Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: rdg+KWGaNGiwt1EuPtorHbkZfL8FXDyO+hHtz60jq+I=
Subject key identifier: 1B:DA:21:21:11:E0:95:68:A6:75:F8:9F:E1:AC:5A:B3:8C:5A:A7:1A
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 01964BFD9ED9C6A404E891F28F3F550B2CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 1209
Signing time: Sat 19 Apr 2025 03:00:34 +0000
Manifest this update: Sat 19 Apr 2025 03:00:34 +0000
Manifest next update: Sun 20 Apr 2025 03:00:34 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: dg4718EkCX4XXLE3ann21qSsYdM7YKiNRN9CJg+hJds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:9e:d9:c6:a4:04:e8:91:f2:8f:3f:55:0b:2c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Apr 19 03:00:34 2025 GMT
Not After : Apr 20 03:00:34 2025 GMT
Subject: CN=1bda212111e09568a675f89fe1ac5ab38c5aa71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:11:0f:0b:4d:4d:a4:3f:f4:de:bf:7e:2a:
51:c5:f5:45:be:ba:94:e2:d2:28:5f:ec:00:dc:7d:
b1:d3:6e:31:99:e5:78:5d:18:e0:b8:6c:dd:29:ad:
f7:4a:e1:2c:8c:19:f3:ab:bd:42:3b:e5:2c:08:75:
76:3b:4c:5a:02:01:84:8d:27:bd:b5:8e:c4:91:eb:
f7:3d:dd:8b:51:ea:ce:98:3f:81:61:d8:2e:fb:34:
ba:1f:5b:07:ed:f8:6c:01:d1:0c:2b:25:8e:9a:41:
fd:38:23:37:20:d0:40:0f:b0:b3:41:e5:9a:75:db:
21:7d:b1:da:ba:64:a3:6f:7a:4e:cb:d8:8b:db:f9:
db:29:cc:57:6d:9a:d6:d8:e8:08:25:d4:10:9b:91:
f2:cc:cd:05:55:7d:9e:4f:7d:93:e0:c4:a4:bf:85:
4f:8f:5f:b6:94:73:57:b3:71:a0:fd:ed:4c:e6:c3:
69:36:27:81:58:92:e9:46:4f:a7:19:01:64:f4:12:
7e:8b:ff:a5:30:98:64:6a:1e:bb:7e:c6:ff:15:45:
8f:53:90:53:55:65:43:41:31:ce:97:7e:37:4f:42:
7a:e4:99:fc:84:c0:a9:5b:f4:bf:90:d8:d9:b7:e3:
bd:79:c8:b7:e8:aa:08:b6:ac:a4:0d:dd:35:0a:70:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:21:21:11:E0:95:68:A6:75:F8:9F:E1:AC:5A:B3:8C:5A:A7:1A
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:26:94:c8:90:46:db:a6:49:c4:11:62:c7:c0:17:2b:9d:
c5:ee:f6:7d:b3:84:eb:52:71:12:f3:5f:e2:7c:7a:bb:86:c4:
8b:22:3d:46:fe:1d:e6:1d:54:23:d0:d2:cf:62:3a:00:96:43:
4b:dd:6d:d3:a4:4c:52:fc:40:c8:59:96:2e:24:51:d8:43:a7:
c6:95:28:79:fe:aa:fb:fd:86:4d:5c:53:bf:72:23:35:fe:59:
8c:35:35:2a:75:89:fc:22:a0:a2:6c:8d:55:36:c8:af:b3:b0:
22:bd:3d:3a:a8:2e:03:9d:1f:d0:25:25:68:2e:36:55:6c:ee:
00:fe:f6:3f:01:86:66:bf:c0:58:58:25:e7:52:7a:8c:57:25:
d8:d2:68:6b:2f:ed:44:53:cc:27:e1:a9:c3:ae:2c:88:98:1a:
4e:cb:47:97:c6:02:68:ca:82:fc:30:03:e1:46:35:cc:19:46:
27:f4:8c:60:c4:d9:ed:c8:eb:31:1d:50:a8:3a:1f:eb:f7:52:
5b:90:a7:34:76:35:f1:2c:8e:d6:a2:ef:77:1d:6b:ae:5a:71:
0f:43:62:31:8b:2b:36:eb:b5:99:d9:c7:e5:e8:f0:7f:2f:ff:
8c:bd:5e:37:84:6f:99:a2:f4:46:08:7a:13:c2:d3:6a:7c:7d:
ec:e6:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:29:27 2025 by rpki-client