Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
File: W3jiiHXnMAJWzM62gfCmAIc9eVI.mft (raw, json)
Hash identifier: MPjzJwUyJ9GpILG7hjPsuO67gp6AjwHcSAIi4xwgAjE=
Subject key identifier: 7C:12:EA:E1:4A:35:00:B1:1D:1E:60:99:18:BD:C0:37:C1:76:5E:F7
Authority key identifier: 5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52
Certificate issuer: /CN=5b78e28875e7300256ccceb681f0a600873d7952
Certificate serial: 019681D92624570609FA1ACD704DAABCC189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
Manifest number: 03A4
Signing time: Tue 29 Apr 2025 14:00:13 +0000
Manifest this update: Tue 29 Apr 2025 14:00:13 +0000
Manifest next update: Wed 30 Apr 2025 14:00:13 +0000
Files and hashes: 1: W3jiiHXnMAJWzM62gfCmAIc9eVI.crl (hash: 7fQbgZ28nWbYrzhIBT41eDCa7yQbsv5Efe1I3wL38DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:26:24:57:06:09:fa:1a:cd:70:4d:aa:bc:c1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b78e28875e7300256ccceb681f0a600873d7952
Validity
Not Before: Apr 29 14:00:13 2025 GMT
Not After : Apr 30 14:00:13 2025 GMT
Subject: CN=7c12eae14a3500b11d1e609918bdc037c1765ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:ca:3c:71:02:44:59:d9:68:ed:d3:d9:e7:
8e:21:a8:2c:9e:5a:3c:21:44:4e:b6:bf:79:9c:e7:
94:48:59:9e:dd:38:72:0a:98:ff:8e:fc:89:7d:51:
d7:bb:e5:35:e8:84:c7:34:77:25:b2:41:e9:fc:e2:
e4:81:b0:87:40:10:b4:10:ff:d7:84:55:57:05:62:
1f:37:74:d2:ca:d5:35:92:89:f6:df:c0:88:61:03:
91:82:24:68:d2:cd:fa:77:f4:22:7b:8e:fd:35:54:
f1:26:2b:e6:4e:a6:c6:75:bf:fa:aa:85:72:98:32:
06:c5:8e:90:11:52:a2:04:6c:4e:08:18:cf:7a:dd:
6c:77:57:0b:f3:09:f7:f8:25:91:5c:b3:99:dc:b7:
31:24:0e:54:cd:a2:fc:38:c0:b3:9b:35:a0:f6:a3:
d1:d6:de:5b:b9:6e:9d:eb:22:42:a1:46:63:20:68:
c7:e5:4e:aa:fd:32:26:11:9f:2f:a6:2f:2e:cc:74:
61:e2:e6:9c:2a:d4:f8:1c:60:55:5c:fc:a8:4a:39:
85:21:bb:be:09:ae:30:09:54:32:ab:c8:cd:c8:6b:
30:da:3f:0b:38:bb:95:7f:80:8f:70:e5:e7:25:97:
a9:60:6f:45:8e:33:59:14:b1:01:6a:02:1c:25:3d:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:EA:E1:4A:35:00:B1:1D:1E:60:99:18:BD:C0:37:C1:76:5E:F7
X509v3 Authority Key Identifier:
keyid:5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1c:59:40:3b:3a:96:53:84:3d:30:41:9e:fc:26:c9:55:d5:
e0:4f:f7:1d:df:c5:9c:5f:6c:62:55:a4:9f:d3:93:69:b9:e1:
27:c4:e2:da:f1:a0:52:94:01:f2:dd:2b:30:6b:1b:9b:fb:1f:
24:f3:3d:de:5e:1e:49:21:80:d2:cb:c7:76:f7:b8:c9:49:d7:
35:c9:5e:b4:ca:2e:28:e3:75:27:12:59:4d:b8:60:4d:ad:0a:
24:df:56:0d:9c:41:ab:5a:c2:d4:5f:72:06:53:e6:5b:d9:8b:
10:40:cd:78:1b:3c:bf:6b:06:b0:e4:11:cb:79:eb:20:2b:34:
13:8b:d9:a0:94:a8:40:86:b5:8f:fc:66:02:c7:48:fd:d1:3e:
1f:25:61:9d:ac:40:39:50:db:d0:23:3c:19:e0:89:e8:50:a5:
d6:76:96:a7:e6:00:14:89:29:bc:3a:71:fb:95:47:51:fb:c4:
06:93:e0:5e:25:09:88:12:9a:0b:f4:54:c9:c1:02:d7:ac:de:
5e:d1:45:7d:7d:c6:d2:f5:43:c2:ae:2b:12:26:3e:be:f4:ef:
99:39:db:3c:c8:23:d3:f1:fd:79:ed:bd:20:52:69:55:13:d0:
32:a3:05:1d:07:43:fe:42:c3:21:63:34:b2:7f:7c:87:c0:47:
e2:e7:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:46 2025 by rpki-client