Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
File: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft (raw, json)
Hash identifier: oSswiQiCz1geddUB7mWL9Su7GMYKap8LjqkV8SOOV8Y=
Subject key identifier: 25:37:2A:01:B2:D1:EB:D1:0D:70:EA:67:A1:74:AC:55:64:8D:B7:DA
Authority key identifier: C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
Certificate issuer: /CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Certificate serial: 0196A16486803B5CEDC1B9CD35B96491DBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 17:00:41 +0000
Manifest this update: Mon 05 May 2025 17:00:41 +0000
Manifest next update: Tue 06 May 2025 17:00:41 +0000
Files and hashes: 1: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl (hash: vWV3BvOUDz1tZApsP8cBmsH5/5sfJja7FSPJtInMAXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:86:80:3b:5c:ed:c1:b9:cd:35:b9:64:91:db:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Validity
Not Before: May 5 17:00:41 2025 GMT
Not After : May 6 17:00:41 2025 GMT
Subject: CN=25372a01b2d1ebd10d70ea67a174ac55648db7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:5b:b1:87:47:11:f4:34:c5:bd:19:0d:24:
ba:bc:e2:ca:d9:d6:c1:39:20:54:be:f3:28:01:b0:
0e:25:78:49:7c:83:68:17:66:38:20:86:3b:23:20:
a8:3a:a4:eb:69:0e:65:e4:5e:f7:e6:c9:54:36:2f:
04:fa:11:f5:8f:c1:98:1a:56:83:2d:9f:46:21:d2:
1f:c0:8b:77:8c:6b:3e:06:99:d7:7d:de:89:f7:7b:
9b:49:9e:fe:83:38:44:bd:d9:b6:81:e2:17:60:8e:
04:c4:b3:26:fb:ea:91:84:f8:27:d5:04:d7:26:57:
f0:87:77:67:9a:fc:a7:d4:42:03:8f:21:7c:bd:4f:
03:ff:92:94:ae:c3:40:80:5e:8c:3d:3d:c1:56:37:
c0:12:9c:14:f1:3e:16:11:13:bd:e5:5e:5a:23:92:
c1:78:34:0a:64:45:49:38:67:b2:cb:1f:8d:26:66:
8b:d0:bd:67:b1:95:7f:52:e1:4c:58:d3:12:ea:f3:
65:91:99:65:72:44:be:e6:10:04:3b:72:05:1b:02:
41:3d:46:3c:b3:87:6d:32:4f:6b:10:38:b0:fd:c1:
b3:e1:bc:63:1e:d9:38:73:0f:a3:47:1b:f4:6e:93:
f1:a5:a6:c3:c2:b5:8e:8a:c9:c3:a4:98:6d:be:07:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:2A:01:B2:D1:EB:D1:0D:70:EA:67:A1:74:AC:55:64:8D:B7:DA
X509v3 Authority Key Identifier:
keyid:C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8b:cc:8b:c8:9d:e2:cd:40:0f:7b:b9:86:17:8e:b0:6c:00:
37:9a:32:fb:33:83:83:22:8c:91:05:bc:84:fd:27:5d:6f:c8:
05:4b:39:bc:b9:e5:65:28:d4:0d:12:b9:81:d3:b4:0b:5f:c5:
cc:9e:61:43:cd:5b:19:e7:d3:2e:e0:75:b7:1c:c0:3b:bd:47:
9d:7e:4c:00:62:cd:4c:5d:63:ed:92:76:49:48:06:17:a9:7f:
c4:79:0a:c9:aa:80:ee:5f:9d:12:cd:71:8f:6d:5f:59:b3:b8:
2a:b9:50:f1:bd:46:8c:b3:d3:ae:94:e0:c5:fc:60:04:f6:9c:
c8:21:85:c6:30:91:4b:e9:c1:8a:f6:0d:7c:98:13:9f:13:86:
a9:33:ca:07:f0:ed:30:72:1a:93:c0:fe:65:7e:0e:50:91:a9:
40:1a:4c:b3:c7:80:62:9e:61:fe:20:26:fc:47:0e:2a:09:2f:
a9:54:56:2c:52:ed:c0:80:85:da:3e:a3:1d:00:8b:6a:2b:3f:
60:a7:00:ca:e7:c5:dc:33:ab:51:e5:b6:88:68:70:26:3a:ed:
aa:5e:cc:bc:c0:ab:3c:4f:c7:1b:58:1f:50:19:25:e0:20:dc:
d8:e5:dc:63:c6:9d:0a:0a:71:73:d7:3c:f2:df:2e:41:ad:5a:
92:b1:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:13:43 2025 by rpki-client