Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
File: wq8ZpG9azIz4_QNiSmG3koqBjNA.mft (raw, json)
Hash identifier: 87ZOmmxb5R1FWwcfwAvdxfyB2Qm3o3hJAQPrRO+InMA=
Subject key identifier: 9A:1E:9C:DA:00:0C:A9:B0:90:F1:9D:C3:44:2A:3E:F0:D4:66:77:FC
Authority key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Certificate issuer: /CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Certificate serial: 01965B030DDE8D3081E21DE2D618AF78A618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
Manifest number: 14FC
Signing time: Tue 22 Apr 2025 01:00:48 +0000
Manifest this update: Tue 22 Apr 2025 01:00:48 +0000
Manifest next update: Wed 23 Apr 2025 01:00:48 +0000
Files and hashes: 1: wq8ZpG9azIz4_QNiSmG3koqBjNA.crl (hash: /zlXDz2Xd/p0MJ6Xqbse3KvN88bViT9OydTvcW0PB+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:0d:de:8d:30:81:e2:1d:e2:d6:18:af:78:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Validity
Not Before: Apr 22 01:00:48 2025 GMT
Not After : Apr 23 01:00:48 2025 GMT
Subject: CN=9a1e9cda000ca9b090f19dc3442a3ef0d46677fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:55:eb:e3:33:d9:d0:6e:25:2b:ac:61:26:
04:10:32:92:d2:0b:ad:0f:5a:7c:a0:80:ef:7c:7c:
62:7d:2f:75:da:1e:0e:5e:f3:ac:3d:14:a2:4e:e9:
29:81:d4:24:61:75:0d:81:cc:13:2e:3d:c7:b2:84:
40:13:0d:2f:1f:ed:df:7f:61:5d:db:8d:9e:24:f7:
40:03:dd:4a:77:e5:a4:26:74:41:a0:44:e2:79:d8:
72:4d:e4:83:03:21:8e:cc:35:0d:e0:0b:bd:56:3a:
a2:b8:3b:66:e6:7c:fb:61:68:a1:b6:e0:75:19:c8:
c8:7a:a9:7f:db:a7:0e:d2:a5:1c:1f:ae:35:2b:3b:
a6:27:12:5f:38:9b:3d:f0:2a:54:0d:86:db:fa:bf:
f5:71:fc:df:5f:82:6b:23:2d:d5:b9:bd:4d:1d:c3:
f9:53:94:fd:67:de:3f:0b:ca:79:7c:e1:c3:6a:63:
8f:38:bc:54:02:43:02:09:fe:83:f7:dc:5c:7e:c9:
a2:1c:bb:db:1c:82:be:fc:d0:bb:3b:ce:b3:09:92:
f3:47:d7:6d:8b:8f:ae:d9:9d:34:42:14:90:26:74:
00:05:a4:c7:19:ba:88:52:c2:fa:92:a0:21:1d:e2:
8d:ee:a9:f5:5f:1a:6c:a1:6a:08:0e:fe:38:55:f5:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1E:9C:DA:00:0C:A9:B0:90:F1:9D:C3:44:2A:3E:F0:D4:66:77:FC
X509v3 Authority Key Identifier:
keyid:C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:e8:39:a0:3f:39:57:7e:a5:b3:2f:07:2b:8f:31:0f:c5:
0d:99:2c:bc:a4:f9:25:36:fe:1f:ae:f9:19:2b:ea:75:6b:8a:
e6:3a:02:35:70:a3:07:98:61:c0:27:1d:e4:1d:c0:69:e2:48:
bb:cd:25:e1:8d:20:f6:49:3d:f8:de:ee:06:9d:22:a4:c3:01:
ac:b7:a4:d8:23:b2:23:de:2e:94:01:f5:ed:59:2d:68:d8:e4:
07:15:38:08:3a:a3:9c:35:a3:d9:13:2f:dd:bd:b2:31:a3:77:
68:b5:08:fa:cc:99:64:04:18:c5:28:8d:9c:36:55:85:5a:7b:
e1:ad:b2:27:1f:37:0f:78:77:08:9a:40:4b:60:2c:62:0e:75:
de:d1:9f:85:e0:5f:53:e6:f5:c8:d3:da:6f:de:a6:13:49:89:
64:4f:3d:30:d4:02:b6:72:f9:98:fe:75:5c:6f:0d:bc:01:df:
9a:e5:a8:94:ef:d0:af:80:83:cf:fe:f2:80:36:db:8f:fe:e2:
ad:0c:6e:2a:40:be:4a:23:b1:48:8b:5b:37:9f:f7:41:da:67:
23:39:87:61:ad:f7:6c:f2:0c:6f:ad:37:58:97:32:c2:be:b1:
19:b3:6d:1c:f6:4b:e0:fe:fa:b0:91:b1:e9:e9:56:89:7a:31:
68:75:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:56:53 2025 by rpki-client