Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: JYZcL5egnCG5WpYRkF+ZL+TRokY61OTc0wj2XjrCFZg=
Subject key identifier: 3E:8F:8A:96:A6:E7:07:7A:FD:B1:76:73:BE:CA:4E:E4:6C:BF:93:33
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 01965793FDC6AAA7A61D2AC39967F6E3E0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 09:00:38 +0000
Manifest this update: Mon 21 Apr 2025 09:00:38 +0000
Manifest next update: Tue 22 Apr 2025 09:00:38 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: XefX5ckr1MOoQwOvfS/FyQ3Ipr8EFYCstiFb4ip2xHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:fd:c6:aa:a7:a6:1d:2a:c3:99:67:f6:e3:e0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Apr 21 09:00:38 2025 GMT
Not After : Apr 22 09:00:38 2025 GMT
Subject: CN=3e8f8a96a6e7077afdb17673beca4ee46cbf9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:e8:54:0f:8f:20:bd:ec:a4:89:40:e8:57:
f1:db:c1:11:5e:62:fe:47:32:31:3b:8d:43:8a:58:
23:18:46:7c:fb:be:2e:9c:16:12:7d:34:52:51:d9:
06:9b:9d:cd:05:7a:72:13:51:e9:94:1d:e9:2a:91:
a4:5a:8c:3d:78:a4:9d:53:cf:8e:ea:ef:99:e4:80:
8e:1e:e8:cf:95:24:91:bd:65:c2:72:c1:66:1d:ae:
a2:9c:f5:e1:32:2c:db:37:49:a7:c5:c9:f8:4e:69:
9c:7b:f3:1c:fb:4d:e7:5e:70:be:d4:48:71:e8:b8:
f3:f0:61:90:55:73:81:d9:f3:25:12:0e:93:c9:81:
0a:92:fd:1e:54:bb:71:fc:d3:16:80:b0:ec:c9:45:
56:6a:e7:fd:0d:87:b6:5c:cd:d1:d4:5a:c8:73:96:
01:58:21:63:27:27:35:18:d0:4a:50:a4:d7:8f:91:
c1:2b:77:2b:bb:2c:61:96:00:48:54:56:5c:37:17:
95:02:ee:e6:92:3a:28:3e:7d:f1:a7:33:16:e1:ca:
bc:8c:4b:e9:a2:01:b3:48:7c:90:c6:bb:56:52:cf:
ec:0d:9e:63:04:ef:84:e8:ae:ba:6b:99:e5:8e:1a:
43:89:45:9e:f3:67:54:22:67:f8:62:40:08:5b:cc:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:8A:96:A6:E7:07:7A:FD:B1:76:73:BE:CA:4E:E4:6C:BF:93:33
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cf:09:14:a6:ca:33:be:66:34:ef:23:01:e1:ab:eb:a6:9d:
16:ba:d3:20:23:6e:fe:16:71:80:dd:95:e0:01:e8:3d:de:18:
1f:ed:e5:e1:f2:36:e6:03:d5:61:f5:44:57:9c:35:31:2e:b6:
c4:d0:d3:01:22:a7:7c:83:37:9f:f5:c3:e7:3b:93:b1:91:f5:
b2:23:92:84:67:81:8d:57:a0:35:1b:61:94:1f:87:0a:11:25:
17:9e:93:bd:d8:6f:94:24:33:43:85:0f:49:70:2c:37:84:63:
ac:4f:e4:b9:cf:b4:5f:90:9a:25:56:96:a4:ed:6e:8a:5b:d0:
3e:1d:a8:9d:2e:10:b6:93:35:52:c5:b8:0c:81:6c:03:cf:43:
fa:01:53:86:ef:92:f6:d0:25:8b:23:4a:30:e0:0e:b6:51:f2:
5f:48:75:92:7f:1b:2a:2a:a1:32:e3:66:39:0c:57:b4:15:0a:
f7:8b:d6:78:f7:8c:cf:53:f0:be:4f:12:7f:4c:6f:55:21:86:
82:23:c7:c7:e3:43:99:72:16:ac:85:cb:a5:5f:27:ff:1f:14:
1a:13:2e:77:4e:5f:b1:3e:c1:bf:40:30:b1:48:41:83:f1:ee:
0a:da:c1:47:4a:58:3d:25:c5:a1:f2:76:ec:4e:6c:76:b1:11:
f2:a6:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:41 2025 by rpki-client