Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File: wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier: IVppeDjsHGn9TzCF96CGZPehDTdxG3E3vks9oLZKhIQ=
Subject key identifier: A5:4C:F4:0B:62:71:93:9F:17:17:7A:6F:C6:C9:61:DF:81:90:F4:ED
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer: /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial: 0196B36A62756EF81DE17F1882A1AC10D63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number: 040B
Signing time: Fri 09 May 2025 05:00:15 +0000
Manifest this update: Fri 09 May 2025 05:00:15 +0000
Manifest next update: Sat 10 May 2025 05:00:15 +0000
Files and hashes: 1: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: vUlSlONVufJS1jKXrbF2Kc92BkGiPgot4zZQqeadYPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:62:75:6e:f8:1d:e1:7f:18:82:a1:ac:10:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Validity
Not Before: May 9 05:00:15 2025 GMT
Not After : May 10 05:00:15 2025 GMT
Subject: CN=a54cf40b6271939f17177a6fc6c961df8190f4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:c0:a6:8d:7a:73:50:1f:2e:d4:07:ba:55:
06:74:77:34:c9:83:dc:6e:42:57:46:09:e8:25:aa:
e9:6b:8f:be:a6:32:bd:e3:16:6c:dd:31:9c:b0:a7:
34:cb:f7:da:fd:a5:03:40:47:49:75:7d:3f:b4:f0:
fe:66:f6:3f:27:8e:15:e4:04:17:f9:2d:1b:d8:b9:
99:0f:13:7b:59:f3:a7:7e:93:28:d5:30:b8:24:b4:
72:c2:fd:b4:91:f6:7d:ff:01:24:c5:51:91:1e:ad:
c0:01:b4:d3:0f:fb:8d:2e:d0:cf:3b:ef:23:b8:f6:
ab:2b:69:64:7d:91:31:1b:04:f9:ea:47:c1:c7:cd:
95:6b:dc:63:bd:59:b4:97:a2:17:b5:a9:b4:96:64:
14:52:dd:26:9d:a6:e4:a2:43:94:ef:14:80:93:71:
d4:fb:1d:ec:5e:a6:73:e0:3f:9a:6b:a7:92:bb:1d:
ef:e0:9b:c6:e9:bb:24:eb:b2:8a:f2:37:02:6e:ee:
90:55:cd:46:21:97:31:a3:06:0c:2a:59:3b:a8:a2:
26:93:12:cf:c8:73:14:55:c0:80:75:c0:94:e6:ff:
9b:11:ed:26:d5:b4:8c:41:88:cb:41:48:be:30:89:
a0:f1:28:7d:64:6a:e7:b8:09:17:59:24:0f:e8:43:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4C:F4:0B:62:71:93:9F:17:17:7A:6F:C6:C9:61:DF:81:90:F4:ED
X509v3 Authority Key Identifier:
keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:24:df:08:99:e7:41:90:29:49:b6:30:f1:3d:89:f7:4b:cb:
0d:6d:d2:d6:53:ec:ae:71:f7:d5:b1:a4:6d:bd:21:6a:74:ab:
dd:7c:57:df:7d:ed:36:80:2f:0e:e7:0d:ca:b1:1e:a8:7b:dd:
83:0e:01:a1:11:8f:7e:eb:3d:44:96:40:a8:30:72:ea:0c:4f:
93:3b:32:4b:b9:80:63:ba:c9:a8:61:60:6d:50:3a:21:0c:dc:
cc:fe:51:e3:3d:9d:dc:a4:98:91:0d:d1:f1:3b:bc:5b:65:65:
f5:d2:4d:86:61:63:92:1b:57:5f:62:a9:50:07:c5:b2:ff:4e:
5c:c2:f2:6d:2f:35:f6:01:99:a3:fb:d1:48:f8:36:cf:cb:a0:
7f:fa:4d:f7:f3:00:bc:9b:0e:e7:cd:90:8e:59:79:6e:4a:1e:
9d:33:ae:ac:22:76:c1:7c:0b:01:be:35:be:96:e4:9d:42:a7:
4f:9c:cc:ec:9f:36:b9:16:70:36:0b:b5:7c:f9:5e:95:48:8b:
3a:b9:07:bc:45:14:b0:79:41:04:20:68:5e:05:98:29:81:9d:
64:4a:7f:4d:7f:38:58:41:75:f9:94:d6:fa:68:c5:81:92:76:
9e:89:d0:89:9e:64:ea:c1:5a:4c:81:00:03:23:bb:1f:ce:48:
30:0e:34:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:42:14 2025 by rpki-client