
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft (raw, json)
Hash identifier: Zo+dEoU9qf6G6s9h3NKK6hVydOOTOA/ZrWV1gz+jRT4=
Subject key identifier: 26:0C:4D:8D:90:CC:6C:EE:99:A1:98:96:F2:09:AA:9C:83:52:AD:58
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 01968D395DAB3F4FCE6685D0A05635B5C9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
Manifest number: 1520
Signing time: Thu 01 May 2025 19:01:09 +0000
Manifest this update: Thu 01 May 2025 19:01:09 +0000
Manifest next update: Fri 02 May 2025 19:01:09 +0000
Files and hashes: 1: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl (hash: usP1xZ6b/HeRZh2ce8AQWJBErablj0jxnS5FlfagsMU=)
2: fa2ZLJthQS0cYxlU6aZS8bMQFMs.roa (hash: jO60eORxekUsAZmNzCjaUoJB0gXjxKDHFZ63AX1pOB4=)
3: pHrLP72axtMcDirAyoLsYQo7xD4.roa (hash: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:5d:ab:3f:4f:ce:66:85:d0:a0:56:35:b5:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: May 1 19:01:09 2025 GMT
Not After : May 2 19:01:09 2025 GMT
Subject: CN=260c4d8d90cc6cee99a19896f209aa9c8352ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:05:3f:0e:50:12:a5:90:89:9c:30:5b:e5:
74:b0:bd:05:35:37:74:7a:66:0c:c4:39:d3:d6:3c:
d8:86:92:b8:c0:d4:cf:e3:ad:f6:16:d8:51:03:04:
79:2a:53:ca:fd:af:7c:83:3b:16:03:2b:dd:d1:ca:
f7:08:b4:02:12:42:16:e5:64:78:1b:f9:a5:15:7b:
92:bb:b0:7c:e5:62:4a:fd:4f:2e:f4:42:45:0d:3f:
f1:7a:59:89:a5:20:1b:6b:8b:e6:b5:b4:e8:a4:b4:
16:54:73:13:af:1b:fe:11:eb:39:b6:63:8b:c1:c9:
d7:f1:d5:54:c7:96:49:46:51:33:e7:a1:2a:1e:65:
81:99:f1:32:b2:d7:9a:c7:09:44:6b:00:7b:54:0b:
4d:4e:79:ef:23:ed:8b:df:85:ee:67:2a:33:55:83:
e7:b5:00:48:23:60:3b:27:fe:0e:bc:5f:0f:fc:b9:
24:f6:03:47:4e:7d:60:ba:f7:bc:fe:ea:29:5b:a0:
b3:08:54:1e:ad:28:33:8c:91:64:e3:d4:28:17:46:
5f:14:14:1f:3b:9d:31:ad:70:70:67:1d:95:53:1d:
4a:80:41:81:f2:dd:2a:ba:73:72:92:b6:2e:39:00:
49:c7:2a:e4:bd:01:90:53:f4:82:35:82:53:6c:4d:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:4D:8D:90:CC:6C:EE:99:A1:98:96:F2:09:AA:9C:83:52:AD:58
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2c:d2:61:c7:3a:30:2f:6c:78:e9:40:59:df:95:b9:54:9a:
91:93:29:f6:2e:74:e4:46:31:14:36:03:4c:67:e7:59:6a:4c:
43:a9:c9:21:4b:e6:6c:fc:40:c0:5b:a4:79:b1:2d:02:9e:b0:
70:c9:3c:76:dd:3c:3b:79:6f:73:36:47:85:45:5b:87:b6:0a:
f3:0b:de:2c:60:13:1e:c1:b1:e4:1d:5f:6a:50:3c:32:f2:22:
69:70:b4:1d:1e:61:57:52:36:25:d2:f6:04:5a:fb:fe:c0:60:
43:e0:74:72:de:e6:5e:15:4d:3a:98:0f:96:ee:71:43:56:b6:
48:4e:9c:5d:55:71:07:58:0f:8b:68:ea:d3:8b:67:03:59:97:
0e:83:4c:6f:9f:91:05:f7:2f:e5:2a:1c:66:b1:dc:ef:0b:f9:
0d:d6:92:21:cd:ba:31:6a:2a:1f:17:88:61:d5:9e:d0:37:28:
43:36:63:37:db:04:3a:c4:53:9a:f6:5d:b6:ad:0f:14:e2:1c:
62:19:a2:c4:99:cb:a6:c6:2d:a5:99:d6:e6:07:dd:2f:d0:0e:
37:68:d1:ea:be:20:0a:a2:b1:37:c5:6d:7c:d1:0a:71:cb:d0:
9f:ee:59:87:a0:7e:c2:15:47:eb:f8:ba:0b:f5:ee:a5:a2:80:
f7:aa:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:48:59 2025 by rpki-client