Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: 8cr0ioSuibv81qk27nQ1+QuJxtoDPTtFbDGPd/326xk=
Subject key identifier: 31:37:70:73:FE:FA:87:36:82:FA:E1:BE:E0:D7:F0:2C:52:90:81:5B
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 019644B1D21B139BCD370FB1ADF30B25E789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 109A
Signing time: Thu 17 Apr 2025 17:00:26 +0000
Manifest this update: Thu 17 Apr 2025 17:00:26 +0000
Manifest next update: Fri 18 Apr 2025 17:00:26 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: 284GrfeN9H4rUzO4yUTCuwfQa3Amcc4T/pAUYb6ySJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:d2:1b:13:9b:cd:37:0f:b1:ad:f3:0b:25:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Apr 17 17:00:26 2025 GMT
Not After : Apr 18 17:00:26 2025 GMT
Subject: CN=31377073fefa873682fae1bee0d7f02c5290815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:9f:73:98:4d:83:ee:b0:d3:28:b7:d0:f4:
fe:ae:30:40:ec:8c:f9:ca:68:5e:37:0b:fc:c1:c8:
8f:e8:fa:7e:cc:de:97:7d:d1:e2:a2:1f:6a:4e:4c:
5b:ec:7c:f8:6b:30:31:79:8e:84:2f:0d:90:5c:45:
de:c6:fb:4d:36:66:37:21:5d:dc:4e:06:36:05:d7:
f1:1d:9a:b2:5f:2e:ac:f3:0c:d5:b6:63:08:7d:35:
e7:c6:54:9e:0e:e9:ec:fa:f0:fd:9b:4f:06:16:25:
f9:d0:f2:a3:5e:9f:36:23:64:76:48:6f:e6:eb:35:
58:a1:85:82:3a:e1:72:af:c3:58:68:4e:03:39:b5:
51:71:fa:72:c0:95:6c:35:b9:1a:06:0c:9e:59:0a:
5c:9a:41:9f:ef:b9:2b:8e:c8:aa:2e:f6:fa:4e:dc:
06:a2:5c:62:9e:17:14:86:d6:ed:e5:cd:60:fa:f3:
ca:8b:a4:4c:d3:7f:72:58:ab:85:f5:d9:fb:14:19:
16:b8:b7:e9:4d:43:09:6b:ef:59:29:7d:e0:8a:c7:
86:80:e5:35:4e:b4:c8:ed:d2:01:0c:5b:3c:56:b7:
4d:5c:2a:a0:2c:d7:32:fe:35:17:59:6a:46:5a:e9:
d2:20:da:d8:b9:5d:79:60:46:9c:bf:60:19:c8:77:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:70:73:FE:FA:87:36:82:FA:E1:BE:E0:D7:F0:2C:52:90:81:5B
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:26:b2:af:f8:f6:bd:15:41:5a:25:19:a1:ab:65:4f:8e:bf:
34:06:7d:2a:ad:27:8d:e2:3f:86:58:75:cc:89:fc:c7:90:9b:
73:be:67:bf:eb:d5:01:f0:f0:2f:c4:93:f6:3e:37:af:4a:d0:
b5:6b:89:27:e1:10:b8:69:17:76:9a:15:1f:84:a5:5a:b2:8e:
8b:c4:27:0d:2f:49:26:50:d8:e3:c7:c0:12:95:70:72:2b:18:
e9:0a:22:80:b2:2d:40:c6:4d:8c:fd:cb:74:97:91:d3:b5:23:
14:0a:2a:28:07:74:6a:cf:ef:95:18:25:de:16:17:d6:3c:13:
58:28:91:f1:a0:98:a0:8b:48:85:7c:b8:c7:10:72:3d:3e:4c:
98:42:d3:eb:57:99:77:bf:cb:d5:1b:b3:c3:4c:7e:b2:c4:63:
ec:81:97:63:bd:3e:c4:bd:c8:24:33:66:be:7c:22:01:f4:32:
94:06:ec:da:b2:34:8f:07:1a:75:fe:7f:e0:b1:de:54:43:50:
c0:b2:1d:5e:4d:ab:e9:c4:8f:18:2a:ec:87:8e:0b:52:1c:51:
f1:9c:cb:2c:d0:a1:71:f2:bb:86:6d:6e:85:6a:38:8f:67:d6:
6f:94:85:0b:f1:03:2f:a9:fd:99:69:15:c6:4c:10:1d:2f:18:
19:fd:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:37 2025 by rpki-client