Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: YKgLV+GAn1AQS2t5JVDfOmB0QHpV6VdTbjR5lb7joFc=
Subject key identifier: 9B:A7:F3:B7:E9:80:1F:43:7D:C3:54:CB:66:A0:4E:40:97:CE:63:0E
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 0195790FF5D70C60897639EFB3C6DF754095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: A2
Signing time: Sun 09 Mar 2025 04:00:43 +0000
Manifest this update: Sun 09 Mar 2025 04:00:43 +0000
Manifest next update: Mon 10 Mar 2025 04:00:43 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: Ow1rl8wIOmYqMdyB+vi3aZhwlKQtbLj8eTXENcpnE6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:0f:f5:d7:0c:60:89:76:39:ef:b3:c6:df:75:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Mar 9 04:00:43 2025 GMT
Not After : Mar 10 04:00:43 2025 GMT
Subject: CN=9ba7f3b7e9801f437dc354cb66a04e4097ce630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:64:cd:d5:b7:82:61:e0:81:7d:bf:19:47:
e6:d9:5c:e8:b7:fc:aa:85:c2:a0:29:39:07:67:7b:
a6:6d:f3:30:ab:0f:ff:bd:7c:b6:65:46:8d:0b:67:
ac:81:5f:e9:61:e0:9c:f3:2d:96:29:53:ef:a2:6d:
bb:cc:5d:ef:86:44:0a:ca:14:21:3a:69:fc:3b:79:
c9:29:4e:1b:e9:ea:21:9e:2f:f5:0b:a7:ac:4b:b1:
9e:bb:07:46:4d:b5:61:4d:a9:4d:bd:0c:6f:22:0a:
3a:54:f2:b5:0c:ce:28:de:51:1c:b8:51:12:91:ae:
40:34:51:c7:b3:c5:b8:ee:63:80:b8:ec:a1:bf:3d:
60:1c:6c:bd:5b:c3:3f:59:02:74:48:ac:13:c0:72:
bb:27:3f:4d:d4:9a:a0:b3:c5:66:4e:b6:87:0f:17:
2e:26:eb:a1:c0:e3:7c:35:20:61:78:ae:0b:a0:7f:
d8:29:9a:e7:69:a2:27:bc:73:15:57:eb:a6:47:9a:
d9:93:9a:f8:18:79:23:e2:28:28:4f:92:b3:06:64:
9a:84:2a:e9:1b:b1:b3:28:be:9c:10:b5:38:f6:32:
92:a2:19:8f:f3:e6:dd:35:23:66:3b:61:3e:26:ce:
0c:4b:85:43:d1:b9:fa:88:5d:be:28:e1:44:01:f5:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:F3:B7:E9:80:1F:43:7D:C3:54:CB:66:A0:4E:40:97:CE:63:0E
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f6:af:3a:dc:c0:61:1c:e1:cc:16:5f:54:a3:69:75:7e:b9:
39:7d:b9:d1:12:a9:52:a2:f5:45:46:1b:d1:6d:be:00:26:83:
12:d6:71:10:90:7e:9a:da:cf:f3:32:cc:47:d6:f7:3b:99:3b:
36:f9:1e:ea:0b:77:4e:b3:45:04:04:2a:32:2e:e2:64:02:71:
b7:cc:83:ed:ac:f2:0f:f1:aa:68:d5:9f:4a:e5:52:2f:ff:1a:
9a:ee:07:da:07:86:93:f3:f3:84:a9:d4:2a:d7:7c:a1:6d:4f:
ac:56:52:b8:11:b0:b7:30:3a:92:93:0c:9a:5b:b5:2f:f1:1f:
fb:bf:20:6f:61:65:36:75:f0:b8:46:d6:00:62:2d:63:73:1a:
01:62:5e:15:22:1e:6f:55:e2:aa:59:a4:56:ef:8e:52:43:ee:
f7:83:49:f0:48:c8:a0:5c:f1:59:75:1e:57:c2:1c:16:44:9c:
36:4c:2d:c2:cd:4b:1f:63:07:f3:f3:40:7f:c7:24:ff:d0:23:
6e:78:1d:e4:a6:fe:44:7b:39:36:59:66:1b:20:e3:7c:5b:17:
74:64:e1:fc:23:35:79:21:81:94:c5:c0:e8:fe:22:ca:49:52:
b5:76:b5:38:40:75:2c:2d:a3:13:81:06:81:fa:ee:09:9b:44:
59:48:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:18:11 2025 by rpki-client