Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: YSh77WZ1TA98EHz1bFTCPGPj1SBW4/7LYCV8SrkD/W4=
Subject key identifier: 84:2F:C8:6D:44:A7:A4:CB:19:EA:74:D4:18:41:B6:CE:9C:56:AB:CC
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 01969974482E7341461589D033E3C6051A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 1258
Signing time: Sun 04 May 2025 04:00:56 +0000
Manifest this update: Sun 04 May 2025 04:00:56 +0000
Manifest next update: Mon 05 May 2025 04:00:56 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: l71JGpJVIN0Xop65TFZRDe2ib70hALfRh6BplLRjCdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:74:48:2e:73:41:46:15:89:d0:33:e3:c6:05:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: May 4 04:00:56 2025 GMT
Not After : May 5 04:00:56 2025 GMT
Subject: CN=842fc86d44a7a4cb19ea74d41841b6ce9c56abcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:26:54:36:64:37:b2:f5:c4:9e:60:c3:86:
46:58:e9:40:2d:63:9e:bf:ad:e8:89:ba:bb:bb:8f:
97:b6:29:64:c7:4a:6a:e2:dc:41:cb:ea:ed:52:2b:
0a:21:2b:03:15:62:50:71:e5:2e:a4:19:2d:68:da:
d7:d7:a9:9f:13:5e:cb:76:d3:ca:d8:c2:5a:d9:57:
9d:b9:d7:ee:12:00:5a:22:03:ac:47:db:72:a0:a1:
c7:27:61:c9:5b:8e:0f:d3:6c:11:bd:70:ea:83:5f:
db:59:e7:5c:82:df:78:10:1a:8b:41:c5:bd:73:04:
16:01:bc:0e:f0:ff:06:55:d4:2e:2f:0c:41:6a:ff:
9f:1c:0e:64:36:22:43:d6:82:ea:5a:96:6c:9d:8c:
dc:02:43:36:36:56:08:35:1e:bf:b3:68:4b:e8:f0:
18:72:b6:48:c9:58:af:8b:01:d5:18:d5:32:e2:26:
c9:08:d5:2d:8e:4c:69:56:6b:75:b6:ef:4d:ee:0e:
20:f7:57:28:a1:98:07:ad:2d:a7:14:91:4f:4e:4e:
0f:4c:5b:5f:95:06:e7:6e:55:e5:b5:06:e1:5b:41:
d0:b4:c3:46:dc:c5:d0:91:78:18:b2:f9:e5:da:4f:
59:cb:f0:ef:d1:47:c2:b8:1d:ec:4f:28:c2:0c:33:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2F:C8:6D:44:A7:A4:CB:19:EA:74:D4:18:41:B6:CE:9C:56:AB:CC
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f7:fc:0d:1e:63:f7:5b:df:de:3f:f2:5d:e4:f4:35:cc:b1:
3e:3c:21:61:8d:4b:3e:e4:2a:5b:4a:c4:32:b1:3a:12:84:5a:
cf:bb:73:44:f1:81:7a:22:1e:ad:34:ac:7e:a5:ae:c0:8b:85:
23:16:41:44:3c:af:9a:5a:87:08:90:0f:57:f3:0d:d6:a6:bb:
98:bc:83:8d:ca:78:c3:c3:90:21:32:32:a0:47:fe:d7:f7:ce:
ac:ca:e8:b9:98:32:e9:01:c0:83:2a:3f:0f:2e:b6:72:e8:1b:
f1:55:d5:63:ee:54:09:45:28:b8:9c:b0:d9:90:b6:fe:1a:7e:
9b:c3:f5:3a:94:28:27:8b:ad:15:b4:37:23:b3:5f:0c:7b:6d:
ff:26:03:c0:39:aa:d9:a7:df:2f:cf:48:a5:23:00:1f:87:84:
f2:64:0c:38:d9:81:6b:4d:fd:4e:7a:e0:c5:29:a5:00:0f:45:
58:00:09:0a:86:c7:18:66:d9:8b:53:d2:e6:f1:f4:62:65:69:
54:79:b0:83:55:9b:04:57:49:f5:cc:7c:d7:9f:01:a4:ef:f7:
bd:8e:56:46:07:a0:6f:48:74:7b:95:52:ac:06:be:7b:c4:8a:
90:b9:ef:da:fc:ce:7f:a6:74:a3:83:0c:48:f2:66:a3:7f:12:
29:75:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:15:18 2025 by rpki-client