:44:98:e7:cf:e1:94:1e:cf:
22:3b:39:9a:b9:cf:a6:f0:d8:72:f6:42:d4:30:ef:c9:92:3c:
c0:d3:22:19:bf:e6:06:de:2a:ca:43:e9:77:27:5b:b9:d9:1e:
0e:bb:57:37:10:f0:3f:ec:74:24:29:4d:fc:3f:46:f5:43:c6:
63:14:72:63:25:28:c5:62:9b:47:12:31:cf:06:4a:4d:99:54:
69:00:55:10:41:ec:8a:9e:d8:90:f0:c0:fe:5a:87:58:c4:80:
43:df:d3:37:c6:28:bf:32:3d:6e:aa:cd:34:07:c1:d0:42:24:
bd:f7:32:23:a3:48:a4:eb:1b:85:89:18:05:1e:12:c7:5f:74:
81:39:b5:a0:08:7b:df:e4:9e:62:f8:40:60:0c:dd:99:73:d3:
5a:82:f0:8a:47:ff:20:fa:2e:1e:ba:bd:37:8c:79:68:a9:a3:
88:65:bd:1d:52:89:64:0b:ad:f4:a9:ec:18:25:02:b0:5a:68:
ff:41:55:43:e0:b0:a1:e6:9f:74:3f:a0:d1:ad:ac:46:00:2e:
7d:1d:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:48:57 2025 by rpki-client