Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json)
Hash identifier: OHWw6ybkNaw+H4NlUSOoNO1WqQvJKfFds4SrmpzLP70=
Subject key identifier: 40:3A:BD:BD:16:94:40:5F:C9:5E:38:48:C0:85:DA:94:F0:A3:69:3B
Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Certificate serial: 01967DC5BC1D2A1DC3665ED64629F2885E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
Manifest number: 044D
Signing time: Mon 28 Apr 2025 19:00:32 +0000
Manifest this update: Mon 28 Apr 2025 19:00:32 +0000
Manifest next update: Tue 29 Apr 2025 19:00:32 +0000
Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: AE/iO3c9VEoDUT1tj62VKcpAG+CxfXRR/WTPSsrktos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:bc:1d:2a:1d:c3:66:5e:d6:46:29:f2:88:5e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Validity
Not Before: Apr 28 19:00:32 2025 GMT
Not After : Apr 29 19:00:32 2025 GMT
Subject: CN=403abdbd1694405fc95e3848c085da94f0a3693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:eb:3a:7e:5e:83:5f:ce:28:ec:f3:69:d9:
b2:51:4e:39:2c:4a:84:32:41:56:0f:2f:72:05:d8:
df:29:1c:9d:75:b2:5d:76:c4:0a:54:15:96:2b:7e:
c3:8f:dd:01:ed:c5:55:69:03:aa:08:50:ff:31:b8:
aa:48:f6:dc:3f:7c:f4:ce:14:5c:dd:6a:40:cc:2a:
da:92:63:4a:d5:0c:a2:73:98:86:34:82:2d:c6:eb:
d0:77:fb:68:af:18:06:a6:da:b3:fe:9c:81:15:b9:
e6:d2:ac:75:a6:eb:8f:af:67:f7:9e:32:d1:dc:c9:
6b:64:fe:37:82:04:3a:20:22:f9:80:80:f1:87:e7:
b3:53:ea:79:78:1f:75:67:86:2f:5a:14:64:5f:52:
c3:a6:08:93:8b:5d:84:11:f4:f8:99:92:1e:2a:cf:
31:ec:48:05:82:82:49:0f:ad:c0:f3:ba:4f:7c:5d:
61:cf:ee:84:88:19:ca:60:df:2b:13:bc:a4:85:28:
64:97:3c:ba:ab:bc:a6:60:5b:f9:ec:4b:92:08:22:
93:37:3e:d7:9d:8e:f0:17:7e:c9:ef:0e:0e:76:9f:
51:e4:32:35:a6:33:db:fe:e8:15:ae:7c:ff:e7:f9:
db:7d:f2:1e:d9:82:f2:b7:27:70:c7:78:ca:2b:ee:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:BD:BD:16:94:40:5F:C9:5E:38:48:C0:85:DA:94:F0:A3:69:3B
X509v3 Authority Key Identifier:
keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:94:c5:28:42:c3:9f:5b:b8:c9:1a:75:5b:4d:64:ad:bf:
ea:c2:0a:c6:ab:b4:05:6a:77:48:09:85:37:92:07:e5:13:7e:
af:35:3d:5d:aa:cf:6a:62:2a:52:6c:00:91:8c:5e:1f:31:62:
71:4b:77:28:9a:44:60:b3:43:28:9e:27:c7:ca:0e:7c:a2:34:
d2:72:c9:8b:d0:8d:aa:ae:13:e7:2c:36:44:db:64:a0:1b:dd:
03:de:88:ea:8a:2e:93:3a:39:db:97:8b:9d:e3:4d:81:95:e1:
f3:57:d8:67:aa:7c:dc:d7:cd:fa:1b:79:fe:b1:14:34:a4:12:
c8:ae:fd:83:5e:77:1e:65:e9:16:49:fe:38:a2:26:52:dc:c0:
1d:c8:c9:5f:ad:30:39:0d:c3:40:1e:ff:f1:e7:a2:04:1c:9c:
89:1e:76:64:78:e0:22:20:15:b6:90:1b:4e:b2:47:30:41:1d:
72:28:7c:97:14:b6:78:b4:52:89:52:74:00:bb:cd:7f:45:30:
a6:cc:f4:a8:99:ce:6e:d1:4a:e7:e3:1a:96:26:7e:b7:04:84:
11:03:06:d3:6d:ca:bf:5b:be:47:57:9e:af:82:66:8c:5f:b6:
5e:d0:24:ec:7f:85:e8:6e:42:a7:2e:4b:b8:80:8f:28:09:cf:
52:54:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:53:37 2025 by rpki-client