Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: b6GirMcHk/LopdH4I6YCCEf6M6AA4Acid08hR/xbjAY=
Subject key identifier: 2B:50:49:FB:0A:F2:6C:36:07:1F:1B:5B:62:CF:E2:54:58:2D:73:43
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 0196A276C64FD2EFEEB2CB0E1ED069CBF124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 22:00:15 +0000
Manifest this update: Mon 05 May 2025 22:00:15 +0000
Manifest next update: Tue 06 May 2025 22:00:15 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: st56P0n4lbkRMUbyfPcy1mvkNydTmOnXJ4mRArAOx64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:c6:4f:d2:ef:ee:b2:cb:0e:1e:d0:69:cb:f1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: May 5 22:00:15 2025 GMT
Not After : May 6 22:00:15 2025 GMT
Subject: CN=2b5049fb0af26c36071f1b5b62cfe254582d7343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:09:8a:00:6a:91:95:6e:a8:3f:fb:9e:a2:
22:57:8d:cb:dc:7c:53:7a:91:28:29:3a:36:17:9f:
f2:bf:e0:51:70:a8:32:98:9c:03:1d:3c:6e:63:c8:
99:5d:66:68:56:25:99:29:b7:83:8b:7f:a4:ba:7f:
d4:7d:73:39:73:d4:33:e4:bf:53:50:58:7b:a2:d9:
75:d1:ca:32:f0:18:7c:83:83:15:a0:66:24:5a:cf:
ae:29:ef:f2:26:23:d5:f5:54:02:36:94:25:5e:b1:
d4:87:21:7c:21:51:c4:cd:68:9e:13:d1:f0:b8:c2:
45:bc:c5:2c:68:1f:12:fd:f6:11:7e:4f:ac:ca:63:
28:62:66:13:02:af:a4:a1:ea:67:de:7b:cb:30:71:
39:21:5d:d8:e6:a4:c8:d0:aa:02:cc:9a:5c:4f:89:
69:51:8d:35:72:d2:2b:1d:d9:cc:19:70:5e:6b:b4:
43:24:90:51:09:cd:67:b8:67:65:39:45:71:70:bd:
a4:17:98:ae:c0:e9:6a:b4:4e:fb:f3:6f:2b:93:c2:
80:47:6a:2d:f4:99:77:43:30:0e:60:55:5f:a9:61:
8d:42:87:d0:9f:0c:e0:cc:f8:9f:13:fc:c6:19:80:
33:37:17:19:01:c4:ff:c6:44:ac:58:f3:00:b7:3a:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:50:49:FB:0A:F2:6C:36:07:1F:1B:5B:62:CF:E2:54:58:2D:73:43
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:38:16:6d:f3:87:ac:c0:7d:19:73:82:38:97:0c:1a:ba:
ad:31:13:56:9f:02:c0:94:bf:01:b4:7d:1c:d9:7a:e9:00:ae:
45:55:4b:d0:e5:e4:78:68:ff:d3:43:61:da:79:29:84:cb:81:
d4:95:fc:d1:8b:78:44:70:8d:f6:e7:5c:c3:a6:c2:80:7e:32:
bf:d7:4c:b1:e6:4c:b7:0a:e9:cf:0e:3d:37:53:ef:13:13:98:
10:b5:dc:93:8d:04:aa:b6:f3:52:e8:63:90:98:87:da:c6:c9:
11:8d:2a:aa:d5:2e:4c:45:32:7e:a4:e3:fa:c8:95:bf:c9:9a:
b5:51:29:14:76:43:83:8f:4b:c7:5f:4d:be:3f:a2:aa:e2:07:
45:a9:80:32:08:40:f5:48:c3:57:2d:7f:c1:12:47:5e:b0:1f:
bf:fc:6c:cd:01:13:8f:89:ec:2a:9a:ac:7b:58:9d:62:d0:19:
b2:1e:3f:d8:58:12:46:85:c4:c6:40:bd:1e:64:11:bc:86:57:
7d:d0:23:b5:12:8d:63:18:88:86:5b:48:bf:e5:3a:1a:c6:67:
11:66:4f:91:00:27:38:a7:67:5e:a7:2e:d6:f7:38:1d:1c:91:
d2:5c:dc:fc:05:e0:e7:e8:bf:87:d9:c0:f6:6a:45:af:9b:a8:
b8:17:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:28:50 2025 by rpki-client