Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: hXyXxgG8RaKodzoNRmbtPrnwguQAbIo+Zk1CUR56Bng=
Subject key identifier: 25:45:8C:A1:D3:83:9C:73:7C:42:90:D5:5E:F2:78:71:8E:3F:4D:C5
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 0196A27762B7FE449B26B3C75A817B18338A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0C86
Signing time: Mon 05 May 2025 22:00:54 +0000
Manifest this update: Mon 05 May 2025 22:00:54 +0000
Manifest next update: Tue 06 May 2025 22:00:54 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: PJhXxo7eDyHkrmdZPiIhMBaIUS8mIXQLf0mVTubwZ8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:62:b7:fe:44:9b:26:b3:c7:5a:81:7b:18:33:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: May 5 22:00:54 2025 GMT
Not After : May 6 22:00:54 2025 GMT
Subject: CN=25458ca1d3839c737c4290d55ef278718e3f4dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:21:ec:13:a8:5c:a3:29:f5:4e:e6:f1:fa:
ef:2f:51:20:01:b9:b8:d0:df:e8:bd:c8:d6:82:0e:
1c:c5:d5:3b:25:10:21:2f:f4:93:b3:9d:9d:9b:2d:
4a:45:8e:c2:06:82:4f:55:4f:16:e4:4c:11:c9:9f:
aa:75:b3:f4:07:3e:0e:c5:bb:53:be:b6:fe:ec:c1:
23:65:b5:35:0e:0a:66:a5:c2:15:bc:1e:42:12:bc:
2a:72:17:d5:2c:7c:85:88:bb:2c:7d:be:55:8e:35:
ed:76:61:37:6b:19:75:17:f4:76:b1:20:cb:06:74:
bf:00:0b:4f:7b:d4:f9:e8:bc:fe:3c:60:1d:91:f8:
7d:3a:56:26:4a:a6:ce:fe:4d:0b:bb:d0:99:6a:77:
7f:45:76:d6:68:e3:24:f2:7d:09:a0:ab:a1:2b:e3:
c9:88:8a:11:b2:f6:10:cf:74:93:59:46:6d:94:3c:
d3:a8:8f:af:f3:b4:70:c6:69:49:fa:8d:58:c7:e5:
ab:2e:bb:e9:7e:2d:01:03:7d:f6:97:bb:c4:2c:82:
51:ea:ec:8e:a8:9b:da:08:1e:84:8d:1e:ac:31:fa:
39:50:2c:bb:23:56:01:d6:96:f5:3b:8e:88:01:60:
be:a3:2e:6e:49:f7:86:94:b6:4d:94:c1:ee:c1:93:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:8C:A1:D3:83:9C:73:7C:42:90:D5:5E:F2:78:71:8E:3F:4D:C5
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8e:3e:13:0d:ad:83:17:1c:59:9f:01:76:c0:c3:d8:6e:4b:
3d:5f:61:6b:fb:f1:f8:e2:52:f5:3b:c5:51:74:6d:b0:c2:01:
70:48:3a:39:1e:03:e7:0d:42:e4:fe:41:9d:9b:61:53:1b:53:
63:91:ba:eb:c0:59:17:07:ce:b5:ef:2f:89:de:4d:8b:03:b1:
75:f8:e7:a4:89:cc:53:99:30:ac:57:3f:55:20:7b:59:61:22:
d8:dc:5f:73:46:de:91:41:4d:f3:2c:e9:4c:c0:a9:0d:1a:30:
7d:5b:ab:d2:4b:34:10:61:74:0f:4a:1c:f2:71:19:58:8b:8b:
b2:95:02:51:87:b9:1f:47:74:17:0f:3b:80:dd:00:2a:8b:58:
63:ef:05:c1:80:17:60:e5:cc:89:ff:31:7a:cc:b3:9a:cf:ef:
f8:ba:d7:33:86:0e:45:31:50:b9:d5:7c:10:41:e9:ac:60:38:
82:96:e2:4c:bd:e6:12:e7:98:72:83:53:ea:d5:96:46:23:b6:
1e:fb:46:30:c7:8e:38:c5:69:c0:fc:c7:9c:5a:8d:c0:ba:74:
b3:f7:8a:69:84:20:b7:e0:9f:8b:54:08:3b:61:63:22:a1:83:
6b:bc:0a:eb:ef:2b:ac:8a:aa:b8:ad:60:72:7b:7d:86:77:07:
78:95:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:23:52 2025 by rpki-client