Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json)
Hash identifier: xAEsPvBSFPFtbBlU9jQbQLJr8tkFm72ZEh9eOxuJmD0=
Subject key identifier: 34:90:E3:09:93:F0:7B:BF:18:95:75:0B:6A:34:5D:3D:0A:BB:71:74
Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736
Certificate serial: 01968F282876EB9A04FBAB09098D0814400C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
Manifest number: 1518
Signing time: Fri 02 May 2025 04:01:35 +0000
Manifest this update: Fri 02 May 2025 04:01:35 +0000
Manifest next update: Sat 03 May 2025 04:01:35 +0000
Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: KTPLctxy09gbPTGvD8e92e0+IAQJpIzu4DShEBfuKYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:28:76:eb:9a:04:fb:ab:09:09:8d:08:14:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736
Validity
Not Before: May 2 04:01:35 2025 GMT
Not After : May 3 04:01:35 2025 GMT
Subject: CN=3490e30993f07bbf1895750b6a345d3d0abb7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:08:c2:54:bd:d5:de:ae:4e:71:d8:52:8b:
0d:d0:94:f6:4e:0b:e5:07:b8:91:0e:2f:6b:a5:88:
b5:ed:69:26:12:84:5c:32:8c:aa:b7:52:1c:33:9b:
be:ed:2f:08:31:88:c8:7c:a7:45:0b:9e:0c:ea:04:
58:dd:c8:9b:e0:70:29:d4:e3:69:d2:7a:34:b5:58:
18:54:73:43:45:0a:66:be:7f:a7:7a:59:a9:7c:c5:
93:a0:ac:fd:09:2a:f3:bc:05:25:73:fd:44:f7:31:
56:7e:5e:ca:16:f6:4c:e3:20:3b:86:69:0e:00:1d:
e0:e4:b0:d7:cd:e5:a0:ac:df:2a:79:e6:30:04:35:
4f:1d:d4:9c:8a:4d:41:7f:bd:dc:b6:57:ab:99:33:
e1:16:a1:da:06:16:a1:2a:f3:a3:3e:32:f5:14:58:
62:53:a2:3a:69:bf:ac:da:cf:d8:de:29:66:29:eb:
ac:e0:55:c7:56:df:68:16:c3:ec:6b:03:45:59:fc:
10:a6:71:2a:ca:38:6e:d1:e6:ed:73:f1:b6:0c:0b:
1f:d8:c8:c6:e1:ab:01:ce:81:b0:36:5d:6e:b5:8b:
8b:29:47:57:8d:23:db:b9:a8:e7:d5:60:ae:8b:b6:
0e:c1:33:14:f3:de:76:f2:be:b8:dc:e0:34:73:12:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:90:E3:09:93:F0:7B:BF:18:95:75:0B:6A:34:5D:3D:0A:BB:71:74
X509v3 Authority Key Identifier:
keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:df:85:77:bf:d7:b2:de:49:30:de:91:2d:68:8c:89:92:3d:
3f:b8:01:e9:d9:91:17:e4:7b:81:b9:5b:c7:14:fe:64:8a:7a:
ce:8f:58:a5:cd:db:2c:5d:d8:02:b3:c1:88:c4:01:53:9f:8b:
08:9d:48:81:34:5b:1a:f5:7d:5b:92:b6:a4:c6:f9:a2:5c:55:
31:17:27:38:15:94:0c:05:24:d8:d9:3d:fa:21:12:99:af:36:
ea:98:7d:5e:0d:1c:4d:00:64:d7:62:b6:26:27:94:dc:3e:8d:
b1:9f:a3:d4:ed:ce:20:22:2e:76:93:33:4f:60:21:87:72:1c:
c2:a7:a7:32:f5:d7:eb:05:ff:ef:20:d3:59:a5:b4:86:15:8b:
07:09:33:dd:57:bb:f3:57:fe:be:de:e3:a4:c1:5b:c8:f4:bc:
04:87:52:30:07:8c:40:c3:ec:ae:1f:14:8d:3a:fd:7b:a0:df:
34:33:0b:65:f9:c8:21:89:06:fa:c9:90:d3:83:00:57:ec:9a:
5d:05:10:db:6d:c9:41:83:6e:a7:67:4f:6c:c6:47:2d:00:03:
ca:8c:55:61:e8:e7:30:ed:9a:cd:de:53:ed:46:5a:7d:13:94:
98:7d:05:88:4b:6e:24:bb:e8:cc:2d:39:db:8f:1d:8d:76:04:
7b:14:bf:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPKCh265oE+6sJCY0IFEAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZDZkNjlmZDU4N2QwNTQxNzZlNTNkMTkyNzI2ODIzNjFi
MTY3MzYwHhcNMjUwNTAyMDQwMTM1WhcNMjUwNTAzMDQwMTM1WjAzMTEwLwYDVQQD
EygzNDkwZTMwOTkzZjA3YmJmMTg5NTc1MGI2YTM0NWQzZDBhYmI3MTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IsIwlS91d6uTnHYUosN0JT2Tgvl
B7iRDi9rpYi17WkmEoRcMoyqt1IcM5u+7S8IMYjIfKdFC54M6gRY3cib4HAp1ONp
0no0tVgYVHNDRQpmvn+nelmpfMWToKz9CSrzvAUlc/1E9zFWfl7KFvZM4yA7hmkO
AB3g5LDXzeWgrN8qeeYwBDVPHdScik1Bf73ctlermTPhFqHaBhahKvOjPjL1FFhi
U6I6ab+s2s/Y3ilmKeus4FXHVt9oFsPsawNFWfwQpnEqyjhu0ebtc/G2DAsf2MjG
4asBzoGwNl1utYuLKUdXjSPbuajn1WCui7YOwTMU89528r643OA0cxIEQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSQ4wmT8Hu/GJV1C2o0XT0Ku3F0MB8GA1UdIwQY
MBaAFMPW1p/Vh9BUF25T0ZJyaCNhsWc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQt
Y2EwODM2MzE4OTk1LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQtY2EwODM2MzE4OTk1
LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx9+Fd7/X
st5JMN6RLWiMiZI9P7gB6dmRF+R7gblbxxT+ZIp6zo9Ypc3bLF3YArPBiMQBU5+L
CJ1IgTRbGvV9W5K2pMb5olxVMRcnOBWUDAUk2Nk9+iESma826ph9Xg0cTQBk12K2
JieU3D6NsZ+j1O3OICIudpMzT2Ahh3IcwqenMvXX6wX/7yDTWaW0hhWLBwkz3Ve7
81f+vt7jpMFbyPS8BIdSMAeMQMPsrh8UjTr9e6DfNDMLZfnIIYkG+smQ04MAV+ya
XQUQ223JQYNup2dPbMZHLQADyoxVYejnMO2azd5T7UZafROUmH0FiEtuJLvozC05
248djXYEexS/cg==
-----END CERTIFICATE-----
Generated at Fri May 2 06:40:17 2025 by rpki-client