Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File: WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier: BqyYcc6JQ4KbN1+IK/eXMpgBOZXqcryt/1pFoxi3FGc=
Subject key identifier: F6:DA:13:83:9B:D1:4E:8A:E7:4F:6F:0A:1B:C6:E2:FE:FE:2E:0E:96
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 0196BC6DEC529090AEAA1C280AFF5F33C5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number: 1240
Signing time: Sat 10 May 2025 23:00:42 +0000
Manifest this update: Sat 10 May 2025 23:00:42 +0000
Manifest next update: Sun 11 May 2025 23:00:42 +0000
Files and hashes: 1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: 6mIh3Qpdum/J73YJqdRyFNrhwV6im0AV4kfH6fHIuGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ec:52:90:90:ae:aa:1c:28:0a:ff:5f:33:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: May 10 23:00:42 2025 GMT
Not After : May 11 23:00:42 2025 GMT
Subject: CN=f6da13839bd14e8ae74f6f0a1bc6e2fefe2e0e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:f2:4b:6c:d4:d3:af:0d:2f:ae:cc:98:1d:
17:9e:d3:e2:bb:0c:c6:ba:49:4e:98:3f:18:d1:fa:
5d:5d:cb:9c:d5:f6:1d:e8:81:84:98:20:5d:d0:7e:
29:93:93:65:52:24:e7:f0:ed:58:53:7e:9a:50:98:
02:1a:ab:70:be:42:23:6f:2f:cf:22:40:62:f2:4a:
a4:6f:d2:c5:8c:f8:fb:1f:76:63:0e:fd:33:23:05:
63:da:48:fe:9b:a6:68:13:b8:1e:27:34:c2:53:c8:
e8:6b:44:82:e6:97:22:60:58:3e:a3:2d:1c:d7:2e:
3c:b1:73:ea:74:4b:78:58:a6:66:1f:b4:69:47:8b:
55:96:e0:50:cf:88:fb:25:65:c7:34:b2:9d:51:2a:
0a:1c:b2:a0:bc:93:6e:b7:8c:08:a5:c9:68:4c:d5:
ac:98:46:e5:3e:1a:72:17:b3:d5:62:30:e1:9a:4a:
dd:4f:fd:77:50:f4:15:0c:01:66:35:a1:5f:aa:12:
2e:35:1b:a0:db:46:08:7d:e0:33:96:2b:03:fb:6d:
43:17:44:94:ba:91:92:db:ce:4e:2b:e2:1e:bb:fb:
b2:b7:9f:65:c9:e3:d0:e0:44:62:33:1e:09:5d:f5:
3d:8f:6a:42:1b:5b:81:62:a4:77:c5:0d:00:f5:d0:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:13:83:9B:D1:4E:8A:E7:4F:6F:0A:1B:C6:E2:FE:FE:2E:0E:96
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2e:00:63:bf:10:aa:22:ef:b3:ec:3d:e0:63:57:2e:b6:58:
dd:0d:2b:d6:5e:b4:93:23:4a:6b:c2:f5:6f:46:55:44:68:ea:
98:43:bb:e0:a0:eb:8b:c6:e6:36:9c:4c:fe:78:c3:8f:f0:5b:
f9:a9:25:f4:24:fe:ec:e5:20:a6:8a:3a:d4:43:39:c9:e1:67:
cb:e1:05:91:84:8a:b1:d9:48:18:af:8b:a3:b0:66:e0:3d:ca:
15:d0:45:4d:da:9a:2a:73:61:c9:34:be:40:80:e5:a2:95:2b:
c2:4e:f4:63:ed:4f:ba:d4:7c:0d:49:0d:95:4d:f9:06:e8:3a:
a6:ca:4e:62:9e:f8:1f:f2:99:89:4a:04:64:fe:99:12:f1:6a:
35:ec:0f:83:c6:0e:80:34:75:e6:05:b1:82:9f:2d:50:58:2c:
07:52:09:a8:78:dc:60:af:08:70:2d:87:7b:18:9e:54:0f:1d:
61:b4:d3:e8:3a:66:6d:3c:e0:99:b2:3b:12:01:1d:8d:5b:6a:
2b:19:ab:6f:11:93:3d:7f:aa:b3:09:be:d7:ce:3c:85:b1:12:
ef:33:0a:d6:98:e2:0f:c4:48:08:cc:89:95:40:dc:23:18:e8:
72:d9:b6:eb:01:fb:d3:58:ed:f2:e7:f1:6a:06:a9:3e:dc:7d:
37:01:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:28:54 2025 by rpki-client