Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: qUzQEEqbW7cciGdXmFn22BISE25D9GLCDsS3iPTvJ5Q=
Subject key identifier: F2:25:5B:42:C7:74:0D:CB:10:7D:A2:9B:54:6E:56:78:63:BC:2B:8B
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 01958C602C41EF98C96C7E5E4D04694360FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 04B0
Signing time: Wed 12 Mar 2025 22:01:07 +0000
Manifest this update: Wed 12 Mar 2025 22:01:07 +0000
Manifest next update: Thu 13 Mar 2025 22:01:07 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: MT+qh4jtuWdIc9KzRVrX6dlcIy4n+iGuTTqJynJ0/lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:2c:41:ef:98:c9:6c:7e:5e:4d:04:69:43:60:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Mar 12 22:01:07 2025 GMT
Not After : Mar 13 22:01:07 2025 GMT
Subject: CN=f2255b42c7740dcb107da29b546e567863bc2b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:c0:ec:a0:64:48:1b:27:05:63:ff:ba:ce:
2e:ab:d9:39:fc:64:cc:d3:58:14:0d:c4:79:d2:21:
48:ba:c4:c7:f9:f0:80:57:97:f2:5d:f9:ba:c1:61:
fb:4f:f6:41:49:d9:55:97:eb:6c:c8:2e:ca:e9:25:
18:24:82:c7:35:b7:bc:a4:ec:d6:9d:a1:f5:1b:c5:
92:56:ef:d2:a7:a5:f5:f9:36:ca:40:73:d4:d8:b3:
99:d2:66:25:bd:55:d9:4f:4d:68:e8:56:27:49:66:
10:3f:bf:75:ed:b7:d5:4d:25:5d:8c:73:f2:d2:cc:
29:88:b8:5b:2f:b5:00:b7:d0:f1:1a:af:6f:c7:49:
be:98:59:e3:ad:27:2d:a7:89:b7:96:84:91:70:47:
d4:1f:4b:e5:5d:3f:88:cb:33:8c:76:7f:0d:9c:f8:
ed:13:ab:3f:5d:a3:08:d7:aa:55:a9:c8:e4:5b:c3:
76:49:df:68:23:d3:2f:94:7c:2e:f8:28:a7:72:e1:
a5:cb:1f:a4:50:ef:c7:73:08:a3:b5:e0:15:0e:81:
cb:af:80:db:5f:06:7b:b1:02:a8:34:67:d1:92:25:
33:70:55:b4:20:2d:97:22:c0:bb:82:3d:28:15:87:
df:0a:e3:a8:c3:7d:9f:a9:ed:73:ed:8c:4d:08:ae:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:5B:42:C7:74:0D:CB:10:7D:A2:9B:54:6E:56:78:63:BC:2B:8B
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:3e:22:48:ae:d9:b5:6b:fe:58:bf:79:53:5e:d3:ab:e2:
c2:fc:a2:da:2d:38:27:8f:53:e8:2a:a4:b6:2b:ad:a2:15:58:
84:b3:45:c0:c8:24:e3:de:a6:42:cd:da:a3:78:47:af:cd:2f:
03:f4:6f:0b:e9:c7:12:8d:14:1f:da:81:51:3d:81:d8:d9:75:
c9:82:60:99:e6:88:0c:99:74:06:3b:49:ba:5f:e3:2b:25:cb:
2f:da:7d:51:04:fb:25:82:2c:4a:56:5a:95:0e:58:9a:c2:46:
2c:40:9f:b3:ae:72:c2:63:5f:53:d2:1d:e1:aa:56:03:fe:5d:
22:dc:8e:15:2f:77:41:d8:5d:72:aa:b1:1a:d1:6f:42:c4:89:
80:6c:aa:bd:48:9d:f1:0a:89:0b:12:fb:45:44:ae:4e:cb:e0:
38:40:68:ca:dd:c0:f2:eb:3f:01:58:39:e3:63:22:79:65:67:
b5:68:19:0e:ce:20:2c:44:d6:b3:42:99:5d:7b:c6:42:76:d2:
bb:0d:a0:fa:54:de:72:86:b0:1a:5f:f4:da:ca:f0:51:d3:4a:
ba:da:8b:ca:95:1d:96:bd:8b:6b:db:66:cc:9f:e9:7f:1e:de:
88:71:a6:49:b2:2b:5b:16:5a:12:3f:41:a1:80:0a:12:19:f3:
2a:58:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:16 2025 by rpki-client