Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File: w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier: BhfSKchTNn72itpowKl9SCxqOFeeLQWyfbuOrApiNQU=
Subject key identifier: D4:E1:D0:E9:EF:32:92:76:C1:CC:9D:23:25:E3:E0:54:AD:8E:CB:15
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer: /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial: 01965E3B121C916A8FD71A5A2A688598777D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number: 1384
Signing time: Tue 22 Apr 2025 16:00:51 +0000
Manifest this update: Tue 22 Apr 2025 16:00:51 +0000
Manifest next update: Wed 23 Apr 2025 16:00:51 +0000
Files and hashes: 1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: L6PqL7+wwUS70SK8tRZfsmRAFpa+FueGiZPHg9BdkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3b:12:1c:91:6a:8f:d7:1a:5a:2a:68:85:98:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Validity
Not Before: Apr 22 16:00:51 2025 GMT
Not After : Apr 23 16:00:51 2025 GMT
Subject: CN=d4e1d0e9ef329276c1cc9d2325e3e054ad8ecb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:ac:79:00:42:75:cf:62:35:70:fd:26:f6:
5d:20:30:ae:a1:97:8a:62:39:09:38:81:54:eb:ae:
79:79:44:90:1b:2f:d7:aa:3b:a8:41:32:87:c6:44:
a2:3a:70:36:fe:84:f3:33:31:5e:6c:ba:29:78:0b:
11:b6:76:ec:39:c9:a2:91:af:19:bd:54:b3:99:e3:
6e:f4:f9:8e:d9:54:53:a8:c7:f2:b9:93:6c:0d:dd:
ed:0a:07:c7:02:23:4f:43:b9:1d:1d:8a:e6:8f:5d:
09:23:91:22:e9:e0:2c:ac:60:3c:42:23:d0:4f:24:
2e:22:b9:3c:d9:70:17:92:71:54:99:84:81:3c:87:
28:d9:2f:e1:8e:9f:69:f9:04:48:41:a0:f8:15:12:
dd:99:08:9e:f3:b4:52:6f:f8:3a:1a:dd:19:86:51:
2d:82:d4:bb:7e:cd:2a:78:26:e4:9c:74:bb:3e:1d:
c5:d9:d7:17:3b:a2:74:1e:93:24:88:f8:d6:10:92:
f2:1c:d7:4d:94:ac:f7:ad:bd:03:21:56:f6:0f:bb:
fc:17:8f:ee:88:6a:7a:c4:14:4e:cb:c9:7c:b4:16:
22:63:4a:2e:c7:37:6b:42:4b:ee:8a:b1:83:5f:e6:
93:16:da:93:2a:39:ad:9d:e1:da:82:00:52:8a:1a:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E1:D0:E9:EF:32:92:76:C1:CC:9D:23:25:E3:E0:54:AD:8E:CB:15
X509v3 Authority Key Identifier:
keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:c5:50:81:d6:43:f8:52:b8:9a:9f:72:80:09:74:95:14:
5f:d0:4e:1b:c3:da:10:fb:44:e4:eb:f2:d8:db:23:0a:11:65:
17:82:44:ec:02:f8:ba:5b:f4:4b:b4:6f:c7:7b:44:dd:88:01:
d7:7c:6d:8d:fa:9c:0b:89:27:b6:f6:c0:44:aa:94:bc:25:ea:
63:8d:74:8f:82:c1:a7:c9:6d:58:2f:d1:c0:c2:98:a8:a0:ea:
90:6a:64:65:5e:dc:6b:0a:6f:d1:2b:21:c3:43:95:50:27:b2:
1d:92:ee:9c:f7:ee:14:a5:38:85:d2:76:b3:78:28:53:8d:3a:
9f:c8:10:db:3b:0d:9e:ea:46:26:b2:0a:9c:6a:71:0a:b3:c8:
43:42:2e:55:35:8f:0d:a0:27:4d:68:23:64:9f:b9:76:65:6b:
c1:57:24:b0:83:5e:1e:9d:06:30:d8:47:51:a7:eb:8f:7f:bc:
8d:de:c6:6e:1f:f3:af:67:53:16:34:ab:55:80:2a:59:8b:5d:
5e:9e:3e:f3:55:a4:30:6b:85:2b:e3:84:10:65:6c:e7:05:9e:
94:6e:05:d1:e7:0b:0b:d1:20:8c:db:cf:fc:30:f2:fa:d1:77:
c1:e6:c0:20:42:62:db:2f:c9:82:01:e4:19:e7:f1:31:bd:5d:
2c:e8:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:59:31 2025 by rpki-client