Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File: WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier: z22ke5z2D7Jal0B3wbq/B04NQucCEAjPNXJZdw5PEOg=
Subject key identifier: DD:26:D7:C8:35:B8:14:45:24:56:03:29:B5:44:2E:30:2E:3D:55:36
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer: /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial: 01963CC1A1798763E7022F6AE8C8ADCBDC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number: 04AB
Signing time: Wed 16 Apr 2025 04:00:44 +0000
Manifest this update: Wed 16 Apr 2025 04:00:44 +0000
Manifest next update: Thu 17 Apr 2025 04:00:44 +0000
Files and hashes: 1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: lMKChY5jsdz6f2mDLwz69C1VgHAATJD3Eem+1KSmey4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:a1:79:87:63:e7:02:2f:6a:e8:c8:ad:cb:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Validity
Not Before: Apr 16 04:00:44 2025 GMT
Not After : Apr 17 04:00:44 2025 GMT
Subject: CN=dd26d7c835b8144524560329b5442e302e3d5536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:6e:29:66:83:e6:58:7d:97:b0:e1:75:d8:
b9:62:aa:4e:6b:fd:96:63:00:70:d2:40:dc:0e:6b:
f7:63:de:13:b2:71:aa:9d:09:42:eb:e1:a8:ef:87:
9a:87:57:88:98:85:ec:a6:17:16:03:72:4b:c9:2a:
f3:22:44:8f:69:30:d4:7b:c1:89:35:89:a3:bc:d0:
27:bb:75:9d:ff:3b:95:ff:59:24:5e:d9:61:cb:d7:
42:36:74:ec:58:a8:81:34:d4:95:26:3c:4d:b5:86:
f0:13:be:e1:68:ee:ad:3d:d2:59:16:8e:79:83:27:
64:f0:99:d6:a8:c6:55:9a:17:9b:4a:46:82:38:a7:
27:77:c6:2b:f7:46:18:ad:d3:23:79:73:67:53:05:
82:45:09:d0:e9:45:03:39:26:c7:a7:49:c2:88:ba:
ac:3e:9c:f0:b5:f5:ac:6d:fc:06:0e:4b:4b:c2:2d:
8c:ab:fd:26:a3:ac:62:6c:0d:e3:c1:9b:43:89:ec:
9c:a6:a8:be:47:3b:da:a0:5a:f4:70:76:99:ca:77:
13:20:0b:c8:de:04:90:ce:d2:f5:66:12:13:ef:20:
e1:f9:37:e8:c1:1b:68:b4:80:ab:51:3e:3c:5e:2b:
fe:f5:76:aa:fa:0c:16:f2:df:5f:0f:f9:b3:80:79:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:D7:C8:35:B8:14:45:24:56:03:29:B5:44:2E:30:2E:3D:55:36
X509v3 Authority Key Identifier:
keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:92:d0:e5:d4:2f:e2:98:e9:01:bb:4b:b5:e6:a2:cf:47:cb:
be:53:74:b4:92:7f:3c:0d:3d:ce:1c:a2:0e:87:eb:58:de:8a:
ec:41:c9:19:43:53:f0:d3:4a:e3:0c:06:ba:61:ff:c7:9e:68:
14:8a:a2:ab:4f:01:b8:65:75:33:e0:ba:8f:fe:b3:53:e4:f7:
9a:74:35:de:0d:1b:59:71:e1:0c:4d:30:10:22:99:25:31:03:
d1:7e:7b:b7:63:7b:7b:6f:de:fa:86:58:b4:87:95:df:2c:52:
da:d9:98:88:f9:61:33:8f:db:67:c0:7c:9e:6c:03:7c:39:49:
52:ae:a4:7b:b8:13:aa:c8:89:75:4e:04:a7:ae:da:c3:b0:63:
0c:19:71:d8:fd:ae:c5:49:a8:8e:d5:e6:97:7b:6f:a9:51:94:
ef:19:b2:81:f4:49:9b:52:cb:ae:80:51:da:ff:f6:a1:5d:9d:
89:81:96:80:c5:1e:ce:a7:ee:c8:79:d0:e5:36:eb:31:d1:a5:
31:30:1d:ff:ce:91:b1:01:c1:b2:15:e2:aa:36:64:c5:70:09:
3b:43:80:81:c4:53:6d:de:5d:74:12:e1:a0:22:87:90:1a:d0:
88:07:5b:91:9f:90:cc:88:4c:f3:3c:cf:3b:b3:3e:3d:9d:96:
1a:5c:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:22:34 2025 by rpki-client