Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: 4P3U3A3ctSy1TT1oJBHpr9YvGikoLE92ff5zDUVDEGg=
Subject key identifier: 47:E7:0C:DB:8C:B1:17:A5:60:C9:64:57:67:E6:6D:54:E5:8F:05:22
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 01960FB29D1893BD5AA2815AEB0B0673AF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 05D2
Signing time: Mon 07 Apr 2025 10:01:25 +0000
Manifest this update: Mon 07 Apr 2025 10:01:25 +0000
Manifest next update: Tue 08 Apr 2025 10:01:25 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: 8evC7IsZr4jN8zVwij+ekiDaqBFdxLXpJtefZXogMPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:9d:18:93:bd:5a:a2:81:5a:eb:0b:06:73:af:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Apr 7 10:01:25 2025 GMT
Not After : Apr 8 10:01:25 2025 GMT
Subject: CN=47e70cdb8cb117a560c9645767e66d54e58f0522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:41:fd:6c:1a:79:6b:14:dd:0c:0c:3a:f7:
e0:d1:3b:44:49:3f:00:38:4c:df:3b:8a:c7:36:06:
d8:ec:c1:33:13:03:a0:bd:4c:d7:e6:34:a6:a7:54:
bf:3e:45:a6:72:e4:7f:cb:b6:b1:7d:4b:48:c8:f1:
72:d9:29:32:8b:31:f9:94:a0:4c:4f:93:ae:60:08:
d7:60:1a:95:c5:8a:26:1a:0e:c7:29:b6:fe:14:51:
8c:3c:1b:3f:b2:e7:c9:35:81:60:22:29:ff:e7:73:
0a:0d:76:54:11:a3:fe:0a:d9:e6:f9:34:9e:32:61:
44:dd:01:73:27:7c:94:43:37:44:d9:92:32:e0:9e:
75:d9:84:a1:3c:af:22:b6:9c:7c:13:d5:11:7e:2a:
a1:65:88:1a:cb:af:ae:8d:a8:06:83:67:ea:db:b7:
7e:10:2f:3e:b8:a8:91:d2:56:73:0f:bc:c1:9a:fc:
13:8d:d3:25:ea:2b:16:ac:41:79:42:60:55:a7:b4:
b7:48:31:68:b7:59:6f:94:f9:0a:8d:1d:d4:1b:b0:
4d:d4:f7:82:55:13:e1:a4:13:86:22:51:3f:fd:ab:
9e:c3:3e:0d:01:f9:9f:fc:ce:2d:fd:0d:49:d0:3d:
69:c2:bb:da:fc:c1:7d:c8:30:f1:5a:6b:5f:6d:91:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:0C:DB:8C:B1:17:A5:60:C9:64:57:67:E6:6D:54:E5:8F:05:22
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:35:f1:6b:99:2e:2c:7b:f8:e9:81:50:ef:b6:2a:3d:38:8c:
4d:ab:97:07:4b:d4:9f:08:fb:1d:72:95:e4:4a:16:99:98:84:
74:50:6c:c6:dd:c5:a1:fd:bc:5e:83:40:e4:0e:90:54:21:a4:
b9:e4:58:54:de:e1:d6:63:93:16:ac:a6:45:4d:e0:24:0c:40:
cd:0c:64:32:cd:7d:d1:e4:54:94:9f:44:56:f2:43:5f:3f:d9:
25:4c:03:49:79:25:97:a2:5b:87:2a:aa:64:7e:70:64:b1:c4:
e4:9f:0d:97:54:ff:6a:85:7b:bd:fb:4d:75:e8:f6:ca:ca:15:
6e:a2:9e:e3:dc:13:fb:45:26:d6:f0:57:b1:55:cb:de:3f:8b:
b4:88:e4:d2:c0:f3:60:36:fe:15:af:53:fc:5a:50:18:7b:fd:
aa:20:84:87:f7:40:e8:b5:48:d0:96:74:af:31:7d:20:ed:7b:
36:4d:b0:48:b0:e4:7a:d0:35:cd:01:66:9e:5b:ce:29:d5:0a:
aa:92:5e:5f:71:cd:02:bb:0f:20:11:ee:0c:99:ce:db:b4:5b:
81:50:62:bb:5c:de:a9:fc:35:25:55:35:3b:f0:d3:66:8a:43:
9e:17:d9:d5:58:10:11:6b:a5:29:41:7f:16:22:9e:6e:ce:cd:
5d:1c:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:43:57 2025 by rpki-client