Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: zJ6sJ/8XjXKHmq7ZAKmPuhY4X03KDV0gUX90VITZ6WY=
Subject key identifier: B2:C0:ED:2C:D7:DA:FF:F2:64:8A:7B:3B:D8:47:B7:66:0E:E4:28:FE
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019679E8DCB3A3C3B4C1728738972F61209A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0987
Signing time: Mon 28 Apr 2025 01:00:25 +0000
Manifest this update: Mon 28 Apr 2025 01:00:25 +0000
Manifest next update: Tue 29 Apr 2025 01:00:25 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: TBacrSqrRJgXzyCkGNqzDGzeNHDShQHJ/MgZbBVjNGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:dc:b3:a3:c3:b4:c1:72:87:38:97:2f:61:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Apr 28 01:00:25 2025 GMT
Not After : Apr 29 01:00:25 2025 GMT
Subject: CN=b2c0ed2cd7dafff2648a7b3bd847b7660ee428fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:28:5c:cc:50:2e:bf:08:4d:ff:66:aa:48:
af:63:1b:a4:be:6a:94:e2:16:da:47:5d:87:48:16:
a1:28:a2:21:cf:95:ec:49:f2:dd:27:a6:40:b7:9e:
c2:01:8f:50:0e:27:99:39:fb:2f:25:e1:fa:83:9d:
d5:0b:79:53:36:1d:b1:f1:08:bb:f8:4c:fa:ca:1d:
ac:79:fd:17:09:db:cd:d1:c3:33:7f:91:90:ff:04:
26:75:86:45:8c:78:e4:1c:05:43:37:33:7b:ee:ea:
cd:f1:d4:da:39:ef:83:37:fb:d6:d3:c4:80:14:6a:
1c:e2:7e:43:ae:be:0a:fa:04:95:e8:91:b0:98:67:
f3:da:b9:56:05:d8:93:1e:69:55:fc:79:3a:ad:aa:
b0:02:f1:e9:53:9f:ad:f4:af:69:24:22:4d:5e:ff:
66:00:f3:f9:42:c9:b8:05:89:fd:04:5f:f2:b2:b7:
0c:91:16:75:92:4e:7e:6b:02:dd:ba:4c:bb:9c:9d:
86:37:ab:99:8d:11:b2:18:9f:b6:e4:ea:fb:bb:a4:
6e:7d:4c:c6:08:88:e7:77:5f:c2:65:9f:2c:1b:b7:
ae:27:d9:ff:86:5c:54:bd:86:4f:f8:c3:56:8d:f0:
ea:6b:80:e4:ce:6b:96:cf:ff:e2:b1:f1:02:6a:ea:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C0:ED:2C:D7:DA:FF:F2:64:8A:7B:3B:D8:47:B7:66:0E:E4:28:FE
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:32:6e:3f:68:63:0c:e1:5b:c7:fd:d9:32:2b:62:07:b4:ca:
6b:d5:d3:67:ec:2b:f1:7f:d0:5c:fc:72:3f:d3:ed:f6:eb:6f:
29:6b:20:9c:f4:87:b5:96:a6:d9:76:8b:12:ef:04:63:5b:6d:
be:52:ea:9c:35:c1:62:c8:84:48:b2:3b:1c:0d:df:5a:f8:35:
3d:f6:29:62:f5:e9:31:ec:86:b0:85:ac:b1:b5:63:cd:c8:c4:
f6:39:91:e6:bc:b2:95:97:79:39:4a:91:72:88:9a:4d:f7:ca:
8b:69:36:36:0f:c3:0e:3c:cd:f8:3a:86:de:a0:ad:b0:44:da:
f1:12:d9:8a:d8:41:2a:0c:25:dd:65:0d:80:e0:30:91:7b:b6:
58:02:c8:dd:f9:bb:f3:04:d0:01:10:0a:d5:36:b0:5c:7a:e6:
ce:ab:58:75:75:77:b7:db:e9:ec:fc:3a:76:c0:6d:c6:8e:86:
a8:60:dc:74:6a:b7:4c:c4:b5:77:6b:93:f1:53:da:aa:5f:1c:
4b:af:86:36:f9:55:f3:a4:b9:1e:ae:25:f1:8b:4f:4f:95:09:
01:eb:14:6d:17:a8:2c:cb:af:dd:7b:9d:f0:40:92:4e:70:76:
70:22:6c:7d:ae:2d:13:b1:60:92:46:d3:d4:43:c3:ce:3c:5b:
48:f4:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:01:05 2025 by rpki-client