Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File: wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier: ALMIoIob6iOI9hwDr+9G7ZflNXnVM/+wB5wTvt3VPD4=
Subject key identifier: B5:E1:C6:F2:0D:29:62:47:23:DA:0F:C6:06:A9:65:DC:29:E3:90:97
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer: /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial: 01967944074C829E2FA13FC31862C43CAF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number: 0FA9
Signing time: Sun 27 Apr 2025 22:00:23 +0000
Manifest this update: Sun 27 Apr 2025 22:00:23 +0000
Manifest next update: Mon 28 Apr 2025 22:00:23 +0000
Files and hashes: 1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: uWUNMbbg0nC8cmmrTpCPRY+9e0UzNS/zEynjmhN3oTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:07:4c:82:9e:2f:a1:3f:c3:18:62:c4:3c:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
Validity
Not Before: Apr 27 22:00:23 2025 GMT
Not After : Apr 28 22:00:23 2025 GMT
Subject: CN=b5e1c6f20d29624723da0fc606a965dc29e39097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:cd:b5:20:db:f8:8c:be:55:06:84:11:d8:
3a:26:64:ba:d0:e4:e6:26:62:81:b2:97:00:00:5a:
39:cc:b1:6d:8f:51:98:44:f1:67:4c:0e:59:7a:f9:
f5:34:82:eb:00:47:be:3e:e4:a7:a8:02:64:12:b6:
69:e3:83:aa:73:bc:91:a7:54:15:7b:f1:e0:7f:cf:
f9:ac:f0:b6:f5:4b:26:db:52:78:da:23:9e:50:f7:
52:01:74:bc:d5:ef:28:f0:00:88:b3:15:7b:a8:ab:
8b:ef:53:7b:49:23:e7:fe:9c:f2:71:98:6e:94:51:
c0:0f:c3:0a:1d:a7:f1:cc:51:0c:f7:07:13:0f:b5:
d1:d8:f0:7d:52:04:84:1e:e5:9b:6d:54:ac:d8:f1:
4e:37:b5:93:6a:9b:0d:41:d3:ec:ee:98:6e:79:71:
7e:9e:17:e1:4c:b5:d6:62:3c:d3:36:28:14:17:6e:
65:17:0e:4d:38:29:31:37:d5:fb:a7:42:1b:a1:5e:
f6:af:35:bc:cd:5a:4a:55:0e:1b:84:23:6f:cd:b4:
44:23:90:77:f4:20:18:7f:4a:f6:f1:34:d4:9f:9a:
09:3f:5a:b6:82:fe:28:63:3a:91:04:01:38:95:86:
6d:35:04:df:67:29:6e:37:2d:8b:0e:37:8c:2d:fa:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:C6:F2:0D:29:62:47:23:DA:0F:C6:06:A9:65:DC:29:E3:90:97
X509v3 Authority Key Identifier:
keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:46:68:5e:84:29:c1:6a:ce:08:9b:8d:df:f9:1b:9a:b4:16:
4b:e8:d7:3e:a9:08:e6:57:67:e6:29:a1:6d:08:d8:e2:3a:11:
ba:bd:43:9b:a7:72:2f:fc:22:c7:82:8b:33:4b:04:bc:6b:4a:
9c:86:7f:37:5c:3e:b4:e7:c4:a6:24:9d:55:9d:9d:ee:52:a3:
ae:a4:80:4a:70:3a:ac:ae:35:05:b2:50:c8:24:a8:fd:23:fc:
7f:ed:80:e9:09:b7:e4:fc:3e:d7:67:10:3a:20:50:e7:c0:35:
85:23:54:45:69:ca:43:94:5f:e1:1d:11:e4:d1:b9:e6:a1:60:
00:03:f8:f7:97:92:39:f1:07:b7:e7:49:a3:46:19:21:19:b4:
f7:bd:fa:33:cb:51:c0:79:cd:ec:ee:80:e2:86:7d:c7:67:aa:
78:be:9d:89:41:d2:23:70:b7:df:fa:ad:0f:65:a4:3b:72:81:
bd:2e:90:41:31:5d:e9:11:23:67:af:4e:34:6f:f5:58:88:8f:
0b:30:d2:82:0c:53:2a:fd:b3:61:5d:a2:52:8d:7e:75:c6:a9:
56:6a:33:16:2d:45:cd:eb:fb:93:ae:90:9f:68:d5:74:f8:3b:
47:ca:8e:0e:9c:7a:bb:18:9b:68:c0:bc:58:7c:84:fb:6f:8e:
1b:e5:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:53 2025 by rpki-client