Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
File: wlZYX2ctCeHXfOXq9OPhUfhgroY.mft (raw, json)
Hash identifier: VnSRNzX2GSx7P6lD9p1kJwFTErSEx8rhO892o4qXvIs=
Subject key identifier: 33:4C:63:FF:CF:F1:13:C5:F2:3E:32:5D:D8:10:C4:DD:1E:2A:A7:DF
Authority key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
Certificate issuer: /CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Certificate serial: 0196C2028780B3D5BC632D2799782137CD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
Manifest number: 1449
Signing time: Mon 12 May 2025 01:01:07 +0000
Manifest this update: Mon 12 May 2025 01:01:07 +0000
Manifest next update: Tue 13 May 2025 01:01:07 +0000
Files and hashes: 1: wlZYX2ctCeHXfOXq9OPhUfhgroY.crl (hash: XQiNq6CuZp/UVd56vRXJzTboR6di0XJfGUmI+tQPTvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:87:80:b3:d5:bc:63:2d:27:99:78:21:37:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Validity
Not Before: May 12 01:01:07 2025 GMT
Not After : May 13 01:01:07 2025 GMT
Subject: CN=334c63ffcff113c5f23e325dd810c4dd1e2aa7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:2b:9d:ba:71:a5:58:e3:65:a8:73:01:86:
69:b7:2a:77:7d:83:50:a7:f9:ff:d2:d1:b8:57:82:
85:23:73:67:0e:98:ca:e7:e3:8c:f7:42:ea:a4:ee:
6d:93:09:fb:1d:5a:2e:df:05:9f:21:03:2c:56:65:
57:1a:2c:c2:4a:73:5a:96:79:b5:3f:0a:52:69:62:
87:a1:13:90:ee:e7:b6:7f:75:9a:a6:b0:5b:bf:21:
ce:23:96:02:b3:4f:dd:91:8e:6b:bc:53:d7:97:7a:
3e:3e:59:e7:f5:94:f4:c4:2d:1c:3f:40:ee:bd:55:
16:23:ee:b8:7b:f3:4f:ed:d7:9b:fc:23:00:8f:f6:
c4:f7:0e:16:a5:a1:04:55:c9:2e:02:4c:52:13:9f:
6f:50:ca:09:ed:3d:67:9e:48:5b:5a:de:6c:84:ee:
ec:0a:3a:36:30:7d:1c:40:41:25:69:4a:5d:ac:e2:
49:1c:ea:55:9d:87:17:21:f3:b9:5d:ff:c1:70:9f:
82:19:97:a9:d5:09:e6:e9:22:bb:0c:ca:37:01:59:
da:aa:54:93:2b:ba:98:b7:8a:7a:7c:92:ea:94:1a:
d1:5c:00:47:56:f5:48:74:11:1a:9d:89:39:82:a5:
8d:ca:bc:16:d1:e2:3e:6c:d1:ab:89:e4:b5:b8:8c:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4C:63:FF:CF:F1:13:C5:F2:3E:32:5D:D8:10:C4:DD:1E:2A:A7:DF
X509v3 Authority Key Identifier:
keyid:C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:62:47:cf:87:55:76:50:09:27:85:9e:66:b4:ff:a6:28:b0:
03:e1:fa:2c:f1:32:49:b8:7b:7c:b8:ba:c4:40:6b:df:d1:48:
79:1b:eb:08:83:4b:3b:79:ce:75:5a:51:09:9a:16:c9:0b:f6:
b5:f4:d7:de:55:3a:5e:41:02:f7:fc:26:75:a8:6b:0e:a2:fc:
dd:8c:42:a7:21:56:aa:13:25:0c:7c:ac:98:03:00:f7:a0:5a:
95:c0:21:f5:c0:95:28:eb:28:77:64:ad:5c:c3:a3:4e:b3:2f:
89:9c:f0:09:87:c5:c8:8a:42:dd:12:b6:ad:7d:ac:dd:c1:fc:
77:3f:73:f8:7f:97:38:16:15:c3:c1:f4:ed:54:8a:4d:3e:f3:
38:21:61:74:12:eb:04:49:e1:6b:c9:bd:55:1c:d0:bb:01:01:
c4:f5:d2:e2:b3:88:98:3a:6c:59:d6:f1:99:23:cd:47:34:ea:
29:6b:0d:79:62:c7:06:c4:7f:f5:8c:e8:4b:bd:a4:b3:98:b1:
76:06:34:72:30:56:91:7d:e3:4e:49:2d:19:25:bc:0a:63:e0:
04:76:b9:39:aa:9e:7e:f2:4b:5d:94:b4:cd:8d:ad:7a:ea:8a:
c8:49:c3:b3:df:02:bd:08:86:31:51:7a:9e:cb:43:b8:09:0f:
e0:8f:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:50 2025 by rpki-client