Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File: W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier: d1qkhCCwUNCG/ZGF1XjyjB7oXu2piQoo/3Bj6lvhqDY=
Subject key identifier: 1D:89:E6:49:DE:E2:69:A1:42:9D:11:09:14:A5:63:31:EE:B0:77:06
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer: /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial: 01967A5690438A32229BC621B7F9AFD6425D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number: 1221
Signing time: Mon 28 Apr 2025 03:00:15 +0000
Manifest this update: Mon 28 Apr 2025 03:00:15 +0000
Manifest next update: Tue 29 Apr 2025 03:00:15 +0000
Files and hashes: 1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: kbAuWG5cvVdqEjGBUXBdlSgjf1ndGrbpM/lXKNJF6Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:90:43:8a:32:22:9b:c6:21:b7:f9:af:d6:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Validity
Not Before: Apr 28 03:00:15 2025 GMT
Not After : Apr 29 03:00:15 2025 GMT
Subject: CN=1d89e649dee269a1429d110914a56331eeb07706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:28:c2:88:a3:db:26:61:c3:81:20:29:52:
67:fa:7b:eb:1f:f1:35:08:8b:d8:a3:6f:4a:31:af:
b6:c9:05:94:be:b9:80:9f:f2:d5:3d:f5:e1:a5:d2:
03:fd:fc:9b:0e:d2:76:f0:41:19:c7:4f:9a:d5:62:
5a:d6:d3:04:c8:53:2d:e7:53:6f:68:b9:f4:0b:7f:
69:51:8f:cd:34:cc:7c:9e:8f:ec:85:f8:21:d2:a3:
27:71:b7:c4:b5:61:22:ec:e2:19:cf:51:b7:75:fa:
a7:ad:23:1d:b1:e0:7c:06:44:e8:81:64:d7:e6:d3:
b4:62:87:43:fb:5c:d5:f6:5a:04:c6:34:d5:46:a4:
df:c6:4f:07:f1:14:23:b0:30:b7:dc:17:0c:9c:d0:
a5:4b:74:08:91:c5:d2:59:cc:c1:45:22:77:d2:1b:
f4:0a:85:50:07:1e:40:02:c8:a8:c5:30:9f:12:b1:
01:32:2d:f3:bf:3c:bc:a9:ff:cc:4e:f7:eb:e0:ac:
a8:19:3e:8c:6f:d9:bc:33:a4:3f:8a:da:d4:5e:6a:
5c:28:8d:aa:40:9e:27:79:c4:50:3b:81:7c:2e:de:
d7:ef:d0:2c:65:12:68:17:2a:e4:10:60:53:c6:0e:
51:6c:4f:d1:49:2e:3f:53:12:33:20:c7:ca:dc:29:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:E6:49:DE:E2:69:A1:42:9D:11:09:14:A5:63:31:EE:B0:77:06
X509v3 Authority Key Identifier:
keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:37:47:2f:59:b8:49:b7:eb:ed:18:c4:9c:c1:f6:8c:01:
6f:f2:ee:be:05:9e:15:cc:fb:62:84:29:b9:a3:7e:31:00:22:
9d:d6:6e:e8:95:05:c7:4d:2d:7e:aa:eb:3d:6f:0d:db:4f:0f:
27:50:25:ed:b1:f0:d1:55:35:bf:f0:f7:8d:bd:b1:55:9f:25:
7a:da:d9:c8:5a:8b:20:53:7b:16:0c:38:5c:e4:7a:14:4d:e6:
13:86:4a:88:66:4c:b1:c8:56:6e:31:be:d1:da:6b:46:c7:93:
24:d0:15:22:66:80:0a:28:c4:a6:6e:0c:0b:b7:c7:7c:7b:12:
73:ed:50:a9:ff:47:e0:9c:20:51:28:01:d6:3a:73:e4:82:62:
1f:e5:b0:ec:a5:74:b7:83:3b:e5:31:63:79:a2:f4:78:d9:2c:
3a:61:3f:08:84:75:e2:7a:d9:38:31:12:4a:3a:9e:21:54:06:
fa:e4:07:0c:ce:76:40:ef:cd:5f:a3:e0:8c:83:24:db:56:28:
45:35:dd:7e:3e:22:eb:02:33:ae:47:8e:e2:c4:c5:de:ac:29:
95:b7:e4:68:e5:fe:8e:2b:fb:7d:a8:ef:4e:0f:e9:b3:59:9c:
f0:50:ab:03:44:4f:0b:e1:e8:f5:59:ec:ec:9e:28:14:4a:8f:
86:4f:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:01:45 2025 by rpki-client