Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: wLrjZ2bf7FU9Sojstv0OZBIkEp8VVj121yZ8gCzzqrU=
Subject key identifier: 19:62:39:99:9F:BB:8B:93:DC:A4:6B:F1:E4:1B:C9:82:53:12:E8:82
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 0196515ACEB10AE3860A95D4445C9170BFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 04:00:27 +0000
Manifest this update: Sun 20 Apr 2025 04:00:27 +0000
Manifest next update: Mon 21 Apr 2025 04:00:27 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: 2CX7k+d9NV7WJpSh8ZIuup9ueC5zogagZwmRfXUnclg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:ce:b1:0a:e3:86:0a:95:d4:44:5c:91:70:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Apr 20 04:00:27 2025 GMT
Not After : Apr 21 04:00:27 2025 GMT
Subject: CN=196239999fbb8b93dca46bf1e41bc9825312e882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:83:6a:ba:4f:58:75:02:00:5d:74:48:75:
a4:7c:0f:0c:6f:e0:2a:83:25:b7:5f:62:a0:b8:10:
de:78:17:c6:61:85:63:37:6e:21:24:e8:71:fe:35:
57:5c:f6:8b:47:cb:ec:3a:ee:ee:9f:9a:f6:20:97:
8d:e5:62:81:f8:76:5a:03:5a:74:15:a1:94:8e:bb:
b2:ad:e5:42:67:9e:bc:e9:b7:05:7d:08:32:23:59:
81:1f:0b:8f:e0:4e:5b:97:f5:8a:39:84:45:9b:48:
3b:27:2c:60:93:b3:f8:a3:bd:2d:f5:d1:04:aa:a8:
b2:ae:a1:b9:c7:db:1f:ab:a0:af:d8:6a:4e:18:7b:
c1:b4:ad:e7:2c:9e:5f:92:f7:95:bd:25:32:44:0e:
cc:0c:6a:bf:ef:4a:d6:66:3e:11:42:19:56:6b:db:
7d:8f:b8:86:22:25:8b:6b:00:61:2b:57:5a:9b:34:
88:91:f2:4d:57:ee:3d:fd:38:a0:88:9f:a9:09:3b:
b3:06:bb:89:42:05:27:de:74:98:7b:f4:7c:39:83:
2d:38:bd:0f:2a:c4:c0:c4:bd:4f:57:ce:3d:26:93:
92:68:69:1e:d0:96:a4:51:de:df:d7:9e:d9:6a:82:
59:ec:21:68:75:9a:3e:fc:e5:d7:50:5c:9d:be:7d:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:39:99:9F:BB:8B:93:DC:A4:6B:F1:E4:1B:C9:82:53:12:E8:82
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:e2:f7:fc:9b:8f:b5:82:c2:d0:68:4c:80:97:b8:cf:83:
c8:0f:be:ce:a9:e2:4b:93:9b:0a:4c:e6:0b:f4:c0:84:7b:0c:
93:6f:5c:d0:94:d2:b9:4f:16:13:54:ff:18:a5:a8:42:59:fa:
d8:36:08:22:c6:26:e5:2e:62:8e:35:f1:b1:78:35:98:a4:f9:
55:82:cb:88:8f:d0:af:dc:8a:b5:80:d2:9d:ba:20:76:c3:4a:
e5:28:c0:b8:31:04:44:36:ac:96:ca:29:47:b0:7c:e4:3d:00:
bc:43:84:d4:0e:aa:02:28:a6:ed:35:99:5c:93:12:e8:e3:bd:
85:48:e9:09:2a:57:22:b5:e0:5c:d6:d7:11:9d:5b:08:02:df:
a7:6c:62:ec:d4:be:14:8c:14:22:1b:91:c3:93:95:e3:8a:a3:
d4:d2:86:86:ff:0e:5b:65:40:ab:a4:9b:52:6b:4e:8f:12:83:
e2:d2:c6:75:46:49:e9:6c:5e:84:fe:b4:93:69:e3:01:bb:8a:
71:70:2c:ff:df:64:bc:af:a4:bd:fe:55:c7:dc:af:fe:9d:7f:
5f:4b:5c:21:45:3a:c5:f6:31:6b:8b:cf:e0:53:da:0d:c9:dd:
7a:70:6d:7a:1b:fe:08:c8:93:25:70:02:91:ff:d4:0c:d5:33:
14:16:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:00 2025 by rpki-client