Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: AqZS1mgEpLENE9pbaxGZD2QJziU7N9ocVHCCiwCvwuI=
Subject key identifier: D5:35:04:71:AD:26:0F:47:F8:04:2F:D0:4C:BA:F3:D5:04:CC:58:AB
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019683915E040F5BDA2250D5D25BE4F56447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 078F
Signing time: Tue 29 Apr 2025 22:01:04 +0000
Manifest this update: Tue 29 Apr 2025 22:01:04 +0000
Manifest next update: Wed 30 Apr 2025 22:01:04 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: Vm6+7+Z7pYPCnhI9l9DFeWuDr7JaQAvRdHUJgNbHutw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:5e:04:0f:5b:da:22:50:d5:d2:5b:e4:f5:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Apr 29 22:01:04 2025 GMT
Not After : Apr 30 22:01:04 2025 GMT
Subject: CN=d5350471ad260f47f8042fd04cbaf3d504cc58ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:b4:4c:47:d3:2f:f8:95:6e:e6:f2:2d:c9:
f1:86:bb:f7:f5:c0:0a:38:2f:65:8a:bd:4b:1c:67:
ed:57:f5:ff:a4:f8:66:25:fb:91:11:59:b2:50:f9:
da:c2:56:54:28:65:72:c1:c9:fb:3c:fc:32:4b:b7:
85:c7:05:53:cf:ec:2f:48:93:7b:42:17:91:3c:13:
8b:f1:6e:37:ff:62:c3:c6:c6:20:9c:60:36:5a:5a:
43:5a:bd:f5:7b:c7:12:46:27:bd:da:87:8f:bd:a3:
8e:fd:38:b5:fd:cc:d2:32:55:06:d0:b6:54:4d:fc:
9c:de:7e:8d:de:59:b8:cc:16:89:77:44:b5:f6:db:
1b:10:01:62:ad:63:22:8d:71:54:6f:ea:a8:29:ec:
c1:c2:3c:2d:59:00:19:69:48:62:90:4e:dc:4e:27:
cd:13:b1:ec:60:c5:67:d8:58:e6:cb:c0:f1:04:5a:
88:34:c0:f1:71:7a:f8:69:5b:0f:1b:22:93:dd:7d:
92:98:35:75:80:9d:10:8d:bb:e5:7b:91:b4:43:01:
e9:42:78:87:b8:6c:2e:e9:63:8f:f8:a8:2f:d4:b5:
83:f1:ea:19:94:f0:d2:f5:c3:30:42:cd:b2:9a:ef:
a5:7e:0f:b6:87:16:41:89:e8:12:be:08:4d:a0:90:
62:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:04:71:AD:26:0F:47:F8:04:2F:D0:4C:BA:F3:D5:04:CC:58:AB
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:8f:54:60:a0:4a:8e:67:f4:34:08:f9:1a:7c:0c:08:82:
09:1a:e4:bb:d8:9c:9f:47:ab:8c:b6:5d:0f:a7:fd:50:59:bc:
58:02:67:eb:eb:8b:9b:a4:f3:37:e6:00:28:87:7b:27:8c:72:
b1:c7:b5:6b:bb:ab:ee:a6:af:13:78:a1:70:b4:69:6c:28:7e:
a8:eb:da:f3:61:cb:7c:09:05:74:20:77:fd:ce:59:2f:8e:76:
a2:4b:05:ad:4f:bb:5b:6d:82:6b:f7:f2:11:37:af:8d:71:0d:
ed:21:a3:21:e5:c6:4a:6a:b7:2f:9d:58:e1:a4:8b:71:0d:49:
f9:e5:57:d7:f2:86:af:16:68:2c:64:00:db:9c:d2:b7:66:b7:
4d:3f:ca:cd:09:ef:99:56:c1:11:b6:01:8f:63:e4:a0:10:b0:
03:b5:26:22:86:cb:ae:21:7b:1d:8f:26:63:0f:47:a4:56:a6:
4e:0a:cb:3e:b1:9f:e8:e7:31:1a:78:ad:fa:d6:f3:7b:b7:0d:
4d:54:76:9f:b9:79:86:c6:b1:91:3c:ca:f6:36:65:a0:96:bb:
4a:ba:39:30:d0:d7:72:93:c6:4d:ac:d1:33:2f:b9:cc:88:60:
ce:c1:ef:22:13:75:65:99:00:1e:71:88:52:9a:b9:36:74:41:
d8:21:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:28:55 2025 by rpki-client