Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: QU0vPC9pAREu1QLPVvJnEEIIzGRTyX3a7Xpnh7R99vg=
Subject key identifier: 1B:85:7F:98:B9:CD:28:2D:0A:A3:7B:7D:BA:64:CB:04:78:33:C5:29
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 0196C615AD73F7E0D9F72D8673DC0B60E77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 10DD
Signing time: Mon 12 May 2025 20:00:31 +0000
Manifest this update: Mon 12 May 2025 20:00:31 +0000
Manifest next update: Tue 13 May 2025 20:00:31 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: XhIdjr8Gq23UTucG+d1QlVCks50DKarFKLLcEKPY4hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:ad:73:f7:e0:d9:f7:2d:86:73:dc:0b:60:e7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: May 12 20:00:31 2025 GMT
Not After : May 13 20:00:31 2025 GMT
Subject: CN=1b857f98b9cd282d0aa37b7dba64cb047833c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:45:d8:2b:40:ff:bd:8c:ed:5e:83:5f:c5:
09:4c:cb:72:13:6c:c9:c3:27:08:aa:3a:22:d4:17:
99:d1:07:b8:e4:e2:8e:f6:00:35:26:01:d8:41:de:
60:8f:ce:c4:62:98:2f:18:e9:84:1f:59:85:aa:88:
aa:7c:74:d6:4a:36:31:3f:34:90:66:f0:33:5f:90:
69:d9:a2:c0:f1:c9:9f:f1:67:73:3b:8e:b2:ef:55:
d5:7a:2d:6a:a0:28:10:13:7c:48:bd:6f:c0:69:f3:
a2:64:9c:73:62:95:7c:c8:07:4e:a1:44:ef:61:e9:
a4:1c:50:57:fd:05:56:56:8a:33:d0:25:ea:b4:10:
85:50:10:ae:72:fb:b8:e6:f8:81:91:bb:08:d4:e3:
3a:29:b8:da:5a:a1:9c:9c:1f:47:dc:79:0a:81:42:
ed:66:62:46:0b:20:7a:21:09:ff:64:e7:29:9a:35:
f2:a7:56:51:83:ee:b0:07:b8:7c:53:2c:66:eb:e4:
01:eb:f7:e0:90:0d:1b:ef:d0:6e:17:4c:8b:2a:a2:
4b:01:8c:02:f2:f6:2f:aa:55:83:29:88:d8:75:11:
29:5f:97:b7:1b:65:8c:67:e1:ed:65:05:c7:0b:0b:
ce:bd:32:e9:8a:f8:fc:bf:16:3a:87:b3:7c:b6:1e:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:7F:98:B9:CD:28:2D:0A:A3:7B:7D:BA:64:CB:04:78:33:C5:29
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ba:be:25:10:e9:87:cf:fd:e7:38:c0:28:5f:6b:be:47:e4:
65:b9:b0:25:bb:5c:2f:6a:b3:e6:82:88:db:39:07:26:b8:de:
75:f7:b7:ec:fb:da:94:a2:5c:b2:4d:38:e7:99:77:d4:2f:d3:
b8:79:f6:e6:9c:64:24:be:4d:a7:d0:3f:0c:8b:12:7b:c2:fa:
5b:1b:ab:39:11:1f:ec:b6:19:e9:74:7e:a9:fe:7b:13:8d:0d:
40:da:b6:08:ce:d0:74:6f:eb:98:84:67:aa:c9:9d:48:8f:bd:
0a:ea:6e:d5:5a:f9:01:a0:9a:67:80:60:5b:b6:28:b9:12:97:
8f:5c:a0:e6:cb:d8:94:19:ea:73:f9:2f:26:d6:0e:6f:53:c4:
46:5a:d2:94:18:ad:d2:37:2b:b7:7a:d7:3e:96:c4:b7:ed:bd:
ec:ee:80:cb:fc:49:bb:d4:81:24:d3:42:59:72:40:13:25:7e:
47:2d:f1:58:03:ef:4a:e0:25:e3:65:e7:8f:6b:38:28:5d:38:
36:e8:29:3d:69:3b:ee:43:ed:ad:5a:f2:c3:75:1a:2f:97:24:
f7:3b:78:b5:dd:ef:ec:71:de:2c:c0:d9:7a:0c:32:0e:da:56:
38:b9:1a:28:76:f4:a8:9b:17:db:ca:f8:4c:c9:44:4e:85:84:
ee:61:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:42:06 2025 by rpki-client