Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
File: wwvzI77VsMENPzevDrNjrafKxKs.mft (raw, json)
Hash identifier: LSHxQjS8BeaRcSXzblr3gENK0ZcN6UsrMzdO4sLocT4=
Subject key identifier: 0E:9D:0F:BE:1B:6F:EC:69:E4:05:37:81:26:3B:BB:DD:90:59:09:48
Authority key identifier: C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
Certificate issuer: /CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Certificate serial: 01967BD7557C12A01B1371E4BBE766D6AFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
Manifest number: 0853
Signing time: Mon 28 Apr 2025 10:00:31 +0000
Manifest this update: Mon 28 Apr 2025 10:00:31 +0000
Manifest next update: Tue 29 Apr 2025 10:00:31 +0000
Files and hashes: 1: wwvzI77VsMENPzevDrNjrafKxKs.crl (hash: JRDZuaHOQF6+4edVryZnpU49oAmlfFt0pI02SOCOLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:55:7c:12:a0:1b:13:71:e4:bb:e7:66:d6:af:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30bf323bed5b0c10d3f37af0eb363ada7cac4ab
Validity
Not Before: Apr 28 10:00:31 2025 GMT
Not After : Apr 29 10:00:31 2025 GMT
Subject: CN=0e9d0fbe1b6fec69e4053781263bbbdd90590948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:f0:58:5a:4c:0a:70:56:21:c9:0e:26:3c:
fd:7b:ac:6b:25:ba:ee:24:9d:fe:99:88:b0:17:96:
d0:83:55:0f:d6:52:aa:e9:6b:39:44:1f:d0:9e:eb:
18:20:30:cc:e6:6d:8d:1b:aa:42:c0:71:31:2f:b1:
14:fd:9c:d6:aa:1b:19:ab:c2:c1:27:04:32:73:24:
5b:bb:26:54:7f:f9:09:71:62:15:39:b4:4e:c4:f1:
d7:23:6c:9d:5b:62:be:79:f0:4e:65:69:32:d1:c6:
a4:19:be:28:86:7c:3f:df:d6:cf:3d:4f:a6:47:39:
59:d7:17:a2:6d:73:d8:08:8a:85:5f:b7:1a:59:42:
4c:34:13:78:6d:84:93:2e:7e:0c:81:70:d0:2c:8f:
3c:91:89:6d:91:bc:f7:b6:87:95:d9:b3:a7:f4:25:
23:4a:38:ec:aa:0b:8d:ce:4d:00:34:1d:99:fd:f3:
8b:87:83:6f:d2:db:a8:4e:9f:c6:06:85:38:33:56:
eb:f4:ce:d0:45:10:bf:64:22:4f:99:d3:1f:64:be:
a4:5e:0b:2d:62:0e:29:af:f8:af:b8:69:4a:0e:44:
02:b3:c1:a1:52:f7:db:da:8e:9b:93:68:70:48:bb:
d9:55:58:26:07:42:01:98:be:dc:19:4e:f2:39:1c:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:0F:BE:1B:6F:EC:69:E4:05:37:81:26:3B:BB:DD:90:59:09:48
X509v3 Authority Key Identifier:
keyid:C3:0B:F3:23:BE:D5:B0:C1:0D:3F:37:AF:0E:B3:63:AD:A7:CA:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwvzI77VsMENPzevDrNjrafKxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3f056a-124e-4f12-b3db-fca31f645bf5/1/wwvzI77VsMENPzevDrNjrafKxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f1:bd:dc:4e:dd:35:0a:f8:20:42:d2:0f:3e:92:af:bc:0e:
9d:2d:0d:16:d9:ab:d6:16:f3:24:be:8c:52:79:c3:88:0f:45:
ee:91:85:cb:b6:7e:cb:dd:bd:3b:70:20:24:4c:c6:c8:52:cb:
88:7a:a6:14:2f:6c:9e:6d:73:e4:38:ec:fd:1d:85:37:ff:ff:
c1:0f:52:b5:91:2e:af:12:6d:de:2b:86:80:51:a2:e9:fc:62:
56:69:43:63:d4:8c:74:3a:9a:e6:13:78:aa:45:b0:61:48:e4:
c6:58:7d:9a:b6:6e:a0:0b:f6:04:d4:92:ca:fa:76:e9:d7:ba:
a8:91:f2:f1:8e:2a:de:1a:2c:bf:89:e4:02:a1:4b:38:32:7a:
f7:36:33:f0:c1:98:56:e4:e1:75:0d:d7:91:b9:58:7a:5c:4d:
ae:bb:80:8d:2d:3a:eb:50:7b:e4:67:ce:49:57:48:68:b3:60:
dc:0c:e4:e6:cb:33:e6:28:fc:b4:a3:7d:c3:ae:87:b8:cf:54:
c6:51:80:58:a9:50:80:09:00:98:1a:7f:de:48:4a:ee:a1:c8:
a2:9e:79:ba:50:1e:97:f9:e5:10:e6:ae:1b:fd:80:e3:3c:6c:
75:e2:00:e9:bb:0d:75:c0:ae:06:7f:47:fd:c0:d1:bd:e8:b6:
8f:1a:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:37 2025 by rpki-client