Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier: 1cPOsCv+L51qmA3m0PF29TkoE7DYdlK4xzx+Fc1k5os=
Subject key identifier: 88:2C:3F:D2:71:9F:27:9D:E9:07:3C:4A:55:DA:66:54:69:B3:F4:C2
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial: 0196BD80C14FB661E038B38DD4ED39AAE597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number: 07AA
Signing time: Sun 11 May 2025 04:00:53 +0000
Manifest this update: Sun 11 May 2025 04:00:53 +0000
Manifest next update: Mon 12 May 2025 04:00:53 +0000
Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: JLT/4wqzX6IH0R0lb8WghPC781R8SV0QmvLID7scRzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:c1:4f:b6:61:e0:38:b3:8d:d4:ed:39:aa:e5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
Validity
Not Before: May 11 04:00:53 2025 GMT
Not After : May 12 04:00:53 2025 GMT
Subject: CN=882c3fd2719f279de9073c4a55da665469b3f4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:27:69:66:43:1c:05:e8:d2:ea:08:91:7f:
47:3b:57:7d:2a:b9:1f:2a:13:45:f6:57:ec:d2:94:
b7:36:c3:68:d6:bd:8b:f2:27:2c:92:f1:e1:31:3d:
60:70:41:ea:43:3d:24:77:00:ac:c6:aa:14:04:7b:
a1:3c:4d:f3:ff:d3:b9:1f:07:33:de:ba:c3:53:1b:
4a:11:2b:74:04:66:40:b0:a5:ee:44:57:90:51:63:
94:83:00:54:6a:c3:e2:39:b5:00:48:89:54:5f:67:
36:27:12:78:d3:bd:28:85:b7:da:c3:f7:81:25:a6:
18:6c:57:5e:c5:7a:f0:b5:47:44:4b:56:ec:d5:00:
3a:52:1e:e6:0c:3a:a5:09:31:08:1e:f3:38:f1:70:
72:00:71:31:e2:be:15:0d:71:5b:33:e3:ba:60:16:
f9:b7:f2:c3:f9:2d:54:d3:4b:27:dd:04:88:bf:93:
73:cd:fe:46:59:31:32:f4:4d:e2:3d:a7:8a:90:6a:
bc:1b:35:07:78:9c:f4:bd:fb:f4:4f:a2:02:fe:80:
64:c3:ae:1f:1f:26:20:3b:90:c3:cd:0e:83:47:af:
32:32:bd:cc:55:53:01:7c:8e:cf:91:f6:d8:f3:97:
f5:da:6a:79:67:24:d2:95:fa:a8:2f:d8:4c:64:b0:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2C:3F:D2:71:9F:27:9D:E9:07:3C:4A:55:DA:66:54:69:B3:F4:C2
X509v3 Authority Key Identifier:
keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:d9:f3:76:b7:88:56:51:8b:19:0c:16:aa:a7:d7:56:6e:
ca:d9:04:a8:ca:4a:09:db:f0:57:dc:ec:88:af:b2:eb:0b:15:
ae:ac:c7:b4:f5:83:98:e2:d2:2e:55:d9:bd:a5:b1:e9:f2:69:
05:87:37:2c:b3:40:40:bd:48:9c:1a:e4:61:7c:fd:4a:4b:01:
3e:48:05:f8:a8:02:46:34:cb:31:fc:f0:05:7c:73:a4:16:f2:
66:d3:50:17:87:a2:37:bc:e3:f7:96:08:23:09:9e:d1:6c:eb:
7f:1e:ea:f9:5d:05:46:e9:c1:ba:37:68:5b:7b:dc:5a:63:5b:
3e:bd:c5:70:e9:78:0e:3e:a8:23:96:3e:9b:78:61:c6:bd:53:
54:93:36:b3:a2:c2:6a:61:9a:6a:7d:f8:b6:83:b5:27:cd:62:
2e:83:a1:16:1c:06:ce:af:a8:ee:63:c8:5e:59:1a:97:6a:33:
ef:c8:d5:aa:60:b0:f3:a0:41:e0:41:a3:62:fa:db:98:75:a7:
83:f3:77:ca:33:8c:0a:6c:dd:6b:82:b0:78:77:6b:1c:0d:8a:
7f:d3:d9:68:1f:a2:04:a8:5c:88:6e:e9:56:ca:d2:25:57:a9:
aa:22:23:02:6b:fa:da:24:ca:dd:0d:2f:bd:0e:29:ff:8a:6b:
2c:09:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:54:23 2025 by rpki-client