Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: 27TnV2+27cyaXGi4mg/Cv1IYFAh5S95+Mb+F2NEgjq4=
Subject key identifier: FE:36:A3:41:C8:E1:D8:53:F5:03:81:4F:98:CD:78:98:9D:C5:EF:89
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 019684A36757952733B7159E007EF713FFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 36
Signing time: Wed 30 Apr 2025 03:00:23 +0000
Manifest this update: Wed 30 Apr 2025 03:00:23 +0000
Manifest next update: Thu 01 May 2025 03:00:23 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: KjTsqF1jadrCr3UaNR5SyMROFLyRdHQjBkAFl4Lg0CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:67:57:95:27:33:b7:15:9e:00:7e:f7:13:ff:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Apr 30 03:00:23 2025 GMT
Not After : May 1 03:00:23 2025 GMT
Subject: CN=fe36a341c8e1d853f503814f98cd78989dc5ef89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:61:45:f9:b9:d5:86:15:5e:4e:e2:fb:4c:
a1:9e:5e:b3:e6:c8:b9:24:7e:3b:aa:0a:20:f4:32:
ce:6c:66:0f:f8:1f:59:6c:43:ec:59:8b:e7:c5:70:
81:9a:fb:10:c7:2a:f1:b6:c6:2a:5a:b2:13:39:0f:
54:9d:e8:f4:fb:28:56:44:92:cc:2b:8a:a7:70:df:
ba:64:98:79:1a:2d:50:f5:71:a7:42:c6:3c:10:5c:
ac:ef:6b:3a:a0:67:92:70:a5:29:a6:49:3d:d1:fc:
68:21:ad:ea:89:4b:f9:1d:ab:38:1e:da:7b:0b:88:
b7:fd:b6:4b:b8:97:8f:85:4f:1f:a1:a3:41:db:ab:
d6:9c:50:cd:f8:9f:82:06:e2:34:95:32:c0:16:5f:
ae:dd:bb:4f:63:82:f9:20:39:48:d0:50:f9:4f:4c:
a4:3d:d2:36:28:d5:c9:e1:a8:08:73:7c:7a:1f:43:
d5:8c:b5:a4:ec:8b:b5:10:64:9e:44:2d:9e:2d:1d:
f7:14:d4:0b:aa:33:b9:c1:49:80:ba:1c:65:76:03:
f0:f8:ec:00:9a:73:01:58:1f:d8:bb:8b:65:1b:c0:
af:bd:29:41:84:8c:e7:d4:07:e5:6d:ce:76:ec:9a:
36:ed:6c:57:b1:f7:d8:4e:b6:de:04:f6:9e:77:a1:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:A3:41:C8:E1:D8:53:F5:03:81:4F:98:CD:78:98:9D:C5:EF:89
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:aa:7d:0c:3d:e7:2e:00:cf:8e:1f:23:be:94:96:8f:0a:
23:4b:7e:5c:e3:e0:bf:ba:0a:2a:16:15:21:fb:a0:c2:ec:70:
44:c7:99:94:d9:3a:a5:6b:f5:a2:ca:46:fd:67:d2:5f:97:f1:
b0:e1:29:ed:54:41:16:ad:60:db:9e:92:c1:12:0e:90:ef:8b:
69:e5:db:02:dc:89:8a:0e:09:a7:65:f0:8b:e0:db:47:1a:60:
3b:b2:79:72:ae:0f:02:a8:b4:30:94:ea:d6:39:a0:7e:94:bc:
ac:cd:ac:b0:9d:0c:28:dd:64:04:2d:00:d1:c7:34:72:0d:dc:
a7:3c:c9:47:7e:af:77:a2:0d:df:97:34:75:24:25:32:ec:69:
9d:2f:e3:06:82:3a:39:15:46:ef:44:79:97:e6:42:39:58:c5:
b0:5e:53:14:5a:d5:39:ed:64:b5:3d:1f:da:49:fe:15:72:ee:
ac:33:c9:14:06:dc:d8:99:29:c5:0e:eb:bd:a8:5a:32:a1:98:
ea:4c:db:da:53:11:9d:50:e1:b4:6d:ae:b1:c6:d7:bb:42:45:
9e:c7:7a:c7:29:6d:73:4b:4d:0e:db:60:7b:5b:90:e1:5b:24:
f4:7a:64:5e:a6:19:03:30:9a:0c:24:aa:bc:7a:8e:c8:e5:19:
47:3d:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:52:56 2025 by rpki-client