Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File: wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier: eaB7ivoTQ6qeg1WvdnSgQAtvVmbIU/afebVg/b8tTA4=
Subject key identifier: 7B:48:E9:29:78:AB:ED:D6:83:B4:D4:48:32:F5:BE:39:9C:36:26:7E
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer: /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial: 019652DBA5F50F5C331271AFB535E3F6272A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number: 8F
Signing time: Sun 20 Apr 2025 11:00:48 +0000
Manifest this update: Sun 20 Apr 2025 11:00:48 +0000
Manifest next update: Mon 21 Apr 2025 11:00:48 +0000
Files and hashes: 1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: kwMREdpksVzIeesQR/vF+JuIpo1odlbwl3XlD4lOTMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:a5:f5:0f:5c:33:12:71:af:b5:35:e3:f6:27:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Validity
Not Before: Apr 20 11:00:48 2025 GMT
Not After : Apr 21 11:00:48 2025 GMT
Subject: CN=7b48e92978abedd683b4d44832f5be399c36267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:4e:02:b5:7d:8e:33:c9:77:5e:8a:c2:25:
81:94:34:f0:7a:f1:89:e9:97:19:0d:22:ac:f7:e3:
4a:4a:34:23:ae:63:cb:7d:61:c3:e6:14:a8:7d:8a:
49:e3:ad:63:d4:1c:26:bf:84:a3:0c:43:bd:c9:e7:
cc:73:ba:47:db:86:36:15:29:c6:7f:44:3b:a6:1c:
ba:ea:24:a7:b8:ec:09:c1:88:0e:8f:76:9d:85:84:
0c:24:d7:2b:c4:88:b8:fb:35:b7:15:b2:62:be:3e:
da:34:e6:f0:4a:d3:93:02:02:48:cc:7a:89:67:ef:
13:bf:ff:15:83:ef:dc:51:71:6f:79:01:69:06:dd:
04:11:1f:5b:12:a1:a2:3c:cd:3a:87:9f:66:11:dd:
96:7f:69:03:f4:27:11:ef:b2:8d:d0:b2:e7:2b:f8:
ce:1d:0d:6d:46:ea:92:5f:4d:ba:53:f1:3b:d2:76:
97:bc:13:93:22:8a:9e:b6:f2:79:df:c6:07:d9:06:
7f:c4:58:8a:94:e9:16:52:68:43:12:47:0d:27:9d:
f8:5f:e9:06:f5:b8:04:71:3b:38:e9:67:64:04:50:
25:fa:94:1e:5e:7c:08:ad:65:1a:0c:a6:32:5c:8d:
40:11:19:a5:a7:0f:32:67:f4:d2:80:b1:c5:01:f0:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:E9:29:78:AB:ED:D6:83:B4:D4:48:32:F5:BE:39:9C:36:26:7E
X509v3 Authority Key Identifier:
keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:a1:55:0a:de:80:66:2d:61:3f:f7:0e:12:dd:a3:09:6a:
90:5f:5e:27:10:89:4a:59:e0:17:2e:b9:f0:d4:e6:0e:47:ff:
81:53:8f:07:82:8d:f4:9f:19:0c:92:8f:36:13:58:00:26:3c:
fb:53:44:4c:2b:f1:3a:8c:2e:e7:bb:1a:88:b4:c6:83:44:fd:
a5:7f:2a:dc:56:56:7e:7c:06:70:77:c6:f0:0e:7b:54:9e:42:
7f:23:9b:fd:2d:aa:4d:27:58:a8:02:34:f3:08:32:3d:36:a5:
4f:19:8d:9a:89:89:e4:b3:cb:9c:46:a7:9f:19:2c:08:81:8f:
ed:5e:9b:69:45:43:b0:4d:2a:63:02:86:89:be:d6:4e:ec:c8:
e1:67:b3:37:d8:63:25:5a:82:11:a0:16:75:50:31:f9:d9:b3:
01:8b:63:a7:d8:84:89:b8:2c:9b:da:16:b1:df:66:f1:77:38:
91:00:e4:30:8e:2d:6a:e4:b1:6a:b3:17:af:be:2e:f6:e4:d2:
9c:38:23:3e:9e:e7:5b:ab:7f:7e:6e:c5:80:99:02:c9:5d:0a:
50:cb:78:26:f9:5f:b5:dc:64:14:d0:5d:e6:8a:1d:cf:d5:20:
d1:85:25:d2:9f:b4:9e:d3:28:ae:85:65:80:ee:99:90:7b:57:
d5:41:c0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:23 2025 by rpki-client