Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
File: WZypahnO8ifMM7NFhZaqRV0rePg.mft (raw, json)
Hash identifier: 0d/yRvvLbTQeZMhN8wQ4HAYHs2zyiuEjKziaDlFpOVU=
Subject key identifier: 8A:12:54:3F:A1:65:D5:60:3F:31:F0:EE:02:CC:18:27:3D:DB:A6:B2
Authority key identifier: 59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Certificate issuer: /CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Certificate serial: 0196A49C3E54D82C1316610F901984909369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
Manifest number: 0485
Signing time: Tue 06 May 2025 08:00:24 +0000
Manifest this update: Tue 06 May 2025 08:00:24 +0000
Manifest next update: Wed 07 May 2025 08:00:24 +0000
Files and hashes: 1: WZypahnO8ifMM7NFhZaqRV0rePg.crl (hash: 1I4UCeUdLcSxFW4iXwfaYTNXUg4QDM0cgcfiUIGfxes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:3e:54:d8:2c:13:16:61:0f:90:19:84:90:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Validity
Not Before: May 6 08:00:24 2025 GMT
Not After : May 7 08:00:24 2025 GMT
Subject: CN=8a12543fa165d5603f31f0ee02cc18273ddba6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:58:6a:ad:41:19:5b:cb:42:a9:f9:f5:46:
d2:b1:cd:bf:6f:2a:2c:46:ab:69:e0:7a:1b:73:2f:
02:02:05:05:d6:7e:56:c5:b9:8a:6c:66:9a:46:63:
95:ca:05:2c:63:37:94:ac:3a:1b:37:01:2e:f5:01:
c4:ee:f9:b7:7b:c6:b8:15:6e:4b:91:78:9d:3e:13:
79:a2:63:59:53:79:db:61:9f:67:8b:cd:8b:0e:f5:
74:e8:6d:e2:d8:72:77:30:29:6b:f7:a2:69:47:3b:
be:ff:e3:46:f7:9f:e2:b1:16:8f:c3:fa:dc:90:d0:
9c:41:59:34:a0:0b:c4:e3:9e:fc:93:cc:a6:89:2f:
a6:04:d2:f1:ea:8e:ce:48:ca:71:6a:af:e1:a9:89:
77:db:09:cb:00:9e:40:a3:74:68:68:21:31:37:c6:
42:e9:16:18:61:e3:0c:e1:0f:dd:de:fb:96:cb:c0:
ed:02:d8:22:c0:42:9d:71:b3:a6:62:e1:77:01:3b:
60:4c:67:50:01:df:b2:31:2e:b0:a6:0a:e1:28:d5:
58:f2:66:11:cb:94:76:8a:36:1b:0f:74:15:e8:dc:
16:47:25:14:33:c9:c3:bc:16:76:8d:3b:d4:e0:53:
0a:d4:6f:a9:c8:1f:e2:45:ba:d6:12:f6:75:ce:70:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:54:3F:A1:65:D5:60:3F:31:F0:EE:02:CC:18:27:3D:DB:A6:B2
X509v3 Authority Key Identifier:
keyid:59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1c:f2:9f:0d:08:4b:23:56:57:4d:c2:3d:43:86:25:70:30:
b6:df:ae:a1:e1:64:18:16:aa:cb:40:ba:42:54:c4:f9:d8:77:
f6:89:db:5f:94:ee:36:4d:10:ab:fd:cd:55:7f:dd:6d:9c:9b:
86:5e:05:35:92:38:de:ac:9b:20:ab:17:a6:dc:a2:21:ba:52:
68:d1:b0:a9:c0:f4:0c:15:1a:96:a5:e2:67:28:5b:08:c7:4e:
1f:ff:d6:c1:a8:65:aa:d6:72:d1:c0:fa:a8:78:65:75:23:51:
50:80:3b:61:75:fe:83:de:5d:85:c6:9f:e0:f6:90:e5:30:f1:
c7:5d:c5:fe:f7:88:66:6c:38:55:10:bb:da:5e:7c:d3:b7:31:
04:4e:8a:82:75:89:27:e7:7d:40:99:35:08:fb:51:98:84:79:
f7:f1:7a:b4:16:98:72:7d:67:6f:53:63:5c:5b:d0:92:93:91:
ad:f3:66:0d:0e:48:2b:df:23:71:2f:58:cb:63:c0:1a:46:e0:
1b:f0:7b:b0:50:1c:95:dc:10:3c:66:7c:9e:42:31:60:9b:18:
7d:ae:0a:ac:0d:53:d1:2e:fd:f7:89:64:de:ac:8a:0e:cb:e0:
8b:a3:f2:fc:57:d4:ff:41:02:29:01:6a:f2:dd:5e:8f:d6:97:
48:6d:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:27:03 2025 by rpki-client