Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File: WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier: qXxB+C9PjQdC4isfHng39IwMlKsH+rYFmJcVxD1pU44=
Subject key identifier: C1:A9:30:F9:97:65:F2:4A:8F:87:06:3D:E5:E7:6C:4C:67:6C:86:AB
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial: 019653EE034FAB71F03D28FB4354EFA38376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number: 03C5
Signing time: Sun 20 Apr 2025 16:00:29 +0000
Manifest this update: Sun 20 Apr 2025 16:00:29 +0000
Manifest next update: Mon 21 Apr 2025 16:00:29 +0000
Files and hashes: 1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: CZxUiYvmWHqJkYXmj/InSAXWrWXmbYEOm6B9h2vaQd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:03:4f:ab:71:f0:3d:28:fb:43:54:ef:a3:83:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Validity
Not Before: Apr 20 16:00:29 2025 GMT
Not After : Apr 21 16:00:29 2025 GMT
Subject: CN=c1a930f99765f24a8f87063de5e76c4c676c86ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:7f:4e:98:0d:71:51:f5:dc:ae:be:3e:10:
91:cf:05:4c:f4:0b:3d:68:01:1f:b5:c0:9f:b6:0e:
c6:c7:bc:14:b3:61:0c:e5:ab:35:1c:b7:aa:18:ee:
a8:f9:46:23:e1:01:37:f7:9b:74:11:46:af:a4:f2:
d5:ae:0f:0d:81:db:43:7d:c3:68:9d:06:c8:c1:83:
a3:42:26:cf:54:eb:05:72:b8:97:74:9e:8c:32:2f:
98:ed:a4:bc:fe:a4:1f:a1:27:94:74:12:d5:43:e8:
b3:c7:1c:55:94:44:da:6e:8b:3a:a0:f5:41:85:4c:
a2:86:dc:66:8b:b5:75:96:88:a8:87:ca:67:33:1d:
e7:d0:b4:91:78:b0:29:8b:8c:6c:60:6f:db:dc:ea:
39:cb:d6:3b:ac:76:bb:47:ac:48:b7:d2:80:91:19:
84:66:51:69:07:60:e5:17:95:ed:7d:38:8a:22:37:
a1:ab:b5:21:83:3f:63:56:b4:c9:5b:0a:23:76:81:
07:2d:b5:c7:8b:55:62:92:0c:d5:d2:1e:2b:ce:ee:
63:45:71:8d:bb:aa:b9:64:ea:bf:24:85:1d:b6:19:
e9:f0:88:d8:ff:b4:d8:38:e9:9c:9e:30:0a:f9:84:
29:53:4e:da:ef:77:fc:4d:e4:aa:39:64:42:64:23:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:30:F9:97:65:F2:4A:8F:87:06:3D:E5:E7:6C:4C:67:6C:86:AB
X509v3 Authority Key Identifier:
keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:00:cb:4a:4c:b5:90:a4:87:4d:41:02:d0:92:70:2e:21:8d:
50:21:c4:4e:7f:e1:47:04:3f:78:13:8b:f2:e2:c5:17:35:c6:
2d:15:86:47:43:2b:50:5d:e6:5b:bc:69:37:9f:7f:b2:f5:5a:
95:8b:5c:ad:1b:da:69:85:14:fa:ad:7e:e2:f4:25:16:ce:85:
8d:4f:2a:03:ee:e9:df:82:73:b6:45:5d:34:67:70:ef:ed:ca:
cc:d0:10:2d:88:e3:1e:99:0b:fa:68:7e:ef:02:b6:de:32:1b:
d6:72:32:25:3c:27:cf:ea:eb:36:24:51:2a:d4:90:b0:de:b0:
1e:d1:b6:c1:c1:ab:1c:5a:b4:44:47:f9:0c:ea:37:11:fd:9c:
55:fd:c9:09:8a:58:ca:b6:54:15:93:a9:32:74:66:4d:86:9e:
12:17:e9:31:fc:d1:fd:7a:f1:67:3a:7f:ee:f5:4d:57:75:2d:
86:4e:a7:96:69:e6:0a:bb:41:56:db:db:fb:5a:df:8a:1f:48:
5a:1c:d8:94:26:52:09:17:d9:7a:60:56:22:30:58:25:42:52:
05:1f:ce:eb:64:b6:dd:e5:2c:57:a2:d2:ae:87:29:58:60:03:
18:47:45:a3:47:83:b7:4d:59:6a:99:51:ce:f7:18:78:55:48:
29:51:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:23 2025 by rpki-client