Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: 7LS3vtPHMOgspIOkSPtvtQb+LSHDJ/UFB3shWxyhcNI=
Subject key identifier: 40:B7:11:E6:55:B8:39:D3:C2:DF:72:59:27:61:20:03:8E:02:E1:47
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019611A135A26EFA436CF2D1DABD07EC1B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0951
Signing time: Mon 07 Apr 2025 19:01:39 +0000
Manifest this update: Mon 07 Apr 2025 19:01:39 +0000
Manifest next update: Tue 08 Apr 2025 19:01:39 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: o1vYZnXgWVJhlpjwN2lTM5o+LsKoW6Q6/btTASo7lQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:35:a2:6e:fa:43:6c:f2:d1:da:bd:07:ec:1b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Apr 7 19:01:39 2025 GMT
Not After : Apr 8 19:01:39 2025 GMT
Subject: CN=40b711e655b839d3c2df7259276120038e02e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:58:61:34:06:11:01:a9:36:c0:d9:71:50:
e0:d7:52:c6:45:b4:62:e4:33:a3:45:e6:08:d2:d4:
1b:3c:ee:49:9c:e5:55:d5:86:dc:13:51:3d:b1:66:
38:d3:fb:8b:a2:bf:be:23:68:2c:b4:80:46:c7:d9:
5f:2f:31:fd:78:2f:e7:f3:57:e5:12:55:9c:6b:d3:
b0:b5:9a:fb:a8:f6:20:8d:9e:7b:2e:39:1c:96:cc:
23:1a:ad:41:bf:6b:5b:a0:48:90:e5:94:a1:ad:7f:
17:69:07:f8:36:34:6c:d8:11:11:b8:9d:2f:dd:79:
8c:5e:b1:5d:56:17:7b:d1:b0:ed:b4:35:36:26:92:
f2:7a:14:f7:3d:e5:ae:3e:4e:f1:da:84:00:4d:08:
db:be:d3:1e:d3:17:85:63:6b:7f:3b:ad:80:3c:84:
7d:50:8a:9a:bd:45:30:cf:8d:f0:a7:56:7f:97:60:
0d:68:a3:77:cb:88:da:38:a1:f8:b5:b3:fa:de:30:
09:3b:3a:41:a1:19:d4:fc:59:ff:c5:f3:ff:40:41:
29:40:cd:a0:e0:dd:0f:8c:e8:bc:78:0b:10:b2:ee:
67:ed:7b:61:27:05:5a:75:7e:89:e1:ba:5f:fc:92:
d7:1b:e5:62:3e:45:ac:48:42:40:c9:d4:35:5b:71:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:11:E6:55:B8:39:D3:C2:DF:72:59:27:61:20:03:8E:02:E1:47
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a6:0a:e6:86:94:25:b8:d9:a2:bc:c7:d1:c1:3b:bb:67:48:
ff:91:b7:34:d9:6a:73:3f:59:d2:47:09:e5:54:f7:45:e9:15:
25:df:d8:83:35:1b:a3:fd:9e:c2:c7:34:62:76:2f:de:6b:96:
13:9d:76:2b:82:e4:ef:f0:e2:a0:bc:84:15:0d:55:95:0b:24:
d6:0a:ca:81:4a:19:72:dc:34:13:76:db:12:1c:09:36:f9:85:
75:93:6e:6f:10:46:93:ec:02:fa:11:6b:3e:18:09:81:a9:3c:
1a:b3:f6:6f:70:a7:a6:ed:ba:1a:f8:30:e9:77:eb:56:46:b2:
dd:14:4c:ca:11:c3:ad:93:01:5e:c3:92:54:ca:63:0e:11:f1:
06:d2:54:4b:c2:90:eb:ad:ca:63:3e:4c:77:85:10:e7:b1:ad:
34:8c:56:b9:91:d1:5b:1a:77:62:5a:f4:dd:3c:dd:cd:2a:38:
b2:25:b5:dc:10:85:44:49:aa:db:61:1b:2a:e8:0d:30:f0:db:
1f:52:1c:f7:66:3c:74:0a:fb:15:1b:d4:79:87:ec:59:60:00:
7a:67:d6:6f:0a:d6:14:89:63:67:1d:c7:1e:8e:b8:89:4e:66:
3f:a2:1a:5b:c8:82:4b:f0:ed:9b:fc:db:b3:20:8d:50:54:59:
8e:dd:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:11 2025 by rpki-client