
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: SGHI8wtdUPRX5gG5qaCt/DCGAcSAnuggf3llvdi05KY=
Subject key identifier: 1C:F3:53:C8:3E:23:39:5A:43:85:70:2F:CC:AD:ED:01:46:23:F6:82
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 0196D1AC6DD8CDE9F7AEE0044D691C16CC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: FB
Signing time: Thu 15 May 2025 02:01:00 +0000
Manifest this update: Thu 15 May 2025 02:01:00 +0000
Manifest next update: Fri 16 May 2025 02:01:00 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: m4gqOi4oSjM1Egr/+ni8/AGGbFmeSaAdtPm8tGRdMTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:6d:d8:cd:e9:f7:ae:e0:04:4d:69:1c:16:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: May 15 02:01:00 2025 GMT
Not After : May 16 02:01:00 2025 GMT
Subject: CN=1cf353c83e23395a4385702fccaded014623f682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:e7:34:7b:47:5e:ea:d6:65:35:8d:a3:30:
9f:7b:88:41:8f:8b:cd:ef:de:27:90:fc:ad:83:6b:
e5:dd:95:41:7c:c3:d1:84:26:6d:32:a8:bb:29:b7:
5c:93:08:bd:8a:05:ff:9a:40:6c:10:76:28:01:ea:
a6:28:b6:63:74:e7:fd:04:c0:36:c6:70:a3:cc:cf:
86:b5:90:21:3b:5a:24:0d:7b:95:8b:b8:b5:9f:63:
08:4e:22:b4:52:1b:bc:a4:23:2c:10:e3:5a:d3:c4:
ae:1f:8e:17:fb:df:9b:80:b4:80:91:f4:cc:2e:43:
e5:51:73:f6:a3:2f:c6:84:f3:3d:a1:6c:01:fd:d7:
58:46:4c:2b:4a:9d:2e:a6:b0:cf:02:9c:d3:16:5f:
7e:0c:cd:0e:92:14:30:43:fb:1d:29:0e:9c:56:42:
a8:da:5e:de:2d:16:af:bd:fa:6b:c5:f9:67:1d:b3:
ef:af:3d:9e:55:cf:bf:68:67:ed:39:4e:27:f9:39:
e8:e7:a3:06:05:a6:82:4e:ab:5d:ef:32:ae:a9:3d:
fa:40:34:7b:71:59:a6:4c:da:4a:be:a9:f1:a0:63:
8e:3a:36:7a:4f:30:9c:3b:2b:a3:21:9f:f2:cc:94:
4d:51:e0:86:51:dc:59:ca:78:a9:a8:bb:ac:eb:08:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F3:53:C8:3E:23:39:5A:43:85:70:2F:CC:AD:ED:01:46:23:F6:82
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:56:91:6c:16:98:79:dd:e1:4e:96:00:22:c6:d1:d7:d8:0b:
a8:65:58:c7:07:e2:d9:d1:5d:72:a9:f8:c2:26:1d:ea:dd:f5:
76:48:6e:71:bd:5c:8b:af:b6:9b:65:9c:48:36:ee:ff:6a:a2:
10:4b:e9:75:7b:30:ee:c1:1c:8f:eb:7d:88:9d:b6:9e:e0:57:
30:f6:a4:4b:f2:7d:15:87:9b:52:07:5c:31:3f:fb:af:ae:65:
30:b3:4f:12:a8:15:d8:c8:77:a1:54:93:e0:a2:a1:51:f7:b3:
f3:98:02:e9:46:97:6a:9d:34:e8:14:c2:ab:d7:ac:76:6f:8b:
10:7f:b1:3c:97:ec:00:e3:95:17:a6:82:1d:8a:ed:a6:ad:f6:
40:56:ab:45:90:16:43:0c:83:ca:95:a7:9a:24:b1:ed:96:10:
4c:89:4c:bf:ed:2e:6e:53:12:19:c4:b6:9c:90:fd:19:44:c4:
67:9d:9d:30:3d:c4:e3:28:7f:6a:30:d4:8f:84:c1:54:66:6e:
3f:2b:50:89:c0:d7:56:88:f4:41:34:b1:48:fd:01:45:9e:97:
5d:58:ae:5a:61:3e:4c:b9:e9:db:a7:42:dd:3d:8a:b9:6d:7a:
8a:2d:5b:df:47:38:a6:7c:be:3b:00:51:d5:28:57:99:6d:12:
49:7c:4c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:27:44 2025 by rpki-client