Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: EsLaUsY/XmwIsIYIfSGFHW/sthpVsNvrUgyzZZuTx0Q=
Subject key identifier: 7F:D7:6C:29:E4:A8:46:CB:45:01:87:AA:EE:33:D5:76:E6:87:D9:01
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 01965124366C83D5FAFDA0D1836BB52F9208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 014D
Signing time: Sun 20 Apr 2025 03:00:49 +0000
Manifest this update: Sun 20 Apr 2025 03:00:49 +0000
Manifest next update: Mon 21 Apr 2025 03:00:49 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: dn/XP1tktSF2c6zq08BwlsLzHeXF644v2i1s27DURJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:36:6c:83:d5:fa:fd:a0:d1:83:6b:b5:2f:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Apr 20 03:00:49 2025 GMT
Not After : Apr 21 03:00:49 2025 GMT
Subject: CN=7fd76c29e4a846cb450187aaee33d576e687d901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:05:be:3a:a1:72:a4:1b:d8:82:d0:b5:71:
a6:9a:7d:b8:ad:55:6f:86:f1:db:51:2f:11:84:06:
e9:77:c2:de:51:bb:40:a5:f0:1f:7c:f1:b4:96:90:
8a:22:79:d8:4c:19:b4:99:d9:67:cc:68:fe:44:6e:
c1:1c:70:46:ac:d7:a3:f5:5f:86:db:f8:be:90:4b:
cb:9c:a2:5c:a6:32:9e:fe:00:f2:8f:bc:18:84:58:
07:62:2f:d6:54:f8:e1:f8:7b:1d:3f:95:de:09:c6:
fd:ec:30:04:c1:8e:b9:a3:d1:b1:4c:0c:dc:b2:68:
4b:b6:13:41:32:f9:02:1f:3e:dd:2c:9b:46:7f:c5:
bc:72:b8:99:90:30:4c:9c:4c:0d:a4:77:2c:a3:ef:
eb:89:62:ab:97:c3:62:9f:9c:90:ee:a1:9e:0e:65:
68:4f:38:aa:fd:83:ca:6d:97:0a:93:0e:64:e1:5c:
b8:43:ec:4d:f8:71:5c:af:34:69:e0:a2:04:94:f6:
37:41:89:f5:d1:be:1c:1b:0a:c6:97:23:94:92:e6:
c8:c4:0f:f9:57:a0:3f:ba:11:2a:43:a8:be:db:4f:
22:21:92:6a:53:17:7f:ff:99:eb:41:86:81:e0:33:
31:d9:14:8f:f5:73:94:bd:5a:e6:31:83:e6:7a:03:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:6C:29:E4:A8:46:CB:45:01:87:AA:EE:33:D5:76:E6:87:D9:01
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d8:82:9f:e5:fe:c8:df:fb:2e:d8:9d:53:40:98:0c:95:9b:
a4:16:29:ae:48:02:70:5a:7e:a5:50:5c:38:7a:2a:02:a9:a8:
6b:0c:39:23:fd:67:d7:de:19:e5:a8:6b:39:56:2f:2e:cf:f3:
09:5f:06:b9:ee:6f:d0:dd:b3:05:0f:59:04:75:67:a5:0d:a6:
8d:53:32:73:dc:6a:8f:db:65:fd:7e:fe:0f:2f:c0:73:93:44:
0b:1f:d2:ea:10:af:d4:92:9e:05:60:c7:f6:28:8a:26:32:fc:
9b:d9:ce:ef:5d:f6:20:f3:44:2d:e1:19:a9:b1:5b:f1:60:1f:
4d:9f:c2:28:0c:59:7d:85:9f:e2:27:a6:0f:d4:e0:86:80:db:
6a:94:eb:ec:4b:8f:4c:e5:ca:d4:1c:7b:12:f5:40:62:95:51:
66:eb:c7:a2:3b:bb:14:cf:d1:dc:e5:d2:fc:d1:66:0c:66:3b:
27:5d:fe:91:4f:8b:29:64:72:26:a0:96:3d:2e:17:88:31:22:
9b:3f:fe:e8:d7:c7:5c:d3:78:8c:5a:f5:16:a1:69:a4:e5:bd:
cb:6c:93:e8:f9:1a:bf:94:1c:bb:af:dd:83:fd:33:70:ab:3b:
1d:fd:d9:e0:48:61:45:69:82:53:6f:c9:10:e5:c5:c7:0c:af:
81:82:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:34 2025 by rpki-client