Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: bftfMMMsJhea09iXSEdwGoPxPOYwTVOARp9WOnfddqs=
Subject key identifier: 2C:A5:72:45:FC:52:CF:F1:03:EC:2E:6C:DA:01:82:95:7B:23:B4:11
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 01965B028D585D734AE643E6D6B9F5C1C90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 014D
Signing time: Tue 22 Apr 2025 01:00:15 +0000
Manifest this update: Tue 22 Apr 2025 01:00:15 +0000
Manifest next update: Wed 23 Apr 2025 01:00:15 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: A4Idq1dD9LA1h3Hn8uBPZb+UmBYNo1TeI/J8Ze9oe2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:8d:58:5d:73:4a:e6:43:e6:d6:b9:f5:c1:c9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Apr 22 01:00:15 2025 GMT
Not After : Apr 23 01:00:15 2025 GMT
Subject: CN=2ca57245fc52cff103ec2e6cda0182957b23b411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:c7:82:57:53:0c:1e:c0:17:ab:01:5e:9e:
70:ff:c9:03:de:f4:b5:9a:cb:70:d8:86:44:72:33:
23:a0:9f:11:9a:f7:a8:22:6a:f5:f6:9b:ec:ce:41:
07:21:99:15:83:a1:54:93:11:f1:fe:20:17:12:ef:
b5:23:7c:1f:a3:6b:d0:e4:60:59:cc:59:55:78:4f:
49:66:f9:46:2b:4a:ca:7c:5e:ab:7b:f5:3d:7a:88:
d0:ea:5b:74:ca:04:e4:0d:a5:6a:6a:c0:01:39:d9:
af:fa:1d:2e:6f:c5:b4:b2:d9:97:65:e4:d9:04:78:
c7:5a:8a:99:5b:29:cb:e0:32:fb:63:38:5c:1b:c6:
e7:0e:c8:8b:01:76:30:06:15:c7:6f:15:0f:3f:41:
90:b8:cc:ce:4f:08:f6:4b:f3:ce:d6:f8:d5:87:aa:
83:d3:b7:43:9a:37:ab:55:c3:c8:07:99:6c:7f:a3:
91:57:ee:97:f4:7c:1a:ea:62:c1:7f:cc:d4:2d:e4:
be:9b:cf:c9:bd:d0:fc:b2:56:11:64:9a:47:ce:ee:
34:f6:db:d8:4b:97:a6:39:9f:7e:84:5e:4d:7d:e0:
5a:af:3e:1b:0c:d3:ba:d0:2a:41:b1:ad:34:d3:e0:
bf:b4:83:0d:c1:90:c1:4d:9b:28:69:56:60:d1:80:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A5:72:45:FC:52:CF:F1:03:EC:2E:6C:DA:01:82:95:7B:23:B4:11
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:72:55:e1:5d:c8:cf:21:41:67:fc:b4:ce:ab:53:af:0d:8b:
d5:bb:7d:c0:1e:80:2b:d0:73:8d:3c:e1:83:0a:2d:b9:b0:b0:
30:67:2a:2e:7a:6e:5b:45:47:59:67:ae:02:83:c7:b3:09:78:
13:c4:6d:b7:61:0a:62:9b:5b:fb:2c:ef:c5:ba:8c:35:65:ce:
86:9c:1b:37:82:6e:67:3f:92:e2:19:f2:4f:58:50:80:61:ab:
f2:ee:aa:bb:85:fa:5e:0a:b5:1c:93:c1:7b:8e:42:47:1e:75:
17:00:8e:80:a8:c6:9d:24:a9:67:73:db:73:2a:13:5b:91:d3:
e0:5f:d5:7b:1e:8b:78:cc:9a:49:51:cc:ac:4c:d2:f9:36:b9:
61:15:b7:54:df:86:f0:d8:fe:22:29:aa:97:f2:cc:8c:a2:ce:
9e:bb:dd:cd:ee:d6:a4:db:3d:09:f3:67:08:a1:fd:fa:ca:51:
3c:45:ab:c1:52:35:f8:91:69:24:1a:c6:ab:ab:c3:02:51:b5:
39:47:33:f6:12:d6:3e:2f:04:e3:1a:15:be:99:cf:ca:f8:1b:
a4:8e:93:97:bf:aa:65:fd:61:ca:69:89:53:aa:7a:a9:53:7a:
01:38:e9:3d:c1:4e:7a:50:7a:d6:ee:27:c4:1d:96:6c:dc:cf:
9f:6c:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:11 2025 by rpki-client