Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
File: 1-Wa0UKbR3EL4Td28NLTovztI2E0.mft (raw, json)
Hash identifier: +hQfDLbq4I32n0g/Fc6eJVjxnVMWw/S9ZE2FW/uiEqs=
Subject key identifier: E9:66:D3:5C:C9:81:7F:F8:EE:FD:F9:FF:62:71:06:44:A5:2C:C4:DC
Authority key identifier: F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
Certificate issuer: /CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Certificate serial: 01965793B6DC699D3D78BF288DE607B5E187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
Manifest number: 02B3
Signing time: Mon 21 Apr 2025 09:00:20 +0000
Manifest this update: Mon 21 Apr 2025 09:00:20 +0000
Manifest next update: Tue 22 Apr 2025 09:00:20 +0000
Files and hashes: 1: 1-Wa0UKbR3EL4Td28NLTovztI2E0.crl (hash: FDZcd0xYMfErkc01FX39xP5D8fV1Uiq6uZUSl1Bqrpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:b6:dc:69:9d:3d:78:bf:28:8d:e6:07:b5:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Validity
Not Before: Apr 21 09:00:20 2025 GMT
Not After : Apr 22 09:00:20 2025 GMT
Subject: CN=e966d35cc9817ff8eefdf9ff62710644a52cc4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:21:cb:69:dd:68:92:ac:d3:8a:9a:f7:23:
d0:27:d5:c1:72:6d:97:75:79:7e:ed:1d:ad:78:9d:
4c:2a:9b:8f:57:4e:88:20:c2:07:f5:75:fe:cd:77:
30:2a:31:44:90:3e:51:16:aa:db:2c:e9:30:04:c0:
d3:60:c5:6c:2d:42:16:b4:dd:da:d2:3b:6e:e5:4f:
5c:08:23:94:f6:0b:3a:de:ab:93:8a:33:c0:ef:ef:
75:67:e9:f8:c9:6b:82:a2:ba:40:45:04:d5:14:3b:
88:41:08:18:62:4d:71:42:1c:33:a1:aa:03:29:f1:
7e:b7:10:4b:11:79:15:f0:df:b8:d7:ae:36:75:56:
6f:97:3b:fa:a4:c1:24:2f:47:f1:db:3d:17:46:6a:
ac:03:91:fb:14:01:56:1a:3e:f2:f9:8e:d8:65:73:
f5:c6:1c:1c:3f:70:6b:d1:f8:01:f3:fc:40:b2:5a:
4f:cc:af:43:96:d6:d1:2e:47:47:6a:4d:ac:b8:4c:
b1:a5:2f:d0:7f:3e:d0:f3:38:80:d6:1b:b8:1a:cb:
ae:84:49:53:4e:77:ba:ec:f4:4b:20:3a:f8:bd:71:
bf:c0:c4:53:19:c3:ec:c4:7b:04:5d:cb:2b:72:c1:
f6:2f:f5:fd:ba:c0:87:a5:5e:3e:2a:b9:28:7b:e6:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:66:D3:5C:C9:81:7F:F8:EE:FD:F9:FF:62:71:06:44:A5:2C:C4:DC
X509v3 Authority Key Identifier:
keyid:F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:22:0b:09:58:50:38:a5:d4:f1:85:60:0b:89:26:8e:d6:2a:
6d:9e:60:5b:82:9e:f3:85:ae:13:b1:ef:98:48:7c:92:56:37:
15:78:08:8f:1f:1f:bd:f4:4e:76:e9:a4:91:89:1c:ed:d2:30:
54:68:57:4e:1f:17:e0:f3:21:61:ac:0e:b0:fb:fd:2b:9d:8f:
07:b5:bf:dc:7a:86:9b:49:ab:ee:a8:f5:7a:b0:ac:42:2f:a6:
34:d9:fe:4d:67:c5:0e:f8:67:9d:b6:6d:65:73:6c:89:fc:6f:
b7:f0:ce:e3:df:78:14:9d:73:89:bd:d0:ee:2d:5b:b6:6d:93:
9a:1e:51:09:6b:d2:63:03:52:e6:e6:a7:47:1e:66:a5:95:7d:
47:ef:64:57:4c:8b:3a:d3:96:23:cf:9a:3f:dc:17:2e:6a:27:
d5:c8:9d:70:39:b9:ca:82:11:6a:78:cc:4f:d6:18:79:bd:ae:
3f:b5:21:85:f8:a7:17:84:53:26:ab:6c:b4:f4:b3:10:68:68:
9c:dc:9c:cb:6d:4c:14:7b:5c:88:f3:c5:30:7a:35:2d:59:ca:
d3:5a:29:50:18:29:1e:a2:bf:3a:30:48:a2:fc:24:29:6a:9b:
31:f6:ff:12:ee:d1:b9:57:06:5f:db:04:23:08:5e:3c:be:53:
fd:c7:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:38:54 2025 by rpki-client