Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: r10xpbiHMJ68Xqb8aM8KCwXdwcOvkoLMiUZsEFZ3x6Y=
Subject key identifier: 40:88:83:51:39:5F:7A:18:6E:1B:BB:1E:B0:AE:AF:70:16:31:72:D8
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 0196900330FD7DF3CC3C645E969C9339218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 10C1
Signing time: Fri 02 May 2025 08:00:50 +0000
Manifest this update: Fri 02 May 2025 08:00:50 +0000
Manifest next update: Sat 03 May 2025 08:00:50 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: qP6SZ1sEVK0Am8IbJTOLgxpPMNkkmZuGmJ0pNFuB2pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:30:fd:7d:f3:cc:3c:64:5e:96:9c:93:39:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: May 2 08:00:50 2025 GMT
Not After : May 3 08:00:50 2025 GMT
Subject: CN=40888351395f7a186e1bbb1eb0aeaf70163172d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:85:70:d0:53:c8:48:5f:e3:ec:92:fc:83:
b9:21:7e:84:39:6d:43:65:6d:72:86:93:9b:d6:e5:
08:ab:99:c0:a4:0a:23:56:6f:65:a9:9d:ec:85:eb:
ba:7c:6c:6c:a4:61:b1:57:25:fc:97:d6:48:c5:d9:
cc:b7:99:ce:7a:15:e4:b7:1b:01:56:3d:78:69:02:
4a:16:39:57:43:c6:57:f6:99:9b:2e:62:1e:64:ce:
1b:9d:17:00:77:96:fc:7e:7e:9a:a8:a1:18:e5:07:
b9:df:fc:be:a6:50:95:81:58:cb:a0:19:e3:35:f1:
2e:b0:6a:a9:96:31:0d:54:d6:ca:38:81:ea:45:88:
69:29:e5:f1:5c:68:70:f1:f2:62:13:e2:6a:c4:9e:
3a:32:ea:b7:92:17:95:74:6c:6b:17:89:55:d6:35:
d3:3a:4c:c5:24:42:1d:6e:30:cb:98:01:ea:54:18:
23:25:f3:7f:75:52:bd:f4:59:62:12:26:2e:88:9d:
ee:31:ba:d5:5f:eb:5f:ea:ba:e9:d9:ab:fd:5b:9f:
dd:37:98:78:2e:64:72:19:f0:32:77:c5:21:33:52:
e4:b5:e8:aa:fc:50:ef:a6:6c:77:46:58:62:80:09:
8c:92:c4:9a:e8:3c:e3:a4:97:89:dc:db:e3:69:1d:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:88:83:51:39:5F:7A:18:6E:1B:BB:1E:B0:AE:AF:70:16:31:72:D8
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:79:29:ad:56:d0:8d:2a:16:10:76:f5:22:64:86:f0:3a:
79:79:dc:d7:d2:2f:1c:01:36:cd:09:73:66:dd:d7:21:be:49:
2f:b3:11:9e:74:51:a2:43:fc:e3:ce:d8:78:98:5c:f5:7c:a4:
c8:de:c5:80:47:6a:93:b5:aa:da:79:f7:7c:d2:4d:9f:6b:4d:
16:e3:31:90:ed:e9:26:b9:09:b1:e8:4d:e4:63:29:b2:22:38:
6b:ea:98:af:43:c5:0a:d2:6d:3d:48:c9:24:b7:fe:e0:62:f0:
1c:f4:20:77:36:62:12:6e:df:f7:51:d0:9b:c2:ca:e4:54:bf:
fa:9e:2c:29:df:c7:de:89:94:3b:9b:89:23:30:7e:86:6f:34:
7a:e9:35:57:9d:96:36:8e:12:e9:aa:83:57:a2:6a:e8:43:36:
2c:df:21:83:40:4f:69:04:bc:67:0d:5c:df:61:b3:c0:b1:43:
8d:80:3c:ba:b2:6b:34:3f:57:fc:01:1f:77:3a:62:66:11:4f:
38:ed:13:04:d3:b0:b7:4c:39:ff:89:5d:79:c7:9e:8a:5e:5f:
ab:2f:2b:85:b1:99:57:5c:15:a6:4d:12:11:ab:a3:c6:ce:a1:
da:27:5e:31:0b:3f:b2:73:1b:d4:74:70:e3:60:d1:9d:68:f4:
41:ba:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:43:09 2025 by rpki-client