Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier: DC/cUe4qkvx6b8Qjviqph/86WKnekywy0HJf/vOoFt0=
Subject key identifier: DE:56:38:85:47:6E:9A:F9:05:A2:BD:88:E7:3B:B3:29:B1:1B:65:8B
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial: 019679E94D36B962C466BF4FF7D6C3690DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number: 0787
Signing time: Mon 28 Apr 2025 01:00:54 +0000
Manifest this update: Mon 28 Apr 2025 01:00:54 +0000
Manifest next update: Tue 29 Apr 2025 01:00:54 +0000
Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: RV3Pt59DHmyCqpqLpvlVgqVh5uroUvf0XPmdTbrsNjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:4d:36:b9:62:c4:66:bf:4f:f7:d6:c3:69:0d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
Validity
Not Before: Apr 28 01:00:54 2025 GMT
Not After : Apr 29 01:00:54 2025 GMT
Subject: CN=de563885476e9af905a2bd88e73bb329b11b658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:95:ce:d8:f0:d0:e3:5e:9d:0d:c1:c3:a5:
97:b2:59:8d:8a:29:ec:32:3d:f8:e3:ae:76:80:98:
8d:dc:22:65:43:74:45:7e:53:06:07:f7:30:86:14:
14:be:6a:38:58:4a:f9:5e:3c:58:1b:2f:b8:05:38:
60:2b:5d:cd:ee:ed:0a:e1:ee:af:d8:9a:27:ed:62:
27:50:d5:69:d2:67:cd:14:15:8a:3b:37:a9:bb:0e:
e4:aa:c2:aa:e0:13:fd:04:37:6d:be:9b:9e:bd:f0:
6f:d3:ca:44:b2:f4:cc:ff:46:f2:5e:b8:e5:ff:f9:
30:b4:bf:90:68:5c:b9:76:1c:b2:61:19:97:c3:6b:
ff:52:41:bc:50:a0:5d:7a:a0:58:b0:b2:1f:59:4f:
12:c1:54:c4:f1:f2:e8:5f:24:28:d2:2c:dc:e9:5d:
a3:df:cf:6b:14:0e:01:77:0b:eb:85:96:8f:f2:4f:
3a:e0:7d:0c:26:5d:f5:1d:80:36:f0:70:9a:5d:65:
23:b0:a8:7f:61:fe:86:75:4a:29:1f:af:1e:ed:26:
e1:c9:30:8d:3d:9f:2a:3a:00:e0:fb:d6:32:49:bc:
17:83:86:ad:24:5e:ff:f5:23:1e:97:32:67:a1:da:
21:be:da:15:ed:86:48:ac:72:65:18:0a:63:4f:51:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:38:85:47:6E:9A:F9:05:A2:BD:88:E7:3B:B3:29:B1:1B:65:8B
X509v3 Authority Key Identifier:
keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6f:cf:df:f4:b6:3d:5f:8a:f6:40:89:16:fb:4c:40:42:d2:
c9:e0:4f:ed:39:a2:59:6a:6c:d1:4e:42:b1:d0:ef:08:24:65:
70:b4:13:97:7a:26:12:00:0d:03:23:9a:60:5a:c2:b1:cc:5a:
b2:1a:f8:d2:f6:f5:00:dd:32:a4:59:87:ee:e5:4f:0c:25:8a:
53:a9:ee:6d:7b:25:5c:c0:73:a4:ba:09:4f:01:a8:cb:dd:0f:
88:a5:00:f4:be:cc:22:53:db:c0:82:f8:0c:f2:db:0c:8a:e6:
31:d3:27:55:c2:ab:a2:b7:fa:88:1b:a3:01:c7:8b:13:36:aa:
ed:52:ce:e9:d1:07:4f:89:54:ca:5f:65:19:16:d7:2f:94:c2:
a7:65:3c:b2:79:60:14:95:13:26:01:39:0a:da:3f:a4:d4:7d:
2a:cd:66:3e:b8:2f:5e:2f:a0:b3:5c:42:df:a5:08:0d:62:4b:
51:47:1b:8a:ce:33:76:cf:6a:5c:71:96:26:e8:0c:c3:77:20:
f1:35:f7:84:95:32:d6:95:b3:8c:f4:96:b8:13:46:ad:7d:a3:
86:20:90:e4:78:74:eb:b0:48:39:bf:f1:44:0f:6d:ca:b1:44:
97:27:81:41:97:47:18:a4:0a:b3:97:62:1b:3e:45:49:de:f5:
2e:d5:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:48:24 2025 by rpki-client