Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: c6Aq4dDJJFGRY6/djNIw6VuIBcZmKef7Fxit50oV5dI=
Subject key identifier: 7F:68:4F:2A:AB:22:24:18:0B:B8:DE:17:9C:7C:6D:E3:E8:33:80:50
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 01964F6C9804ACA1F7691D02A2186CAED3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0774
Signing time: Sat 19 Apr 2025 19:00:38 +0000
Manifest this update: Sat 19 Apr 2025 19:00:38 +0000
Manifest next update: Sun 20 Apr 2025 19:00:38 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: vUuQ9qWQQHkWwXk/sbNUtTlFN0AHJS8hEKqrPOYYpOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:98:04:ac:a1:f7:69:1d:02:a2:18:6c:ae:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Apr 19 19:00:38 2025 GMT
Not After : Apr 20 19:00:38 2025 GMT
Subject: CN=7f684f2aab2224180bb8de179c7c6de3e8338050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:2b:ff:ef:cf:bd:73:1e:4a:4d:0f:6d:e4:
9f:62:17:70:17:7a:ec:25:a1:9f:db:98:57:18:a3:
72:c3:48:28:92:d0:fd:3e:e0:19:6d:b5:db:15:44:
d3:cf:cc:81:c3:7a:03:34:11:5f:6a:13:ee:80:b2:
1a:ee:3f:7e:d5:54:1a:6a:6c:94:35:88:b1:d1:74:
1c:e9:cb:2e:1a:bd:c1:b2:f2:f3:24:8d:36:d5:83:
8a:00:70:e2:17:09:52:7f:bb:0d:29:49:20:56:e2:
ef:e3:80:10:ab:cc:35:32:29:72:87:5b:6b:65:85:
3a:6a:19:95:58:13:58:64:45:e1:e7:fa:dc:65:da:
e2:72:82:72:82:c6:ab:aa:3b:a1:df:1b:f4:69:7b:
58:9a:8d:bf:92:d7:ba:1c:7b:64:5f:94:0d:b8:b4:
3a:b4:5b:8c:b5:1c:9d:86:3a:bb:20:07:5e:6e:1d:
c2:02:a5:f1:27:64:1a:be:ef:19:54:f2:09:0a:9f:
1c:04:6b:fc:e9:ea:a3:4a:6d:66:62:1b:68:77:61:
5b:d9:21:4b:ed:b0:70:e0:65:25:1f:00:8c:ef:5d:
92:b3:05:f8:e9:df:e5:a4:eb:bd:b7:56:d9:72:f2:
89:fd:88:12:75:5c:ad:d8:92:9f:31:91:1b:87:db:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:4F:2A:AB:22:24:18:0B:B8:DE:17:9C:7C:6D:E3:E8:33:80:50
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5d:c3:58:6e:23:c9:c2:fd:d9:16:9e:2d:57:3c:2a:0d:d6:
d9:dc:8e:98:3b:e4:5a:10:af:e7:60:04:a2:ee:0b:76:a2:f7:
93:57:a9:4f:3b:36:83:52:9c:4f:00:68:61:52:85:93:8a:82:
87:a4:56:89:aa:5c:a7:bb:29:0e:ea:e1:94:59:6e:5a:70:ab:
58:a8:b7:65:04:9f:9e:18:f2:f1:d1:42:63:3e:97:97:85:41:
99:a1:ec:85:27:db:ec:1b:d7:c4:4a:b6:3e:a0:f5:b1:69:a0:
9d:01:e8:85:86:f0:91:91:57:ff:44:1b:b4:c1:71:29:39:03:
74:21:ee:f4:d7:94:82:d8:87:c5:e8:a4:79:1e:81:29:31:7e:
ee:76:82:dc:31:fd:08:7c:8e:26:7b:4b:61:99:4b:17:78:b6:
28:e8:2f:50:30:4c:af:db:c0:af:fc:0e:71:06:a4:ce:8b:65:
3e:b6:be:c6:3f:78:66:48:ca:cb:19:22:19:2e:1c:4d:fd:4f:
f9:76:1e:98:31:58:14:8d:65:2e:61:03:d7:a0:21:1d:e6:af:
43:23:a0:9a:57:88:d1:2c:47:2c:a7:45:18:67:5c:e5:d7:3a:
4a:57:ea:16:b5:d0:e2:f3:81:62:cc:ee:bb:fb:5c:ad:bc:79:
55:2a:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:14 2025 by rpki-client