Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: iB9W4r35ZUnvY6h8AQolhHNzSnqO7TbBIg6esPNBH3c=
Subject key identifier: EC:48:C3:87:ED:F4:14:E9:F3:9D:A6:68:17:B4:4F:81:43:C1:13:55
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 01965914A7EED0086E47319231EAF0E0D0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 16:00:47 +0000
Manifest this update: Mon 21 Apr 2025 16:00:47 +0000
Manifest next update: Tue 22 Apr 2025 16:00:47 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: CAOBO1vjQXxn/YiWS2/+OULzlbBcEpgb/kK6YqLE120=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:a7:ee:d0:08:6e:47:31:92:31:ea:f0:e0:d0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Apr 21 16:00:47 2025 GMT
Not After : Apr 22 16:00:47 2025 GMT
Subject: CN=ec48c387edf414e9f39da66817b44f8143c11355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1c:6b:81:31:f5:02:d4:a0:36:fe:86:06:73:
1d:9f:5a:4b:56:2c:f5:9c:21:c3:4b:e6:db:93:00:
67:20:d8:b3:b4:ac:47:d2:b8:ab:8c:2b:dc:0c:9b:
ae:2c:10:4c:53:42:31:02:0a:f0:f7:a3:81:7b:ba:
93:f2:8a:6c:f1:2b:a0:37:30:d7:a9:37:e6:ee:da:
46:14:49:0c:c1:73:b6:2f:e9:d1:b9:4d:bb:5b:f2:
29:ac:03:c9:d1:f8:3f:6e:03:6a:18:68:92:1d:a3:
0a:27:e6:2a:8b:92:d3:58:2f:eb:95:01:9e:94:ce:
7b:dc:34:d9:65:ad:ac:7f:fb:b4:e5:e1:04:34:f8:
d7:d0:43:9e:1d:c3:60:d6:8a:f4:24:2c:0b:e1:cc:
99:83:b6:90:dc:27:dc:b4:3b:c1:84:71:bf:1c:6b:
b1:13:34:58:24:53:5a:37:ee:51:ea:ee:3e:91:71:
30:71:ed:d4:74:fc:26:7d:e4:c2:57:72:66:fe:08:
3a:35:10:86:5d:72:e6:86:a0:21:d3:75:71:4f:fe:
3c:cd:38:f9:f2:bd:7c:5c:92:3c:24:e8:e3:d1:c6:
69:78:5a:d2:b3:32:4f:53:01:90:3f:8a:93:fc:df:
71:fc:33:a1:80:c1:99:0c:56:8f:ae:8a:97:4a:fc:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:48:C3:87:ED:F4:14:E9:F3:9D:A6:68:17:B4:4F:81:43:C1:13:55
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:ae:bb:30:36:4b:b7:58:b5:9c:7b:05:8f:dd:d7:3c:bb:
e9:b0:ee:d7:96:61:d9:80:ff:c8:4e:ed:9b:77:a6:d8:49:38:
ba:15:ef:c2:cd:47:b0:55:e5:df:de:31:06:52:da:ca:a0:b3:
fe:87:04:62:ac:e3:a2:ec:09:72:07:44:4e:fb:b3:7d:b7:62:
8c:53:15:ec:61:70:76:20:57:cb:6d:45:9f:ce:e1:65:cd:3e:
46:31:81:09:08:b5:d5:7f:8b:d6:5b:a4:0d:ca:d8:42:56:13:
f9:2d:c3:51:59:c9:aa:ba:71:ff:e6:b3:96:ed:c3:2c:61:13:
17:09:64:01:78:cd:a4:0f:49:99:c6:c2:9c:66:b6:13:e3:25:
5a:90:a2:cc:d4:cd:49:1f:dd:32:43:e0:16:b0:ba:df:44:0e:
bd:21:78:bd:9c:00:3a:f3:58:17:2b:14:02:ae:89:91:03:3c:
9f:9f:8a:7d:03:67:50:ff:05:4c:62:23:20:f2:d1:11:b7:fe:
a1:48:31:04:ba:2e:aa:5e:9f:2a:04:90:62:52:59:97:35:cb:
eb:db:a9:01:3b:92:5d:4a:c7:6f:b6:cf:10:00:95:12:a5:66:
d5:e8:e3:91:87:60:a3:2b:4d:11:40:59:9f:a6:ae:52:d9:01:
70:94:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:17 2025 by rpki-client