Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: sa2tnqzzI8C6mkXEK3bG/e+fB9av+1YStS5Wt0NokAE=
Subject key identifier: C1:97:AD:18:EA:AC:31:69:01:40:F0:4A:D2:11:0B:A3:1D:F0:10:BC
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 0196C68394B11237B1E634FC67910E22BDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0B65
Signing time: Mon 12 May 2025 22:00:34 +0000
Manifest this update: Mon 12 May 2025 22:00:34 +0000
Manifest next update: Tue 13 May 2025 22:00:34 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: jcPbqUosRyUmFwJvAkhZh45osvre1kT5IQsKiQpm5PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:94:b1:12:37:b1:e6:34:fc:67:91:0e:22:bd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: May 12 22:00:34 2025 GMT
Not After : May 13 22:00:34 2025 GMT
Subject: CN=c197ad18eaac31690140f04ad2110ba31df010bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:d9:4f:36:29:d9:71:cc:9a:79:03:db:cf:
8c:cf:cb:04:92:c6:c4:f7:34:97:d3:2b:99:f8:96:
97:f8:5c:c1:7f:ae:62:97:8f:49:61:c1:fc:d6:32:
bc:59:3a:3a:ea:ff:ec:50:1a:8e:a5:97:2d:f7:9d:
98:d0:41:18:00:6f:06:82:46:87:16:70:04:10:04:
0e:ea:dd:88:07:54:e3:3f:ec:38:bc:50:28:29:10:
bd:00:54:f5:7c:57:24:1a:2a:2c:a0:f0:53:4a:2c:
89:5f:74:e0:58:7e:02:28:f7:18:b6:03:6f:6e:2a:
70:60:44:d1:7e:93:22:78:3f:1a:88:e4:1f:94:94:
fb:be:b4:bf:0c:f6:cb:73:a7:c6:95:7e:d1:98:12:
6b:6f:5c:6a:0d:13:06:61:94:a1:eb:d9:95:59:cc:
aa:a8:79:72:0b:e2:54:74:b3:98:1a:b9:64:a3:c5:
8b:8c:83:fd:86:5b:12:fd:9a:62:8d:e1:be:c1:06:
98:df:46:86:2a:36:dc:8b:f0:6e:9e:69:d9:62:21:
b4:71:3f:e2:9e:df:3e:cc:21:01:cd:c4:34:3c:c4:
e1:33:32:70:d9:b2:89:0c:34:cd:4b:70:2b:f6:84:
44:33:ad:d7:a7:ad:bb:a4:d0:7a:85:c5:ab:8d:be:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:AD:18:EA:AC:31:69:01:40:F0:4A:D2:11:0B:A3:1D:F0:10:BC
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:25:fa:3a:9d:86:41:6f:fb:30:c6:6a:5d:0c:5d:0c:3d:1c:
90:ab:6a:2e:5c:9f:85:d4:46:de:19:fb:23:57:c7:1c:49:2a:
f8:2e:1f:68:a4:c6:d8:76:d2:73:4e:43:4d:c0:24:1e:39:45:
0d:36:87:17:04:08:3d:39:93:91:1a:de:4c:fb:f2:84:17:0e:
75:4f:37:d3:19:a4:a3:84:2c:16:81:1f:2f:73:04:af:a4:1b:
a9:9f:df:34:a9:92:b5:d1:49:79:f5:82:3b:70:fd:7b:67:13:
27:43:98:ac:00:b6:a8:1c:c9:5a:56:62:c2:87:1f:be:86:b5:
ec:63:27:a2:2f:00:38:9e:b5:89:b8:d6:2f:b0:03:47:eb:33:
a5:dd:06:5d:6c:71:44:5a:60:08:2b:d6:22:cd:92:54:5a:f9:
9c:0a:28:54:8f:c9:ed:ef:1d:9f:ec:19:f7:02:1c:ac:e5:3f:
14:a5:ca:bf:ca:23:ec:c9:2e:d7:b2:2c:15:c1:67:67:d1:01:
29:d2:2d:7c:c8:a2:0d:ee:b1:a7:d8:19:28:b4:8b:16:5d:b9:
b3:36:64:53:cb:0d:9b:0b:46:09:98:bf:c4:dc:6c:6c:0b:ac:
7b:1b:b2:82:1d:06:5c:15:66:5b:b4:77:d6:b9:95:70:ca:f1:
8e:78:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:54:32 2025 by rpki-client