Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File: rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier: lpyGeWVV8Kown/4fDsNoqlrJ0Ft/cKqpECACx6XrKts=
Subject key identifier: 4B:50:6D:F9:B1:AF:B9:F6:B2:68:6D:EC:43:EB:BF:DF:6B:41:80:A1
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer: /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial: 01967FB3E5677DFAE8C91445CB66CD2349E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number: 11C5
Signing time: Tue 29 Apr 2025 04:00:17 +0000
Manifest this update: Tue 29 Apr 2025 04:00:17 +0000
Manifest next update: Wed 30 Apr 2025 04:00:17 +0000
Files and hashes: 1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: eedKt0bxREDHweca2sGVMd4KMqk6IL7RWlYqhNT6UdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:e5:67:7d:fa:e8:c9:14:45:cb:66:cd:23:49:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Validity
Not Before: Apr 29 04:00:17 2025 GMT
Not After : Apr 30 04:00:17 2025 GMT
Subject: CN=4b506df9b1afb9f6b2686dec43ebbfdf6b4180a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:53:3d:9f:2c:b5:69:fc:8b:ab:48:a7:b6:
91:70:ef:39:8f:5f:64:0e:53:8f:23:60:9b:26:3b:
62:3a:72:3d:1b:86:4e:5b:c8:f3:70:d3:80:d0:bf:
4d:99:a7:ee:45:c9:f6:45:23:10:d6:8e:f4:0d:36:
15:a3:ec:eb:98:20:b7:f2:0c:e3:f0:6c:44:51:71:
a5:8a:1d:f9:c2:0d:5a:35:8f:a2:50:5a:bc:cc:74:
59:4f:48:aa:4f:df:35:e8:ae:42:c2:d4:e3:1e:14:
3a:c4:73:12:f1:a4:0f:8d:c0:5f:76:f6:4f:2c:25:
37:41:fe:d8:06:c0:be:20:17:bd:77:cd:56:d2:7f:
d1:80:ed:ee:12:04:a8:b1:8e:21:67:33:d6:fd:69:
0c:6f:a3:4d:25:72:71:29:dc:30:54:de:a5:c0:77:
84:9d:21:83:24:7e:70:1f:fc:5c:d6:31:2f:cd:05:
2d:08:05:2a:2c:63:f1:9e:c7:1d:7a:40:2f:73:26:
1b:2a:52:7d:04:ff:eb:09:dd:16:a4:fe:73:57:0d:
20:32:b1:be:a3:ce:2d:77:63:f2:53:71:c8:d1:b7:
5b:cb:77:6f:72:af:ac:3a:c2:f1:67:85:bb:50:8e:
89:79:c7:0b:2e:b3:18:3e:79:d7:3f:32:db:0c:4e:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:6D:F9:B1:AF:B9:F6:B2:68:6D:EC:43:EB:BF:DF:6B:41:80:A1
X509v3 Authority Key Identifier:
keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:27:8b:5e:2f:5f:18:65:ad:f5:12:3c:9a:6c:60:66:e3:
77:8f:84:a1:83:06:ab:37:ef:11:f1:1d:bb:8d:13:51:9f:cc:
71:6b:48:4e:c4:fc:5e:23:b9:df:bc:88:70:0e:a2:d3:19:a4:
d3:1b:1c:49:01:13:71:15:41:c4:35:76:12:16:40:94:8a:41:
65:45:f1:e7:21:c1:6c:42:3a:e7:0d:c2:6d:bb:b2:89:11:39:
29:5f:72:ca:d0:e9:e6:5b:77:48:b7:3c:01:60:fe:08:8b:f6:
86:e6:1d:4d:23:87:7b:9e:6a:f3:1d:35:57:5a:d0:6f:c6:13:
82:d8:e9:12:c3:23:31:e8:4a:58:03:6c:96:26:eb:ff:96:2a:
61:65:6f:bf:e5:60:11:30:eb:62:5f:56:88:94:34:e6:73:12:
b1:dc:6e:12:51:d8:e2:65:3e:a5:54:a7:be:05:3f:0f:b3:5a:
ff:7f:5a:93:4c:fb:da:8b:b8:50:3a:c0:55:9f:eb:4b:60:11:
b4:d4:37:54:09:a3:bd:20:10:05:1d:bf:a5:ba:85:7d:de:7b:
a6:07:ad:04:8e:c4:ee:81:fa:a2:99:cf:41:c1:f2:ea:8d:4b:
e0:7c:7b:b9:24:15:38:87:14:81:75:9f:2c:95:aa:26:55:5d:
99:a9:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:40 2025 by rpki-client