Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: nyiVU66uyXmaCKlDjGVpYl5MHw5/OiTAek67xTgIFIg=
Subject key identifier: 8F:37:25:25:9B:D9:23:5B:CA:70:65:E1:37:67:CF:83:FB:90:AA:74
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 0196507F79607649183A34E21BC7EA556D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 04BA
Signing time: Sun 20 Apr 2025 00:00:53 +0000
Manifest this update: Sun 20 Apr 2025 00:00:53 +0000
Manifest next update: Mon 21 Apr 2025 00:00:53 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: ggZxedub7oparNizCAVPWryGbRNzVLH83owTkyycs7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:79:60:76:49:18:3a:34:e2:1b:c7:ea:55:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Apr 20 00:00:53 2025 GMT
Not After : Apr 21 00:00:53 2025 GMT
Subject: CN=8f3725259bd9235bca7065e13767cf83fb90aa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:7e:6b:70:da:dc:48:8b:c1:9f:4f:25:64:
19:f8:6f:49:39:6a:bf:61:c0:1f:2d:ec:67:3a:80:
3b:ff:98:03:23:07:3a:f1:da:2e:ff:0b:97:ca:b1:
d0:9b:7f:b7:af:96:04:b5:a4:96:9a:8f:90:75:3c:
cd:fa:55:d6:ff:09:5f:88:d9:f7:9d:5f:d3:bd:13:
ce:66:bd:00:b5:39:ab:7c:8c:ae:4b:18:2a:fc:0e:
b6:4d:46:36:2b:95:be:f9:56:8c:bb:01:90:7e:1e:
f3:8f:1a:2b:65:e3:96:38:7a:0d:75:65:9a:78:1a:
7d:b3:20:17:d4:6d:13:6b:eb:39:34:0e:d2:57:7e:
c6:d2:75:ae:7a:10:cd:77:e6:8b:e2:d7:0f:b5:23:
ff:cc:a6:4c:a1:b3:f9:a0:fc:35:ff:89:b1:5a:fd:
2b:f8:b7:e2:54:42:dc:4f:f9:54:08:ed:b6:83:a0:
34:79:90:42:48:b5:42:d2:a7:83:f3:61:76:3e:69:
00:7d:ea:db:04:69:0d:14:30:00:5a:a2:38:69:d3:
2e:d6:cc:22:d0:4f:ff:2b:4b:63:3f:14:ec:1f:99:
03:99:1f:e4:67:03:86:ae:1a:6e:ca:e2:3e:13:e5:
b1:36:cf:b7:8d:2c:4e:71:f7:a9:e7:e4:31:47:0d:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:25:25:9B:D9:23:5B:CA:70:65:E1:37:67:CF:83:FB:90:AA:74
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fc:e9:55:88:09:3f:00:be:32:23:0f:c2:d4:60:59:81:d9:
36:ef:60:a6:75:7d:22:9a:cb:b3:f1:95:ec:d0:e7:34:62:46:
3e:88:58:49:4b:02:0e:19:c2:50:49:ac:77:79:2d:96:54:51:
69:28:db:d6:0a:13:23:26:cc:d3:cc:33:09:09:5b:64:5d:ff:
ab:47:af:62:4f:c4:3a:a8:aa:39:8c:03:6c:36:3e:b9:5f:0f:
6a:7e:53:3a:e2:86:ec:e2:b6:d0:7d:ed:56:ee:74:f8:a5:a1:
a1:e3:d8:e6:b4:b4:99:71:7f:cc:bb:05:99:fc:4c:6e:28:1b:
30:a9:1f:68:52:2b:63:00:88:29:8b:d4:ba:c3:c6:51:ac:51:
f1:9c:b8:3e:74:d3:d9:20:e4:f6:5d:82:d0:c2:0a:34:28:c6:
24:41:3a:0f:13:9e:cc:f7:85:64:cb:98:f9:21:18:62:7b:ff:
61:0d:74:43:84:9d:c0:b5:31:b0:8c:39:2d:b5:11:c5:f5:75:
ce:ed:35:63:bd:73:f5:07:0f:37:f2:31:f8:d4:a6:ac:5c:cc:
9f:c3:9f:20:ff:33:76:8c:16:fb:ea:93:a3:f4:b8:27:ef:b8:
03:c0:3e:4a:b7:b0:6c:14:34:bc:f6:60:6c:a6:aa:ee:83:f0:
6f:91:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:19 2025 by rpki-client