Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
File: Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json)
Hash identifier: uZ+mXBJYzIKHM7wxyyxuYYzmia6D8otGCduvYAVrAVM=
Subject key identifier: 18:BC:B0:7A:A0:25:A4:3B:04:7C:B7:F0:8B:83:35:FF:C4:5B:83:BC
Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
Certificate issuer: /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Certificate serial: 0196857F287ECE150783875111E26EC2FD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
Manifest number: 0503
Signing time: Wed 30 Apr 2025 07:00:25 +0000
Manifest this update: Wed 30 Apr 2025 07:00:25 +0000
Manifest next update: Thu 01 May 2025 07:00:25 +0000
Files and hashes: 1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: +XX3tQfCZR55dpyH0zTIepwP0MpUVA1yM5lBgZWcvJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:28:7e:ce:15:07:83:87:51:11:e2:6e:c2:fd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Validity
Not Before: Apr 30 07:00:25 2025 GMT
Not After : May 1 07:00:25 2025 GMT
Subject: CN=18bcb07aa025a43b047cb7f08b8335ffc45b83bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:1a:6d:6c:84:f7:f1:b9:30:68:f4:54:56:
97:f9:06:9b:38:66:c3:fc:81:af:4f:c2:32:a2:97:
d5:5c:23:d8:e6:97:07:79:58:ad:c6:4d:93:1f:44:
cf:c1:fc:ea:dc:76:a9:dc:6d:fd:47:9a:ad:f6:a6:
81:fc:06:69:30:39:7e:89:44:86:88:5c:bc:a6:b6:
c1:dd:85:37:f0:66:b9:db:ac:2f:25:22:78:0e:22:
62:ee:e7:7e:5f:fe:a0:7e:25:f9:75:56:26:14:f5:
22:e9:a0:45:8c:2e:31:eb:35:ae:fb:62:41:49:01:
cc:7f:d6:c2:23:02:eb:d7:1f:3f:d8:48:1e:53:51:
70:07:f7:a2:34:2d:03:4f:41:76:66:7f:64:db:b6:
bd:d8:90:b8:81:61:9b:94:13:dc:11:05:29:ce:78:
04:b9:6f:f7:69:d8:b3:a1:6f:1d:9c:0c:ac:b3:70:
95:30:b8:b9:bf:ad:eb:60:07:51:da:72:16:0e:3e:
b3:3f:de:3e:6c:6e:2c:d1:c1:2d:09:cf:e6:f6:0e:
91:7b:4c:b2:04:29:07:3e:f9:03:94:85:0e:da:3e:
f7:b2:c2:2e:7a:65:7a:72:7b:28:17:e9:2e:8d:a1:
10:c6:63:4e:9e:0d:ff:50:5a:2e:6e:df:7b:37:a8:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:B0:7A:A0:25:A4:3B:04:7C:B7:F0:8B:83:35:FF:C4:5B:83:BC
X509v3 Authority Key Identifier:
keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:95:75:d6:94:93:21:c7:a5:b4:c1:e8:06:f3:c4:13:c7:0a:
75:23:07:a2:f7:dc:01:1a:18:db:53:87:25:db:8e:f4:c4:42:
db:44:2e:7e:fe:99:12:76:40:5f:68:e1:d6:b6:8e:3e:c4:bf:
19:75:9d:95:9b:5d:8b:64:f6:f9:f9:a1:57:da:5b:77:7e:8f:
e1:2a:a8:11:50:1b:91:f3:fc:33:c4:ce:7c:d4:9c:3d:10:8b:
f0:95:8c:79:0e:e0:3f:60:51:f2:e6:e9:f9:fe:3d:55:a2:a2:
70:5c:f5:fd:b1:d5:ab:13:06:7e:55:48:eb:22:e0:80:6a:c8:
a3:1e:7b:ba:25:7f:8b:95:e5:da:02:d0:ad:5f:13:3e:7e:cc:
7c:5a:09:ee:f1:e4:05:8a:56:89:19:68:61:ed:04:69:44:6e:
c0:2b:40:22:9a:59:24:75:88:c6:92:e3:05:6d:03:37:4e:8c:
72:b2:d4:e0:9e:b5:8a:6c:ca:f5:4f:03:59:51:ca:9c:62:6d:
d0:ca:42:df:f4:49:9c:9a:81:54:ab:fb:af:f1:f2:8e:a8:37:
39:9d:8d:de:bf:76:19:3e:ae:58:c4:6b:75:68:1d:32:55:fe:
be:19:14:a0:3e:82:24:69:d2:1d:41:b6:ec:f9:08:12:b5:fd:
67:1b:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:22:11 2025 by rpki-client