Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File: w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier: Dy957aCEmHCO5f/hl64qpdVAgKS6/G6PmOcIWoYk8sM=
Subject key identifier: 9A:1C:7F:CF:11:1D:26:47:D7:20:B3:84:09:86:92:C5:77:9C:F1:E2
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer: /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial: 0196AA9EDB76E72003EAD038241D151E8406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number: 0B04
Signing time: Wed 07 May 2025 12:00:59 +0000
Manifest this update: Wed 07 May 2025 12:00:59 +0000
Manifest next update: Thu 08 May 2025 12:00:59 +0000
Files and hashes: 1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: nKele2yFkqK6etuOFXt/+wXptqVnN8Rw3AgZzMt4kf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:db:76:e7:20:03:ea:d0:38:24:1d:15:1e:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Validity
Not Before: May 7 12:00:59 2025 GMT
Not After : May 8 12:00:59 2025 GMT
Subject: CN=9a1c7fcf111d2647d720b384098692c5779cf1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:f1:a9:7b:37:ca:5b:74:78:f3:5e:fb:cb:
39:b7:06:fe:d6:78:81:79:ba:3c:7c:df:ae:3b:67:
d9:63:c6:7d:dc:f1:f8:96:a7:a5:6b:54:d2:28:8c:
29:fa:1f:c3:25:86:b3:55:ed:cb:27:e3:ec:5a:0b:
dc:7c:b2:81:6c:6e:2f:0d:f1:68:16:61:25:b5:48:
23:7d:de:a8:08:f4:e8:60:40:a5:e7:b6:ef:0b:e4:
be:a0:69:20:69:31:da:ac:03:ca:00:2f:2a:f7:69:
33:df:0e:ee:a2:eb:0e:8b:4d:54:af:0a:74:7f:53:
f3:2f:52:fe:29:a7:b1:69:16:f2:83:b4:d5:1a:7d:
23:2d:f2:be:53:6e:48:ac:70:df:22:ae:ee:d1:e7:
9e:4e:a1:da:d1:18:5d:ae:29:53:b3:7a:15:de:4a:
35:ad:95:f0:6e:8d:4f:be:56:9c:94:11:ec:1e:d6:
0a:7d:dc:ce:ea:d3:df:30:b3:71:f3:68:24:4d:a5:
41:67:32:d3:b9:38:d2:5e:22:ff:8c:d0:8d:6b:2c:
76:90:13:0b:ad:d1:b7:b9:82:3a:3b:4b:ba:35:a3:
66:b7:dc:a1:6b:05:a9:06:79:0f:79:53:b1:e6:05:
24:1a:9e:4e:86:c2:1e:ea:83:64:37:73:27:d0:2c:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:7F:CF:11:1D:26:47:D7:20:B3:84:09:86:92:C5:77:9C:F1:E2
X509v3 Authority Key Identifier:
keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:60:d1:c4:da:8e:bf:b4:c7:ef:d6:92:62:3d:96:78:94:4f:
5f:d9:37:a6:2d:c1:6d:65:84:69:6c:c6:34:9c:8c:b7:6d:ae:
96:4c:34:33:bf:72:01:ab:d6:4a:17:b0:cd:65:dc:43:02:fc:
4f:43:48:0e:09:13:0e:2f:0a:74:e8:d5:78:0e:7b:23:80:d2:
1d:be:81:6c:6b:ba:13:c9:b0:8f:d0:b6:96:53:1a:66:ee:45:
ba:31:ee:c2:01:1e:8a:42:6a:15:6d:a5:72:49:17:51:83:1e:
28:4d:d4:07:b8:fc:56:76:ff:1f:a2:b6:5d:36:fa:dc:d3:b6:
23:ce:bd:83:a2:3d:01:1d:b3:5a:2b:51:4a:53:8a:34:1f:fb:
3a:0e:40:94:d1:e2:21:64:d7:a6:cd:90:bc:ae:bb:70:b2:4f:
3f:79:53:b1:48:38:cf:94:0c:fb:14:e5:f8:60:83:7d:81:0a:
f5:4f:e1:33:f8:8c:85:a7:c0:8d:73:21:b9:a6:77:ff:b9:ba:
82:74:aa:07:ae:7e:22:9f:d5:d2:fc:a7:45:9a:1d:0d:21:b1:
11:d7:41:84:80:c9:fa:c1:20:88:e9:73:16:01:c2:06:8b:3e:
c4:3f:fe:18:51:4a:97:bd:15:09:bf:c5:e6:2f:aa:6e:d6:6f:
5f:aa:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:32:01 2025 by rpki-client