Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: Q6D6LGathn0bxKEfxcNTDON1PtmASunOK0D7KXjfLyE=
Subject key identifier: 80:03:EC:9B:BB:42:FB:8A:2E:C6:99:11:41:A3:F3:D5:BA:6F:02:3D
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 01964CD9AD26674382F7FF9A52E647DFFBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 14F5
Signing time: Sat 19 Apr 2025 07:00:56 +0000
Manifest this update: Sat 19 Apr 2025 07:00:56 +0000
Manifest next update: Sun 20 Apr 2025 07:00:56 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: upaNVikxbCKuLVeFxleZNTy0c+IQUEJ8W4vJZgYp/uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:ad:26:67:43:82:f7:ff:9a:52:e6:47:df:fb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Apr 19 07:00:56 2025 GMT
Not After : Apr 20 07:00:56 2025 GMT
Subject: CN=8003ec9bbb42fb8a2ec6991141a3f3d5ba6f023d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:4c:6e:ef:39:10:4e:99:1f:cd:b3:e5:4b:
2c:df:6f:b4:82:a2:be:a3:a0:45:28:64:e4:58:94:
cf:f9:1d:4b:75:c5:1e:3e:a1:7a:93:bf:d4:86:c8:
9c:8d:a4:08:c2:40:f8:27:25:72:17:52:8d:49:52:
ae:b4:80:26:ba:a5:a0:f6:fb:12:9f:eb:f4:13:c3:
60:12:f2:11:f7:2e:e8:74:6e:aa:93:e2:f1:de:7c:
9a:44:36:c9:ca:89:d4:94:af:a1:bb:59:f4:fa:0a:
1f:71:48:68:46:e2:43:91:1b:a1:d9:8c:60:cb:b3:
2a:fc:3f:81:53:5f:68:86:34:ec:80:91:c6:29:a5:
ba:d1:10:bc:be:45:ca:80:d4:08:2d:a2:7a:62:5c:
29:1f:a4:db:6b:85:4b:c9:d2:91:ff:36:13:af:b7:
0e:5b:07:a4:f4:d5:c2:b2:41:4a:cf:51:07:0f:35:
e3:1b:b3:e4:b4:fb:6f:ee:f7:7d:db:78:98:7b:69:
0e:b1:ff:3c:51:0e:db:d0:7f:fa:57:f5:67:d5:2d:
13:63:6e:3b:58:f9:92:83:3d:28:97:a6:32:24:68:
2c:83:0a:de:6e:01:5e:35:33:20:ed:96:ee:7d:69:
57:cf:1f:9a:a2:bf:12:61:ba:3d:1c:48:92:5e:3c:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:EC:9B:BB:42:FB:8A:2E:C6:99:11:41:A3:F3:D5:BA:6F:02:3D
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a8:47:62:85:72:d8:94:a7:27:7c:32:92:53:3e:0d:81:56:
bb:1c:dc:b6:c0:3b:66:47:f7:b9:8a:79:eb:86:86:51:f0:83:
13:51:83:9f:a4:0f:64:b4:ea:40:ca:a7:5a:a2:f2:e7:7f:1b:
99:81:5e:ff:52:eb:a2:13:98:e2:a6:52:03:ff:a1:a9:43:89:
54:31:5e:40:0d:bb:ef:30:a1:5e:e7:8f:d5:d2:f7:7d:d3:e8:
52:15:5f:0d:1d:25:f0:93:e8:24:b1:bb:85:a7:a1:88:fa:3c:
82:86:a0:86:44:ec:39:95:53:4f:93:d7:06:b2:93:69:62:8a:
16:a4:79:c8:f3:dc:c0:78:9e:ae:8a:3d:97:02:49:4c:12:07:
33:ca:28:7d:62:d2:71:7e:e0:e8:bd:48:6b:e6:33:a2:12:5a:
26:35:b9:d2:ba:28:46:5d:c0:19:b9:6a:c1:21:66:e0:e5:ab:
57:ce:7e:1b:97:07:57:0e:83:bd:69:19:c7:c8:65:05:88:25:
fa:26:73:30:7f:40:62:80:85:53:44:44:e6:38:69:de:70:ce:
f4:b4:55:f9:f2:7a:e6:a9:ee:6a:2b:06:ef:fe:53:bb:38:da:
23:89:0c:77:65:38:de:d9:c3:9f:a2:b8:34:cf:33:a1:01:f8:
ef:46:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:42 2025 by rpki-client