Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
File: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft (raw, json)
Hash identifier: WW13lKzBvDKld1Is34Xjo6MZ2N3r5dh19Hq4bTx0dPg=
Subject key identifier: 36:1D:59:45:E7:0F:44:57:F5:11:52:22:10:51:A0:FA:70:D0:B8:AC
Authority key identifier: C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6
Certificate issuer: /CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
Certificate serial: 01968623E2467721D470EF57CEB6AB84FF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
Manifest number: 0FCD
Signing time: Wed 30 Apr 2025 10:00:20 +0000
Manifest this update: Wed 30 Apr 2025 10:00:20 +0000
Manifest next update: Thu 01 May 2025 10:00:20 +0000
Files and hashes: 1: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl (hash: FIkld1n/UjUqQlX7HH22620i39h8QFhVhmW+GSZWeJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:e2:46:77:21:d4:70:ef:57:ce:b6:ab:84:ff:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
Validity
Not Before: Apr 30 10:00:20 2025 GMT
Not After : May 1 10:00:20 2025 GMT
Subject: CN=361d5945e70f4457f51152221051a0fa70d0b8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:db:e9:fc:7a:b8:d1:09:16:7b:b1:b9:74:
45:cc:4c:03:19:76:fb:8a:dd:d6:3e:00:43:e2:a0:
34:9e:f2:10:d1:e7:ed:d3:4a:a1:5d:13:9d:7e:ab:
8b:eb:15:1c:29:6d:69:70:6a:e1:62:e4:db:c2:c8:
61:60:6f:f4:38:0a:38:fa:b8:7e:7a:b2:91:28:a9:
0e:bb:81:a0:7a:bf:33:ce:5f:4e:49:40:42:b3:cc:
88:e8:9e:31:a2:24:c7:66:9b:63:d6:32:9a:10:14:
15:53:7c:b5:07:3d:54:a1:66:0d:4b:bc:39:6e:d7:
ed:f3:db:6b:0a:b4:56:29:11:9a:b0:17:3d:af:dd:
65:00:bb:83:59:22:f1:4e:49:b6:a2:40:3f:41:f8:
e0:d3:d0:2b:77:9b:ae:d5:cd:63:b5:58:ce:64:c5:
48:66:3a:56:df:35:5c:20:29:56:77:07:33:8b:15:
77:79:8b:a0:e4:69:7b:ad:8f:6e:3e:14:33:28:aa:
ae:da:26:79:2c:62:59:9d:41:19:31:20:c1:8c:a2:
31:e4:e0:f4:8c:16:89:1a:ca:c9:27:ee:66:56:4a:
63:9a:dc:a0:c2:17:99:ca:ca:15:d2:be:a8:fc:a4:
e0:65:80:28:41:0a:22:c3:ff:61:3a:73:ef:27:dc:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:59:45:E7:0F:44:57:F5:11:52:22:10:51:A0:FA:70:D0:B8:AC
X509v3 Authority Key Identifier:
keyid:C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:49:78:ba:38:f4:2f:66:71:51:ed:ca:97:d3:c5:29:ad:6a:
f7:23:32:20:71:4a:3d:42:cb:7a:cf:4b:1d:a6:0f:c8:86:3a:
25:69:1b:81:6e:d3:bd:51:1b:dd:eb:c9:13:cb:68:a6:33:0a:
e4:23:fb:f8:f7:81:e3:35:73:cb:5d:22:f0:3d:ee:26:25:50:
97:44:84:5b:84:1c:86:45:39:81:e6:22:d3:31:41:6e:69:81:
31:fa:ed:82:25:42:7c:08:ce:bc:2a:b5:a5:02:03:59:94:d3:
1e:7d:b5:13:86:34:f1:ef:fb:61:6d:67:1d:47:68:86:ad:c5:
b9:d9:81:49:49:3d:35:56:1f:86:b1:60:55:ba:97:31:61:fd:
c9:db:12:62:ce:08:0f:e2:ca:b3:1b:b7:61:75:e0:8f:8a:d9:
54:bd:b8:01:6f:4b:2a:3f:9c:61:75:32:24:73:08:5c:fc:20:
4e:88:cb:71:6b:24:6f:13:96:71:83:24:90:6a:2b:6a:d9:f3:
fc:32:6a:c5:d7:2e:64:00:c6:e6:78:de:47:39:85:2c:82:28:
21:92:ca:49:7b:59:6f:74:a1:7c:c3:31:b3:fe:a3:9e:5b:9c:
cf:9d:20:3c:da:8c:70:1e:21:e3:09:10:99:77:6c:0b:75:4e:
00:ed:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:02:44 2025 by rpki-client