Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json)
Hash identifier: 0CW9e6JMbtvAFJ5soI7SWpCggsvUmIASw+xQwRAmfYk=
Subject key identifier: C9:75:00:EF:4D:8E:DC:88:BA:A9:7F:A9:BE:56:FB:9C:88:0C:6E:00
Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736
Certificate serial: 0196C53A03B4356095F78FD900126A398B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 16:00:35 +0000
Manifest this update: Mon 12 May 2025 16:00:35 +0000
Manifest next update: Tue 13 May 2025 16:00:35 +0000
Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: rSwnZ60tTIie9NA05VWFhl+9uCuQQy4/1/4R/5pKLUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:03:b4:35:60:95:f7:8f:d9:00:12:6a:39:8b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736
Validity
Not Before: May 12 16:00:35 2025 GMT
Not After : May 13 16:00:35 2025 GMT
Subject: CN=c97500ef4d8edc88baa97fa9be56fb9c880c6e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:cd:61:99:18:1d:02:97:3d:c8:70:79:09:
eb:e0:b1:2e:54:47:55:7a:12:af:ec:f5:61:e3:fe:
44:45:bb:b5:28:d7:08:6a:e4:c9:16:c6:98:2e:be:
d4:b9:ad:b7:f4:29:07:3e:99:94:8a:98:55:fc:73:
9e:b6:fa:4e:d5:2b:30:bf:25:6b:f2:27:9b:49:78:
89:18:6e:4a:ca:39:09:3c:27:14:5e:52:86:f6:bc:
ba:5d:d7:81:c8:35:5b:9a:66:46:be:fe:f2:e6:83:
45:88:94:21:cd:36:54:92:33:8e:42:83:31:55:7e:
70:80:ac:05:b8:c7:87:b3:f9:75:16:38:55:3c:8d:
17:1e:2d:04:21:36:cd:53:62:a0:76:59:8b:60:a5:
2f:b4:19:c1:93:19:6d:76:06:87:61:c6:f0:8d:7f:
6a:b7:b9:ab:b1:17:b7:63:cd:85:69:f8:68:c4:5e:
8c:c5:e9:4d:ee:87:3b:ae:cc:bd:dd:df:f7:df:fa:
58:40:5e:20:94:d9:22:10:72:0d:f8:83:e9:e6:33:
b6:9d:19:25:51:a5:84:c1:05:40:d9:60:e8:23:b0:
04:cb:3e:7e:26:3b:d2:7c:5a:4e:07:3b:ff:38:c4:
fd:26:95:85:85:27:ce:0b:1d:32:25:0e:32:e3:e9:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:00:EF:4D:8E:DC:88:BA:A9:7F:A9:BE:56:FB:9C:88:0C:6E:00
X509v3 Authority Key Identifier:
keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2f:9d:00:71:90:3b:64:40:f7:a9:27:b2:69:d0:71:8c:e2:
8f:fd:7b:ce:9a:b5:8b:5a:5e:c2:a2:76:66:1c:4d:56:e6:a8:
6c:29:ed:57:ed:99:7f:9b:e8:62:b6:c0:c5:d2:ef:fb:30:a3:
e5:f4:8b:f7:bb:36:d4:92:25:aa:10:d4:ba:99:b4:2e:f9:66:
c7:33:8c:af:b6:46:9c:06:10:6f:f2:50:c9:52:aa:b4:6d:e1:
0f:4f:e8:e2:3d:3c:f6:d8:d8:75:54:c6:14:5b:e9:d8:a5:25:
da:0e:99:c7:a3:cf:93:93:64:9a:67:43:14:94:ce:42:1b:d9:
64:48:d9:73:50:d5:de:15:f4:6a:01:a5:6b:18:4c:fb:d6:27:
c4:e2:5a:90:61:c7:b6:a7:38:82:d2:68:c1:11:66:b5:06:a6:
04:6c:89:94:67:3c:5e:a1:b6:c5:01:03:65:ec:85:50:4a:d3:
72:7d:d5:5e:2d:95:68:a1:ed:0b:83:b8:4b:d3:98:c9:84:eb:
98:b2:bb:d3:16:8e:f4:f7:fa:45:e2:61:86:dc:cc:a9:4e:74:
ea:18:3b:e1:91:2e:b1:ed:5c:09:a9:77:77:21:77:6c:27:20:
57:d0:f5:b3:65:37:19:b6:e7:dc:a2:5c:69:31:e5:30:e6:fa:
46:2e:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:10:24 2025 by rpki-client