Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File: WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier: SEK+RdudbixLJhiIQq8eAmMAflZE/sYohgB+PDetpH4=
Subject key identifier: D1:57:4D:0F:26:14:20:B7:93:B8:78:ED:2C:E4:C4:45:B3:5D:EB:69
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer: /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial: 0196760C97C5E8456D2E034C53E110B8CB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number: 135F
Signing time: Sun 27 Apr 2025 07:00:58 +0000
Manifest this update: Sun 27 Apr 2025 07:00:58 +0000
Manifest next update: Mon 28 Apr 2025 07:00:58 +0000
Files and hashes: 1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: KLMUKW91dT70/mFX0WRuPIVvdloeQvMEeYNjIyNabKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:97:c5:e8:45:6d:2e:03:4c:53:e1:10:b8:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Validity
Not Before: Apr 27 07:00:58 2025 GMT
Not After : Apr 28 07:00:58 2025 GMT
Subject: CN=d1574d0f261420b793b878ed2ce4c445b35deb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:b7:b7:8c:4c:3e:2b:a2:32:75:90:cd:e8:
09:b3:47:9a:8c:07:04:a5:7e:cd:f9:ac:ac:53:c4:
dd:8f:5e:a3:5c:ee:da:9d:4a:c9:9c:25:d8:2b:37:
1b:05:3f:05:c9:9a:6a:59:59:4f:74:3c:dc:05:ef:
54:95:b9:12:d3:90:26:0e:3a:88:ed:39:e4:cc:4a:
19:cb:2c:61:7a:58:9c:48:18:17:6c:f5:7b:c5:fb:
ef:7b:22:50:e1:e5:3a:5d:d4:66:0e:c8:5c:6d:4f:
e2:9f:9d:cc:f0:8a:2b:71:52:ff:f6:ca:2d:15:e3:
66:a5:bd:5d:e8:93:a3:e7:2b:f0:fc:22:23:ad:bc:
15:85:12:28:db:1d:bb:75:0e:f4:82:e7:73:31:2e:
d6:ff:80:3b:6e:b7:c7:e8:00:b0:72:4e:5c:83:59:
38:65:49:ed:18:4c:f8:30:c4:53:ce:d9:a0:c6:60:
b7:2f:74:40:be:e4:83:bd:e6:78:96:4d:b9:1e:89:
a2:9c:6c:41:81:83:05:74:bc:34:ec:00:90:fd:35:
71:0b:41:9d:06:d7:8c:89:fc:25:0f:81:d3:17:bc:
dc:cb:c8:9a:9a:59:9f:55:70:3d:44:ca:ec:66:a8:
30:2e:4c:c8:83:e7:c3:8d:67:da:42:9b:e7:0e:a7:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:57:4D:0F:26:14:20:B7:93:B8:78:ED:2C:E4:C4:45:B3:5D:EB:69
X509v3 Authority Key Identifier:
keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:d2:29:e7:31:cd:05:24:a7:14:ec:57:73:bb:c4:e9:bd:
e5:8a:0d:17:6f:dd:87:1c:2b:21:b1:59:a6:e4:85:38:39:95:
a9:00:7b:5e:74:4c:79:1a:4e:67:bc:40:ff:cc:57:72:0d:5d:
ef:a9:89:d2:f3:da:52:1c:18:cd:9c:ff:a1:98:f0:77:76:9f:
a2:96:87:d7:99:da:e0:ce:c8:4e:be:15:da:ca:99:68:4e:85:
6b:0e:9e:3f:50:2d:90:0e:ee:7f:aa:85:82:65:b7:aa:9b:a6:
78:ba:c0:2a:9f:23:8c:93:56:e1:11:88:a1:15:29:ea:cf:b8:
51:39:06:56:b1:20:ca:b3:f3:26:5b:6b:e1:24:d8:6e:10:65:
22:16:c0:4d:61:12:be:3e:30:2d:fd:33:d8:23:46:3a:2d:6d:
00:4c:69:bf:5e:ba:4d:8c:5b:64:50:bd:43:53:9c:77:b5:d6:
cf:4b:01:5b:63:9c:04:fd:21:45:4d:91:f0:f4:17:2d:44:90:
97:f2:ba:a0:5c:0d:bd:c4:14:e2:4e:84:e8:12:e9:51:4b:b1:
a8:2e:30:2a:26:c6:77:f3:a7:dd:f6:91:be:50:54:5b:2a:7b:
ce:5b:67:91:e9:96:fd:ed:4b:8e:a0:9e:c5:83:48:8c:7d:2e:
ec:72:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:34 2025 by rpki-client