Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: r4/VXcOLUh2iMGGqTlkLxtuyUVfCSX0x2OmNC4ape7o=
Subject key identifier: 7F:3D:A4:82:14:99:6C:E0:3D:8A:50:0C:15:74:4B:C5:B5:B2:9F:A5
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 01965A5DBDB6A2C4668138B0E0219782E72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0B2D
Signing time: Mon 21 Apr 2025 22:00:14 +0000
Manifest this update: Mon 21 Apr 2025 22:00:14 +0000
Manifest next update: Tue 22 Apr 2025 22:00:14 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: TIo/xSEXGs7INEOgiE90BDgOUlkZZ61175X9N1L0xmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:bd:b6:a2:c4:66:81:38:b0:e0:21:97:82:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Apr 21 22:00:14 2025 GMT
Not After : Apr 22 22:00:14 2025 GMT
Subject: CN=7f3da48214996ce03d8a500c15744bc5b5b29fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:d2:03:d9:47:f2:0a:0d:6a:d0:16:f5:80:
65:ce:db:34:38:2d:88:a9:d1:22:cc:24:91:6c:87:
4b:21:1e:ca:91:30:ef:f7:60:7c:e6:66:26:76:4a:
c1:f9:06:2c:a7:1f:75:a7:f4:ef:4e:4e:81:3a:b6:
52:8e:80:ef:1c:f9:b2:31:b1:9f:1f:af:10:bf:85:
b4:93:31:4e:01:0d:58:b9:40:11:46:fa:65:6b:ee:
53:1c:b7:28:0a:5f:2d:35:0a:95:87:00:89:8c:0c:
0c:48:26:af:79:02:a6:82:18:35:b5:09:ce:1c:a3:
32:fa:4c:ed:39:2e:d5:88:eb:12:ae:c3:37:e9:03:
bb:03:43:6f:a3:23:74:2a:aa:8e:fd:15:0e:50:3b:
76:fc:b7:6e:23:80:3b:ed:b7:99:59:4d:ea:be:3d:
13:b0:bf:f4:e7:98:29:e7:cd:e9:8f:2e:fb:9b:58:
4f:e5:65:6c:62:37:00:c4:2b:b5:ee:1c:c9:2d:aa:
26:d9:5a:57:b2:ee:c2:b3:53:05:82:80:69:24:e4:
80:79:90:ab:ee:21:be:00:92:8c:12:31:ed:d0:61:
82:ee:a2:62:dd:52:39:06:e4:55:aa:30:93:88:a1:
2f:ec:a4:1a:3f:b6:90:d9:a8:1c:71:c7:bb:c9:25:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:A4:82:14:99:6C:E0:3D:8A:50:0C:15:74:4B:C5:B5:B2:9F:A5
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a2:d7:6d:82:1b:d2:da:df:79:db:2a:06:65:f5:17:73:da:
e5:2f:f1:ad:b2:63:9b:ba:7b:9b:1b:02:d4:f5:c3:fb:e6:88:
23:e2:d3:52:71:1c:00:db:3b:f9:20:03:0b:20:17:eb:8f:3a:
1a:d3:26:32:6a:50:58:73:3c:15:97:ab:31:98:d1:e9:d6:88:
a4:f9:79:f5:ec:1c:42:d6:4a:8f:d7:ce:0b:dc:2a:93:1b:6b:
3b:cb:9a:15:9b:0a:a3:0d:d3:5a:96:c4:f7:b3:b1:69:7c:6f:
ea:b2:49:36:51:9d:89:ad:af:c8:07:b7:98:35:93:f5:7c:af:
98:5d:f7:da:84:41:0f:0a:a3:33:4b:14:32:18:18:90:b2:12:
ee:0f:f8:16:15:19:92:a6:e8:aa:92:de:f3:f4:73:39:d4:de:
92:2f:d0:ba:25:40:2a:2d:06:dc:39:81:a7:72:eb:6f:b9:16:
3f:61:51:05:84:76:dc:a9:a6:39:eb:1b:32:a5:67:da:23:cf:
32:1d:bd:54:ef:60:b5:c1:34:b1:b8:1f:bb:c5:8e:b1:df:45:
ff:e7:23:65:f0:36:ae:e7:7a:39:59:6b:8c:97:1e:e5:1e:2f:
a6:cc:67:64:0d:85:77:a5:62:18:68:3d:6b:59:d5:6a:7c:6f:
5c:e8:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:28:21 2025 by rpki-client