Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File: wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier: /uefhFqTCpdQ5ZjZatkNP394l+1KrdiBorm+BhW7pZo=
Subject key identifier: 6B:81:C4:38:71:02:01:95:3D:AC:88:A3:E0:25:BB:5E:B0:C9:B0:9A
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer: /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial: 01965492C39719B71DEA9A28A191E66D0CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number: 0256
Signing time: Sun 20 Apr 2025 19:00:26 +0000
Manifest this update: Sun 20 Apr 2025 19:00:26 +0000
Manifest next update: Mon 21 Apr 2025 19:00:26 +0000
Files and hashes: 1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: aCJFgIi41h5AhxfuR4bgaKoXGNI3JPMxX/j732/fs4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:c3:97:19:b7:1d:ea:9a:28:a1:91:e6:6d:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Validity
Not Before: Apr 20 19:00:26 2025 GMT
Not After : Apr 21 19:00:26 2025 GMT
Subject: CN=6b81c438710201953dac88a3e025bb5eb0c9b09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:95:34:6e:ed:45:f5:1e:01:3d:ec:71:7e:
41:97:30:c6:fb:ae:10:b9:29:eb:b6:d4:cc:6f:9a:
3e:df:c7:7e:d4:b8:3c:de:c3:60:38:44:0a:23:34:
ad:d6:4a:6c:88:bb:78:75:25:77:e6:13:ec:ab:14:
16:79:61:df:e0:2a:1c:33:df:c6:9b:10:1f:c0:98:
e4:f2:df:0a:a3:03:c8:c7:f2:f7:f2:c5:6c:f8:6c:
55:56:89:28:30:3b:9d:2c:b2:d8:01:ac:33:25:7c:
c5:e3:3f:72:e7:1e:b9:05:fa:1b:8a:02:2f:fd:84:
3d:66:31:49:87:4e:da:bf:b7:1e:79:24:8d:2b:a4:
65:3d:ca:66:9d:dc:17:5a:e9:9b:4d:8d:cb:5a:35:
c1:e3:38:62:01:70:ff:fb:06:43:a4:df:ef:db:cb:
9b:e3:03:7a:eb:9e:f6:f2:e8:49:c0:a3:f3:e1:23:
51:dc:e7:a8:b4:c4:5a:2e:2b:4b:54:43:8b:67:32:
a5:7c:52:5d:6e:dd:79:d6:2f:8c:f6:8b:e5:5a:b7:
0a:e1:34:08:0d:85:55:d9:95:57:e0:32:9b:9a:5f:
e1:86:e8:ad:20:2a:ca:46:60:9b:94:78:d1:ae:d8:
0c:ab:d8:53:e4:15:95:c1:09:25:fd:0c:50:31:ce:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:81:C4:38:71:02:01:95:3D:AC:88:A3:E0:25:BB:5E:B0:C9:B0:9A
X509v3 Authority Key Identifier:
keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:64:01:0d:8e:d4:3a:d2:55:c6:7f:5b:c0:68:86:29:92:0e:
4d:ef:f1:bf:31:01:d0:2b:53:b9:35:77:e7:c7:ea:2d:7c:76:
99:30:a3:b3:83:3e:f3:f0:92:3a:a0:f3:d7:81:71:d8:0e:ac:
8b:13:07:a4:f9:65:6c:a9:8d:f5:99:1e:45:a3:7f:d5:8f:cc:
85:ca:f1:19:d9:10:02:29:34:5e:33:e0:5f:bd:67:73:a6:fa:
ea:ba:d5:fc:69:05:89:99:83:ef:76:6e:18:39:f3:79:12:c2:
4d:49:3d:f4:73:5c:66:74:67:30:13:de:c9:cd:8f:31:56:d7:
7b:dd:b8:cc:c7:b2:a2:69:3a:44:80:80:07:08:c4:86:8e:9e:
f5:2e:bd:47:09:06:a7:fd:3d:91:6c:ae:54:f3:6e:09:59:9a:
33:cf:2a:65:f7:6c:e9:58:7a:af:07:15:09:0d:c6:2b:5e:e7:
b1:2a:35:3e:f2:2d:52:d2:7e:fe:e9:06:b5:dc:b9:e8:38:37:
63:c9:bc:df:57:20:bb:f1:29:ec:df:75:27:86:ec:b1:2a:cd:
75:8c:bf:aa:47:71:4c:d6:50:33:02:7e:45:f3:56:1e:ce:cc:
42:27:2c:6d:a8:ca:19:fe:7d:b9:36:07:64:c9:67:c3:f5:68:
d8:d3:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:51:31 2025 by rpki-client