Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: 2DcULzkK4fb7rR+SD8RzlnMdmuhEjAZB8HB5vuZpTJI=
Subject key identifier: 86:F0:8F:43:F4:A0:87:2D:93:E4:A4:CE:A3:23:34:A0:38:42:04:66
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 01958B4D99A8474F003B3FB5036373E33F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 103A
Signing time: Wed 12 Mar 2025 17:01:13 +0000
Manifest this update: Wed 12 Mar 2025 17:01:13 +0000
Manifest next update: Thu 13 Mar 2025 17:01:13 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: vgzfjwICWCQDoAI8JPtDFVEY8cbz267e2/NBzx0Wah4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:99:a8:47:4f:00:3b:3f:b5:03:63:73:e3:3f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Mar 12 17:01:13 2025 GMT
Not After : Mar 13 17:01:13 2025 GMT
Subject: CN=86f08f43f4a0872d93e4a4cea32334a038420466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:9e:d5:26:c1:23:3c:6c:a6:67:a6:41:14:
47:d8:45:4d:9a:03:0a:11:e3:55:ae:b0:85:19:ab:
51:64:22:8c:28:41:c6:c4:c3:0e:df:16:1a:e6:32:
16:5b:14:11:9b:88:e7:e2:c6:c4:7d:7a:16:9f:3a:
dd:d5:cb:76:fb:e1:52:8e:6a:c5:9c:cd:5a:67:43:
49:59:fd:81:f9:f6:bd:e2:f7:54:e6:54:c8:2e:a2:
b3:a8:89:a7:c6:89:4d:17:5d:19:f0:42:4d:26:ba:
dc:fb:d5:b0:23:32:51:2d:fc:a7:e5:ed:63:21:f7:
ba:c1:fe:de:dd:5c:9b:db:11:17:26:02:25:c8:8a:
1f:40:f6:1b:e4:b7:7c:df:8e:69:82:ab:9d:c8:a6:
df:3f:86:64:ca:74:6a:98:48:49:8b:5c:b7:c0:83:
61:bf:2d:d8:75:b1:51:a1:65:bb:83:95:1f:fd:66:
2d:ad:7e:b6:63:d4:7d:14:0b:a3:94:ca:bf:65:cd:
f6:e3:aa:99:a9:02:95:61:3f:b8:53:20:cb:50:30:
63:26:bf:9d:12:97:41:41:27:23:5d:16:07:6c:34:
75:37:ce:42:aa:81:d2:b3:98:89:42:45:a1:f2:89:
f8:c4:78:ce:7e:b4:3c:19:38:c3:6b:30:62:02:09:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:8F:43:F4:A0:87:2D:93:E4:A4:CE:A3:23:34:A0:38:42:04:66
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:6e:60:a2:d5:66:2f:b8:cf:5f:f9:6e:f1:08:d5:d6:37:
65:15:2b:bd:30:9c:d5:90:31:78:56:11:2d:41:67:ff:02:80:
fe:a8:07:91:29:eb:e5:84:47:a3:61:17:e8:dc:77:d6:24:68:
3a:f1:36:95:d1:45:43:20:7e:0d:89:aa:b0:98:0d:b4:b2:32:
7c:1a:30:6b:87:0d:13:85:87:d2:12:b1:f5:78:d3:19:d5:6b:
2b:d6:dd:7a:9e:7e:6e:b0:9c:e4:c3:fc:d1:6b:f2:b7:de:9a:
0e:b5:0f:2f:68:f4:ed:39:a1:bd:b3:15:a7:96:ea:b5:c4:cc:
6d:03:16:0a:8f:50:91:66:c9:13:d2:a9:66:c4:eb:cf:dd:06:
27:b1:c0:92:8f:6b:f0:b5:dd:2b:96:05:e9:13:dc:d3:c2:58:
58:aa:94:23:f2:e3:78:41:c0:89:43:91:87:20:d0:9c:b5:4d:
3d:c9:92:53:1e:3e:c5:3b:9d:bc:c3:a9:af:1c:85:98:59:92:
da:69:a5:b9:31:89:41:2b:21:b4:b3:d2:e7:00:b1:92:2f:de:
58:eb:82:1c:55:44:e8:f7:9a:3e:53:43:ac:23:cb:50:39:9b:
5a:83:36:64:fd:97:2b:da:46:79:dc:cc:f8:ec:dd:59:7c:73:
04:49:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:14 2025 by rpki-client