Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier: r21+Ee5Hz44d8qRwnFT7hSwQk/ILy91gQpw4dxq6dVI=
Subject key identifier: B5:D3:0F:AE:05:4F:19:11:12:07:5B:71:E7:40:8D:AB:BE:22:46:EF
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial: 0196556E93BA948DB6891DD6898C6A92BA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 23:00:32 +0000
Manifest this update: Sun 20 Apr 2025 23:00:32 +0000
Manifest next update: Mon 21 Apr 2025 23:00:32 +0000
Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: gIz087F/GZMVsRdJRUUSHmGhEmywdmdz6kr3uT9BNRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:93:ba:94:8d:b6:89:1d:d6:89:8c:6a:92:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
Validity
Not Before: Apr 20 23:00:32 2025 GMT
Not After : Apr 21 23:00:32 2025 GMT
Subject: CN=b5d30fae054f191112075b71e7408dabbe2246ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:ea:2f:3f:52:4e:e4:99:de:10:6a:ec:96:
97:76:7a:e4:a1:26:32:15:16:d6:4c:1e:26:db:9d:
46:26:aa:19:80:fa:39:af:94:0b:32:ab:4d:c2:ce:
f2:bc:21:c2:33:68:45:ef:6a:a3:d2:e3:c9:fe:52:
f4:71:20:58:7e:a9:91:77:50:f3:58:82:3f:e7:b4:
0b:03:8e:6c:45:78:36:51:0a:f8:c9:47:c9:df:92:
2b:b7:9c:6c:cf:ab:ee:a7:66:05:49:3b:fa:3d:d1:
40:6b:7b:a9:2a:e4:a9:4e:39:1e:43:04:ac:56:fc:
30:bd:55:3b:77:4f:81:bd:18:b6:f4:93:09:17:f8:
b3:5f:f6:96:ea:58:8c:7c:95:47:b1:ec:5a:cf:6c:
30:65:89:89:f6:46:ec:3b:bc:26:55:71:81:cd:14:
43:ed:a8:9e:cf:7e:97:dd:96:ef:a7:81:41:de:73:
08:f8:a8:4f:0a:1f:8c:ae:30:33:9d:b6:84:27:9e:
68:70:ca:50:38:11:c3:81:8c:1c:49:61:84:7f:92:
b7:67:b7:6f:85:19:71:26:07:5e:1d:c2:fb:a9:f8:
46:9b:b9:a1:0a:b4:ab:8a:b3:65:e9:0d:6e:7f:fe:
69:79:04:f0:3b:ec:bd:aa:49:2a:08:b6:c1:0b:94:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:0F:AE:05:4F:19:11:12:07:5B:71:E7:40:8D:AB:BE:22:46:EF
X509v3 Authority Key Identifier:
keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:7e:65:d0:a9:eb:9c:61:86:a7:2e:da:2c:4a:25:c5:12:
dd:65:a9:86:24:7d:2e:7e:3a:5a:e0:fc:7a:f3:68:90:87:60:
aa:db:03:81:76:22:21:8f:d1:96:07:12:1e:6e:b7:95:2c:0e:
f1:84:5b:8e:95:2f:f8:b4:a3:ca:59:84:1c:c8:21:d3:bc:62:
1b:cf:d5:db:56:dd:a6:8c:2d:bc:8d:64:e9:4f:f1:15:3b:ac:
ea:c0:f5:ef:1e:41:2b:a4:21:65:2b:54:94:c5:2c:0b:f9:dd:
a5:3a:0a:a3:be:05:f3:18:de:2d:fd:7a:9d:21:ed:6a:e9:ce:
b7:b0:b7:e6:ea:71:87:62:b9:dd:a4:06:cb:a7:02:91:a0:30:
82:76:0f:a0:b3:75:5d:b7:4e:9c:5e:e6:bf:ad:2c:64:11:4d:
8e:7e:f2:4a:b1:54:d9:41:de:bb:61:d7:82:b6:2a:93:36:fc:
d3:0c:93:03:d7:6a:b6:2d:0d:83:41:76:5b:71:57:25:ee:91:
39:4a:6a:df:32:22:66:43:24:93:be:4e:85:20:17:ef:3d:60:
5b:98:b4:40:8f:5e:ad:57:4c:67:15:b0:24:71:1f:6a:53:60:
8f:f6:e3:dd:38:e6:d7:9b:75:eb:47:7a:f8:bd:ed:26:b0:99:
c0:0d:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:55 2025 by rpki-client