Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier: cmWuFB1Zg1UyQW8EVsPTqiv/esHMBdqSUe5cPr56RMI=
Subject key identifier: CD:18:7A:04:21:71:03:E1:69:CD:05:D8:B4:DA:20:1C:31:42:25:54
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial: 01965B70DE451A18407B1906C782CE176AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number: A8
Signing time: Tue 22 Apr 2025 03:00:45 +0000
Manifest this update: Tue 22 Apr 2025 03:00:45 +0000
Manifest next update: Wed 23 Apr 2025 03:00:45 +0000
Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: AzdC6HNjKfgLVbs2gnzGFBt/9g3JnQ+2q9FFcL5+a0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:de:45:1a:18:40:7b:19:06:c7:82:ce:17:6a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Validity
Not Before: Apr 22 03:00:45 2025 GMT
Not After : Apr 23 03:00:45 2025 GMT
Subject: CN=cd187a04217103e169cd05d8b4da201c31422554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:d6:fc:93:f3:90:e9:96:a9:7d:28:67:57:
b6:dd:ab:9a:54:2b:59:1f:a5:6f:ba:e3:03:07:d9:
21:15:1b:08:56:b2:e1:4d:71:f5:d9:60:22:91:27:
1d:b4:a3:26:c5:7d:19:38:8f:a6:29:88:0c:3b:aa:
51:13:af:13:50:0f:fa:28:f5:2e:4c:7b:9d:80:2f:
71:f1:5a:14:ef:50:58:45:3a:69:b6:56:6c:c6:de:
f7:ce:3c:53:36:a8:fd:d6:ec:f5:fe:a6:e3:36:d3:
63:b9:56:42:bd:f4:ba:78:7e:1d:42:18:24:50:59:
66:c9:f2:92:c0:1c:bb:0a:e6:73:7d:3e:2a:cf:9f:
83:b1:56:90:00:34:1d:88:00:98:4f:d9:04:e3:01:
24:ab:c1:56:3f:91:d9:87:1a:dc:54:7b:14:8e:4c:
92:b6:66:45:8b:13:4f:22:85:3c:8c:7e:c3:4a:ac:
81:61:d3:8a:28:67:ef:67:8b:5c:94:58:87:0d:f6:
27:bb:f4:b5:c4:fa:34:bd:0d:2d:ac:55:ae:cc:f6:
59:0c:c4:5e:40:6a:12:e2:6c:6c:96:b1:f9:ed:3a:
ea:98:c2:c1:fa:73:6a:c7:f1:dd:70:96:1a:d1:e4:
a4:fc:b6:2f:c4:89:7b:82:7c:cd:99:04:04:0e:d1:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:7A:04:21:71:03:E1:69:CD:05:D8:B4:DA:20:1C:31:42:25:54
X509v3 Authority Key Identifier:
keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:99:58:01:16:bf:ae:dc:5f:03:f7:cc:e1:04:15:98:fd:
a1:6e:e6:64:c5:20:a3:65:93:61:b0:0e:15:ad:c2:c5:5e:ef:
14:be:57:f5:b4:8d:2d:0d:45:94:0a:d5:08:70:b6:43:f3:84:
e9:34:26:83:ef:f3:97:d3:b7:6a:64:f8:8b:c2:ba:cc:a2:93:
6c:84:97:0a:c2:d6:f4:94:72:ae:43:aa:6d:fd:ef:08:c8:79:
45:a8:a9:b9:bd:1a:b3:a9:9a:ed:f7:d1:6c:32:3e:c9:64:5b:
ce:cb:ab:c7:e2:d2:48:a1:53:bb:8e:c4:f5:d7:fa:ed:40:a4:
6d:c3:00:e9:47:0c:46:a3:f3:70:25:e0:30:50:7c:36:98:03:
d8:2b:bc:7b:f7:dd:7f:ba:70:7f:a3:9a:92:7c:6d:2f:55:55:
af:44:c4:d3:a1:37:99:cd:64:c4:c9:a6:a9:7b:8b:21:1d:aa:
f4:22:41:54:88:69:11:8f:5d:9f:27:3e:b0:a3:fd:bc:d3:05:
2c:c6:8c:30:a4:8f:74:cd:fe:3b:f0:4d:28:db:9e:b6:f1:16:
04:4e:84:03:af:ee:0d:b9:d6:49:71:50:d8:a6:61:f3:ac:62:
44:b4:44:7c:b0:24:50:c6:3f:d8:2b:fd:f9:ed:b4:7a:60:bc:
66:e6:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:43 2025 by rpki-client