Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier: 8BTWWqC3RvSpIys2BeJI8Te384P/2C5DMGP9AjMk1ak=
Subject key identifier: 12:5B:13:B3:E7:86:5A:A8:3A:52:8D:8B:0E:51:B5:C6:BE:43:B4:EA
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer: /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial: 01967BA073C5240FFB4C53C90056CE5C9909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number: 14E6
Signing time: Mon 28 Apr 2025 09:00:35 +0000
Manifest this update: Mon 28 Apr 2025 09:00:35 +0000
Manifest next update: Tue 29 Apr 2025 09:00:35 +0000
Files and hashes: 1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: thzqTZ3bYOzO3zMVbvzdLEcWKWOQWBlGcBDZpCgB3Dc=)
2: RE9prd7FLL4SwOjjJYHPgR-KjRA.roa (hash: Sw7bEXCnPMRdQGTTvTVklNLKC4QRIicMav6wH2FfRDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:73:c5:24:0f:fb:4c:53:c9:00:56:ce:5c:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Validity
Not Before: Apr 28 09:00:35 2025 GMT
Not After : Apr 29 09:00:35 2025 GMT
Subject: CN=125b13b3e7865aa83a528d8b0e51b5c6be43b4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:92:2b:d3:99:1a:6b:a8:4d:d5:1f:d5:89:
f7:8b:82:16:91:00:a3:2d:51:8b:95:2e:eb:7f:14:
19:ab:c6:97:6d:ed:33:04:00:5d:05:da:e0:8d:64:
9f:f7:54:47:d5:d5:9c:9d:a6:71:ee:17:19:e4:6e:
62:ce:f8:b5:d4:00:46:ab:df:45:48:6f:38:a2:52:
06:24:ca:41:4b:ca:3b:62:9c:ea:fd:20:25:73:b6:
80:f9:a5:07:f9:c1:87:ca:c2:a8:10:1b:cb:e8:2e:
f4:21:3b:98:c9:7b:fb:af:72:18:a4:3e:96:07:15:
53:10:5f:f4:26:a4:98:c2:f8:62:7d:e8:a9:c2:3a:
1e:53:d6:68:b5:83:f9:9b:bc:f2:4c:4d:38:4a:cc:
d2:9a:cf:45:f8:aa:5b:e3:ea:fe:a6:04:77:38:2f:
21:41:e1:d2:2f:4a:3e:a7:48:fc:06:c3:b7:7c:ec:
58:e0:60:ec:4d:0f:d8:ff:a0:dd:f9:d9:f0:61:74:
f4:04:f4:da:88:ad:71:0f:ed:44:47:4d:17:e1:54:
7e:1e:ac:08:51:71:ce:53:6b:52:a4:9d:1b:17:40:
1e:40:50:41:c3:01:87:4f:b2:94:f5:63:ea:3e:b3:
53:6a:58:81:79:8e:a1:91:4f:0e:64:a3:d4:39:cd:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:13:B3:E7:86:5A:A8:3A:52:8D:8B:0E:51:B5:C6:BE:43:B4:EA
X509v3 Authority Key Identifier:
keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:55:d9:46:3d:86:b3:1e:42:cd:bc:13:61:f0:5c:ec:75:e0:
dc:cd:69:a7:5d:4d:fe:e3:58:45:08:dc:63:b9:0f:4f:f1:e8:
72:e7:69:59:cd:8d:92:45:85:13:d9:71:0a:49:a5:1c:8a:c2:
39:d2:66:54:db:82:58:a2:26:8c:21:3e:27:9c:b6:54:0e:80:
53:79:e6:4a:61:72:b8:46:6e:69:b0:61:14:13:ce:1a:d9:20:
2b:2d:cf:5b:e9:65:cc:d7:ca:37:13:e2:57:c9:ff:7b:4c:c2:
d0:7d:07:92:2f:3d:68:7d:99:a0:3b:36:9f:a0:2d:0c:35:ba:
9d:b3:06:ff:50:af:f7:8b:10:42:82:ef:52:08:d8:d7:8a:2a:
b3:57:e8:fa:ee:52:68:0c:ba:57:12:1f:df:bd:b4:7f:79:7c:
7c:29:a2:f6:50:d4:fb:db:1e:f1:8d:ba:20:7a:cf:94:f0:85:
90:99:8a:65:d5:14:04:ac:d7:13:7d:89:f3:25:76:74:03:09:
62:b9:64:52:c6:65:72:aa:77:32:d1:11:4a:71:ee:cc:ba:ff:
e2:6e:3a:c0:e9:85:d6:3e:91:60:49:d3:15:c9:fe:a9:7f:54:
ae:13:93:9f:c3:e9:1d:ca:58:93:2c:63:54:28:4f:df:c1:89:
78:05:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:28:38 2025 by rpki-client