Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File: rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier: ezcdA0ywASjZnouFsthkkjYJpYUbRR3eIPBvUi+f7Ws=
Subject key identifier: 39:58:29:72:61:B3:1B:4A:CB:0F:11:F9:81:45:21:4F:D6:AC:B3:96
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer: /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial: 019643D695DF390F137D00F51AE2E0B6B06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number: 11A6
Signing time: Thu 17 Apr 2025 13:00:58 +0000
Manifest this update: Thu 17 Apr 2025 13:00:58 +0000
Manifest next update: Fri 18 Apr 2025 13:00:58 +0000
Files and hashes: 1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: UyoVDHazeXOXQrTK5u7RWfiwSIF+X22hbktx/dU+dB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:95:df:39:0f:13:7d:00:f5:1a:e2:e0:b6:b0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Validity
Not Before: Apr 17 13:00:58 2025 GMT
Not After : Apr 18 13:00:58 2025 GMT
Subject: CN=3958297261b31b4acb0f11f98145214fd6acb396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:47:81:fe:bf:af:8e:69:fb:6f:14:93:7c:
63:05:bd:3e:85:65:64:c7:7c:05:bd:70:32:19:4f:
0e:0a:2e:81:10:42:6f:2a:57:75:87:e2:43:71:ee:
f6:30:42:36:38:0d:12:62:fb:d8:19:5e:bd:80:42:
49:ed:23:35:64:bf:a3:6d:60:38:52:a8:bb:eb:6c:
39:97:0b:ae:8f:fc:3c:c9:4c:32:4a:d4:4c:78:6c:
18:1f:9e:6f:65:f0:d3:91:7f:9b:7f:23:08:2b:77:
fd:c8:28:5a:ad:32:8b:4d:3c:60:a0:31:47:49:59:
7f:ef:20:a6:8e:d0:fe:d6:be:92:27:a3:b6:be:d2:
e6:5c:e8:6c:a9:96:0f:0d:d5:e0:64:a8:ff:f9:b7:
23:7a:21:5f:a1:03:3c:ba:94:1e:ed:dd:22:84:8d:
bb:1d:e0:33:0c:36:1a:d3:9c:b6:2b:4d:f4:49:18:
2f:55:c3:e1:a3:27:4c:b7:9a:f1:bc:94:a4:8e:c0:
dc:7e:c9:2f:ed:2e:59:1b:8b:61:2e:14:5f:3d:88:
e9:93:55:d5:d0:d6:d4:f4:3e:49:39:1d:04:cd:cd:
ef:f1:88:7c:8c:d2:03:38:23:e7:45:67:e9:f2:88:
f6:fb:80:64:39:90:6e:f6:d8:fe:45:f2:5f:1b:cf:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:58:29:72:61:B3:1B:4A:CB:0F:11:F9:81:45:21:4F:D6:AC:B3:96
X509v3 Authority Key Identifier:
keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2d:89:9a:87:a5:db:cc:06:99:40:34:7f:e6:19:ab:53:23:
a0:6f:ad:8d:5b:6c:75:96:4a:9f:18:01:27:e5:1a:8b:87:09:
e3:30:c2:45:f5:49:b6:a9:1e:00:44:fc:70:d3:b9:c9:4a:d9:
a4:15:86:94:35:a8:35:51:96:be:3b:a4:bf:d9:d1:06:ee:92:
26:55:1f:0e:04:67:b8:c7:c4:82:0a:b7:4f:ef:f0:01:d9:52:
94:ec:93:e9:ea:0d:56:b9:54:02:bb:38:ff:f7:c0:2f:7c:e5:
c4:44:79:d3:6e:b2:dd:9e:c4:87:0f:40:7d:d5:98:ca:ac:14:
f5:36:aa:54:87:05:93:81:4d:fd:c8:67:f3:53:10:a9:91:b1:
72:1d:85:59:0c:72:b9:82:99:2f:9d:62:e3:7a:d5:c8:aa:08:
d3:92:0f:16:65:04:15:02:41:c1:13:5f:22:4b:41:1a:6f:4d:
82:86:a5:59:3e:f6:d0:1d:ec:fc:7b:3e:f0:2c:95:b2:2b:0e:
d1:07:6c:bd:bf:ef:d4:db:f7:ff:49:af:a4:46:6b:55:78:6a:
e1:d4:23:51:11:00:5e:dd:1e:20:bd:64:4a:d8:57:7e:55:04:
e0:a4:6e:38:f7:35:40:da:2f:91:97:3e:d2:c8:ea:b5:97:57:
e6:39:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:49:26 2025 by rpki-client