Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File: w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier: x5ijNYFZCw28tnunSOlHMcOPldvQmKikrYazFo1Q46E=
Subject key identifier: 1F:21:19:E6:28:86:5A:73:14:2E:57:D0:D2:11:D7:1A:5B:CE:AB:8A
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer: /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial: 01958CCEB8DAB8C5AFD6D0A4B463DCA00BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number: 0B01
Signing time: Thu 13 Mar 2025 00:01:52 +0000
Manifest this update: Thu 13 Mar 2025 00:01:52 +0000
Manifest next update: Fri 14 Mar 2025 00:01:52 +0000
Files and hashes: 1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: lMZYU7RgXeSK38oUs2dswkLeMsNz/lVmBfeI2p8iWTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:b8:da:b8:c5:af:d6:d0:a4:b4:63:dc:a0:0b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Validity
Not Before: Mar 13 00:01:52 2025 GMT
Not After : Mar 14 00:01:52 2025 GMT
Subject: CN=1f2119e628865a73142e57d0d211d71a5bceab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:fa:92:fe:ca:8c:37:16:cf:cb:8f:33:be:
6f:f6:3c:bc:bb:12:7d:0c:d2:1f:ed:dc:3e:50:4e:
4f:73:ad:db:8c:5b:18:6b:f6:22:f0:4f:e1:26:96:
58:a2:07:29:37:cb:8f:21:b1:2e:39:ab:24:72:be:
c0:b2:05:94:40:0c:2b:34:4a:4b:1b:13:ae:78:ba:
e0:10:21:45:20:fb:50:1c:72:c1:38:9a:37:61:54:
8c:ae:db:90:d7:7a:45:4f:f6:0f:93:f0:f4:7d:7f:
07:88:65:d1:41:92:26:ad:07:f7:22:3a:48:9a:b6:
30:1f:14:83:4a:b0:f3:2c:8d:f0:c6:d6:d1:55:77:
3d:4f:e5:75:42:21:9a:a7:7a:23:26:7b:10:25:6a:
0f:c0:9f:6d:2d:8e:f0:31:59:fa:61:9f:f8:91:73:
9f:47:56:e0:8f:d3:b1:21:bb:62:de:4e:fb:4e:a2:
bc:a4:ab:4c:42:11:36:4a:91:db:04:ed:05:9b:91:
87:5a:95:2f:6f:24:be:d4:54:25:71:3a:9d:ea:de:
ab:e4:07:f0:d8:8d:08:4f:6d:d0:9a:15:05:70:ab:
a9:7c:8e:9a:48:c6:f7:45:dc:73:86:f7:f2:64:88:
d8:fe:c3:9d:68:82:4a:c8:50:fd:54:9b:cf:83:2d:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:21:19:E6:28:86:5A:73:14:2E:57:D0:D2:11:D7:1A:5B:CE:AB:8A
X509v3 Authority Key Identifier:
keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fc:62:77:88:da:0b:92:05:29:bc:a8:a7:18:47:b4:64:f3:
6e:29:88:bc:13:ee:1a:e8:df:a6:3d:70:5c:ce:73:4e:f6:3a:
24:b8:23:dc:2c:83:45:1e:5b:45:4f:c0:e8:02:0a:0a:7f:0a:
a4:c5:8d:19:75:a3:27:4f:51:5d:a9:ff:25:de:62:1b:d6:69:
41:a8:5b:f2:46:ec:27:7f:15:66:a5:93:3c:e0:2a:87:f7:30:
21:df:6a:02:33:72:6a:45:fe:45:61:36:99:fa:f5:54:8f:b2:
c1:77:c7:a2:38:20:f4:65:b5:90:32:65:6c:b9:4c:80:ea:18:
fb:e4:29:22:6e:b7:44:bc:e6:35:bb:39:80:b1:80:3a:06:83:
49:2b:a7:48:cb:7e:2b:fd:83:e7:4f:b1:81:2b:2a:09:3c:00:
17:9e:5b:33:a8:e8:4f:e4:64:77:12:7f:49:a2:3e:a0:ac:2d:
d3:e3:07:c8:3f:20:3d:40:8f:00:d4:16:ae:4a:65:c3:38:ed:
ed:08:dc:1c:cf:05:cb:39:33:a6:df:53:00:27:4d:b3:83:1e:
79:3b:0d:2c:79:bd:7f:e5:61:7e:e0:6f:e0:d7:16:f1:b1:e9:
d8:74:5b:47:14:aa:71:90:d4:d1:55:52:2f:0e:db:5e:62:47:
c0:a1:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:28 2025 by rpki-client