Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
File: _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json)
Hash identifier: RkOU6z8BrhG2rFcjwggpk/VXDAbN134R2EQJnCL1lls=
Subject key identifier: AE:DD:02:29:EA:C8:44:70:F6:AA:0F:6B:C5:53:E8:6B:A2:1A:39:4F
Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Certificate issuer: /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Certificate serial: 0196504817D0E5E9DC83206446D05F55A00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
Manifest number: 7A
Signing time: Sat 19 Apr 2025 23:00:24 +0000
Manifest this update: Sat 19 Apr 2025 23:00:24 +0000
Manifest next update: Sun 20 Apr 2025 23:00:24 +0000
Files and hashes: 1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: Yxe5TTwfCb0AwYrF3ZtX5+PIcY0LbjcUBdo6KUItCv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:17:d0:e5:e9:dc:83:20:64:46:d0:5f:55:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Validity
Not Before: Apr 19 23:00:24 2025 GMT
Not After : Apr 20 23:00:24 2025 GMT
Subject: CN=aedd0229eac84470f6aa0f6bc553e86ba21a394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:40:ab:28:93:f9:a9:e4:88:74:8d:0f:72:
77:43:63:23:3f:2e:04:84:4c:c4:3e:60:ee:e1:6c:
64:df:a6:25:ef:b1:1f:89:94:ff:fa:31:e4:d2:41:
4b:18:74:8a:1c:44:78:0b:de:bd:77:26:27:dd:8f:
54:3d:5d:52:77:b9:d8:8c:f2:8f:d2:58:55:09:db:
34:4b:02:4c:22:4b:af:a1:83:2e:45:5e:9c:85:ca:
dd:ee:03:da:8d:10:e9:57:c7:87:0e:c5:6f:2a:10:
1f:0d:80:b3:e1:26:50:17:d9:47:37:4e:a0:c8:91:
cc:ac:74:ba:de:ea:67:08:65:b1:da:06:86:b5:9c:
b0:02:50:0b:ae:03:7d:81:db:63:19:82:49:1c:29:
73:bf:51:5a:db:4c:85:c1:7e:8c:62:c2:47:29:4f:
32:6c:74:ae:ad:8a:f1:b0:e9:6c:f2:d3:ff:ba:7e:
72:5c:86:ce:ea:56:06:43:b0:40:65:09:2a:2c:75:
5c:6d:f0:57:07:88:16:fc:c0:3a:28:81:16:61:77:
63:c1:bc:e4:81:81:7e:f8:2f:5c:98:36:b2:bf:af:
de:af:b1:9a:5e:68:fa:8d:86:9f:78:8a:e5:76:15:
a2:d7:8a:35:f6:d0:ea:24:e0:76:33:7d:30:88:9f:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DD:02:29:EA:C8:44:70:F6:AA:0F:6B:C5:53:E8:6B:A2:1A:39:4F
X509v3 Authority Key Identifier:
keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b2:b4:28:43:19:80:24:ee:b9:1c:54:c7:d8:c3:cd:3b:ad:
80:ed:6d:ca:68:bb:7b:9f:bb:6f:59:3b:48:08:8c:a7:ef:dc:
c8:d3:2c:77:d2:41:32:1c:cb:1f:6f:96:06:b5:13:d0:d5:63:
8f:ff:6c:43:ae:ef:61:d9:49:5c:57:33:de:82:72:1c:cd:cc:
00:f2:67:1c:17:e3:ed:42:6b:0e:0e:b5:66:fb:a3:eb:2b:75:
8d:1f:59:ef:ba:da:b9:e6:43:2f:94:c2:eb:5a:06:05:ee:7b:
35:d3:53:c2:9f:89:77:8d:15:86:df:68:d5:1c:49:ff:e9:87:
ee:67:0b:48:57:ca:f8:03:0d:35:32:32:f2:70:f4:2a:84:de:
91:ea:91:f4:90:be:a9:a8:5f:be:19:bc:6d:53:6c:53:cb:cc:
69:a5:b4:64:99:b1:b3:59:d0:91:d4:bd:0a:13:b2:2f:5c:69:
53:17:a0:d6:79:ca:16:6d:2c:45:d2:7f:93:5f:11:3f:e1:28:
40:8d:6b:02:37:bb:80:01:3f:87:59:00:02:0d:29:48:3f:74:
c0:33:b3:19:d7:d4:d4:9b:ee:9e:2c:cc:4b:5d:13:63:03:51:
03:40:ba:80:d9:93:26:9e:ab:ae:97:d1:29:e4:e3:ca:88:26:
0c:b7:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:17 2025 by rpki-client