Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier: FhTVytIxNjk/T22GLZ62has5P+g8fM+gizsw3lOhYt8=
Subject key identifier: 98:9F:84:B7:7C:0E:EC:14:3A:01:6D:80:6B:99:CB:45:79:CF:59:F5
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial: 01965613D28D2FA4CDAF0FFC605E0787A8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number: 14F9
Signing time: Mon 21 Apr 2025 02:01:01 +0000
Manifest this update: Mon 21 Apr 2025 02:01:01 +0000
Manifest next update: Tue 22 Apr 2025 02:01:01 +0000
Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: MnsTHnI3hnqdTD3+Jf4/SHm89GegGACwEqU+UP8+gFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:d2:8d:2f:a4:cd:af:0f:fc:60:5e:07:87:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Validity
Not Before: Apr 21 02:01:01 2025 GMT
Not After : Apr 22 02:01:01 2025 GMT
Subject: CN=989f84b77c0eec143a016d806b99cb4579cf59f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:ce:36:03:e2:0b:a0:1a:b4:b3:9f:07:3a:
3c:cb:db:91:3d:a8:16:a4:4b:d4:4e:c4:a4:9c:15:
a6:f2:66:8b:63:11:1b:3f:8c:67:9c:07:34:2d:6b:
9e:68:7b:23:83:78:fa:04:c8:b4:f1:61:30:32:da:
ef:75:82:fd:49:f9:40:9f:d7:14:33:95:3f:3f:70:
52:a3:26:6c:c9:87:3e:93:a3:3c:fb:48:2f:8a:ba:
bb:5d:9b:41:34:5f:64:ec:d9:86:15:35:96:95:c7:
2a:e7:7e:b4:ab:3a:56:77:62:b0:97:32:18:9c:78:
49:ec:5d:ee:25:14:06:27:a4:fc:ec:c7:c9:05:ed:
4c:c8:05:88:f0:88:a4:87:03:1e:b5:9f:72:8a:16:
9e:ef:fc:10:07:e0:3e:35:76:8c:0d:b5:0c:58:62:
3d:7b:56:44:7a:2c:fd:2e:4c:0c:ba:ad:ac:68:3d:
eb:61:90:97:03:2b:b0:ba:12:ae:dd:c5:e3:42:5c:
1c:b8:9e:a8:1d:11:1f:3e:69:e6:f9:55:6e:fc:b6:
a8:0c:e4:ff:00:4d:8f:9f:22:91:fd:89:bc:7b:c8:
3f:6c:c0:fe:7c:92:95:b7:15:63:b7:e1:b3:51:71:
f4:a1:9f:ae:79:ac:bf:15:65:26:b7:09:a9:14:2b:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:84:B7:7C:0E:EC:14:3A:01:6D:80:6B:99:CB:45:79:CF:59:F5
X509v3 Authority Key Identifier:
keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:55:a5:34:e6:83:13:b1:8b:3b:a9:3e:07:3d:e9:a8:d6:
47:11:af:51:aa:57:ff:be:5e:89:fb:2e:4c:4b:fc:5d:2f:3d:
a2:67:5c:a0:e7:bd:3a:e6:8c:51:dc:5a:12:9d:7e:39:4f:d5:
42:56:c9:1b:f6:9d:cb:9e:a0:58:70:0c:eb:22:98:db:ad:e3:
6f:6c:a1:a9:b0:da:2e:7c:37:46:54:02:3b:2f:dd:4b:54:30:
56:04:ae:2c:e4:fd:59:23:d6:ee:cd:53:e6:0f:34:00:a6:43:
40:89:73:a5:4f:52:f5:71:bb:3a:56:4e:5b:cb:37:09:59:97:
2a:e3:8d:3a:11:1d:df:c3:89:e4:fd:e6:a8:6a:8f:69:97:de:
51:3a:17:15:8b:3a:b3:c5:21:fb:1c:70:76:76:40:1d:01:07:
34:f7:7d:cf:6d:02:f1:36:06:21:69:cd:47:f7:a5:a2:a9:fc:
9b:62:a3:56:01:3e:54:55:3a:b1:71:e5:d5:71:df:8a:3c:93:
0b:80:07:24:24:78:f0:2f:2b:2d:fa:eb:57:eb:72:cd:91:ee:
cf:65:c5:71:67:88:b3:22:ec:cf:96:7d:a0:cd:63:45:d2:a4:
56:35:6e:8d:a9:42:18:10:52:63:cf:cc:f1:89:d5:64:3d:7f:
d4:f4:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:13 2025 by rpki-client