Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: CUoGnMH4WYylm2HWzTGS6iS4zZ7CnHCYQeRrdPoesj0=
Subject key identifier: 87:A9:07:83:E9:03:E9:F3:F1:E2:14:93:45:CF:39:35:8A:AE:DD:10
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 01967379575C4D0AA078EF6EF4543B2E118A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 1509
Signing time: Sat 26 Apr 2025 19:00:54 +0000
Manifest this update: Sat 26 Apr 2025 19:00:54 +0000
Manifest next update: Sun 27 Apr 2025 19:00:54 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: c+GuOTPmazMUrv14pJpukq7EX/QQXVZZAici/1Vrj1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:57:5c:4d:0a:a0:78:ef:6e:f4:54:3b:2e:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Apr 26 19:00:54 2025 GMT
Not After : Apr 27 19:00:54 2025 GMT
Subject: CN=87a90783e903e9f3f1e2149345cf39358aaedd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:79:54:bd:cd:3b:bb:48:1b:b0:a6:23:81:
ea:87:a2:3c:ec:72:34:e5:b2:8a:09:a4:c7:cc:f6:
b1:4d:e2:14:56:f5:d4:fa:9a:38:7f:1e:a5:f3:62:
51:54:c2:de:db:30:12:d5:16:9b:e7:10:47:0b:ba:
1f:fc:c0:ab:2b:25:a5:1a:20:79:23:d3:82:82:7b:
34:cf:2b:d1:fc:d1:88:70:8a:86:91:91:7a:e8:42:
27:e2:0c:b0:72:f3:3b:50:23:93:e0:ff:04:bd:fa:
b5:f5:3c:a9:b1:65:78:6a:53:8f:2c:bc:14:b0:d5:
01:1f:4d:d7:99:f1:3d:3b:fc:8b:82:66:a4:05:9a:
0b:6c:d2:fa:6f:b8:d9:4f:dc:69:8b:0f:35:01:37:
a1:8c:e4:73:36:19:84:fb:10:93:4f:1f:7a:a5:d9:
ea:1f:54:1b:e2:4c:35:db:9d:65:5f:37:b5:36:e3:
8f:4b:fb:34:59:0e:bf:41:99:02:fb:df:75:6e:05:
d6:55:b5:87:25:f0:3b:40:a8:c2:ac:52:17:41:2d:
3f:87:08:61:c1:6f:c2:6a:83:2c:e1:9d:9d:2e:00:
63:8f:0d:9e:e2:4e:60:7a:93:14:4c:ae:6e:01:02:
95:de:76:84:c6:8e:4f:ca:c4:20:10:15:7c:4d:15:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:07:83:E9:03:E9:F3:F1:E2:14:93:45:CF:39:35:8A:AE:DD:10
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c2:30:be:7e:68:91:69:4f:71:18:69:34:a0:c3:2f:b0:c9:
83:39:54:43:83:19:7d:29:62:78:6a:13:e7:5d:ee:f7:da:08:
94:f7:7e:4e:84:10:15:15:6a:90:76:a6:ea:54:b3:1c:e0:6c:
84:72:ee:ee:b1:7e:99:ec:fb:72:64:73:59:37:16:8e:30:0e:
27:d8:bd:8e:2e:41:07:97:80:fc:9a:cb:8a:c3:4a:c3:cb:63:
b8:99:e8:a6:3d:c0:f7:7d:72:85:0e:25:9d:7b:7e:e8:a5:56:
0c:4e:6b:dc:95:62:33:17:c2:7f:28:d7:22:4e:fa:9f:cb:aa:
d8:38:f9:2e:e5:c8:30:a8:1b:39:fd:0d:0f:92:0e:25:14:fd:
b6:d1:8d:41:3d:49:fb:9f:36:eb:b5:52:c6:95:cd:2c:11:0b:
fe:8a:75:6d:c4:69:5f:39:cd:7d:21:69:2c:5a:65:da:d4:a7:
d7:d7:e8:1a:ea:36:66:a0:3a:f3:35:85:f8:51:92:ae:a3:c1:
54:f2:c8:02:b9:99:da:34:93:57:e2:85:c6:52:f2:ba:a9:5c:
8d:78:4f:39:0f:6a:cd:d1:02:ec:65:75:a2:cd:a5:da:f0:eb:
bb:9b:25:a4:16:78:c3:8b:e2:56:96:10:a3:21:e4:38:d9:6e:
61:7b:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:12 2025 by rpki-client