Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File: w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier: eyLqdRvw4KMB4ml60UbnbU1J/tHew2Td2Sk8TGqgCcM=
Subject key identifier: D7:EB:A0:FB:E9:58:3C:17:3D:17:25:A8:D9:26:CA:B9:F7:1E:68:69
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer: /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial: 01967679CDB31D11E71DF29464C0D3B75F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number: 0AE9
Signing time: Sun 27 Apr 2025 09:00:16 +0000
Manifest this update: Sun 27 Apr 2025 09:00:16 +0000
Manifest next update: Mon 28 Apr 2025 09:00:16 +0000
Files and hashes: 1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: xlrqHeSn17OcG6Ow7yazd3U4cCMTHwIiSVlRJlZML3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:cd:b3:1d:11:e7:1d:f2:94:64:c0:d3:b7:5f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Validity
Not Before: Apr 27 09:00:16 2025 GMT
Not After : Apr 28 09:00:16 2025 GMT
Subject: CN=d7eba0fbe9583c173d1725a8d926cab9f71e6869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:7d:5f:1e:da:ee:d0:78:33:4d:c9:58:08:
fc:7f:d1:31:29:be:58:76:8d:ba:53:04:db:f4:27:
6e:c5:88:2a:65:25:6e:b3:80:e5:d8:6e:ef:ea:5f:
b3:3f:b3:c6:6e:59:c3:fa:b7:0e:55:f4:a5:f2:bc:
00:dd:67:91:d9:a4:58:c1:f6:ec:1d:86:14:d6:1a:
6f:66:55:b1:28:bd:4c:83:47:33:cd:24:e7:45:84:
6a:17:94:4e:7e:17:95:42:81:b0:70:44:50:72:84:
fe:a3:06:0f:0c:57:e8:80:9b:89:be:af:05:dd:fe:
bb:93:93:22:65:15:fe:fa:f0:a5:88:55:80:73:01:
8f:eb:76:2e:da:a7:de:22:86:0d:9a:85:76:be:96:
0e:60:df:aa:c8:08:cb:7c:f3:84:a6:3a:77:c3:f6:
f5:57:e8:e0:a9:47:67:2d:c1:27:3c:99:ed:20:9c:
b0:26:36:e9:dd:5a:5e:25:96:a3:e6:c5:0e:b3:ab:
6f:e0:68:a4:90:7e:f8:b3:f8:fa:72:8d:03:31:17:
75:15:f1:6d:f4:8e:63:4a:1d:6c:e0:64:41:e0:98:
e6:79:34:38:93:7f:23:62:5c:80:2b:25:61:a0:ff:
68:56:5a:b1:8c:ea:cc:38:19:e7:56:04:31:cb:7d:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:A0:FB:E9:58:3C:17:3D:17:25:A8:D9:26:CA:B9:F7:1E:68:69
X509v3 Authority Key Identifier:
keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ef:1a:19:de:fd:41:d0:56:36:ea:81:da:94:8c:02:c6:f2:
29:39:f7:17:77:e9:8f:10:e6:d5:01:97:75:da:e4:75:dd:fb:
0a:e7:73:7c:2f:2b:7a:98:85:98:10:74:b4:b7:7b:54:59:33:
56:58:2b:10:05:d9:38:87:ff:ab:57:76:83:c5:e0:83:f4:4e:
7e:90:cf:87:1f:ed:b8:8d:05:60:26:e0:a2:ec:02:99:1b:6b:
5f:5c:ec:9a:57:78:d9:2b:84:bb:d1:bd:b5:42:eb:8d:b6:9d:
cb:3c:d9:c0:dd:8c:8b:c1:52:c5:36:c2:f5:1e:ce:a0:c9:8a:
25:dd:8d:27:ab:2a:e4:47:b7:0b:f5:8e:e0:75:97:2f:d5:f1:
ab:db:e8:d2:ae:cc:4d:2a:6e:59:40:da:ee:fb:9e:59:3f:3b:
f3:55:1c:a2:ec:ed:da:9d:7e:dd:60:85:19:8d:4e:51:31:2b:
9b:e6:c3:cc:0b:6c:96:7d:24:5b:57:73:1b:96:11:a5:21:7e:
d6:c9:82:d1:9c:d4:ae:4f:55:ec:d9:db:4e:40:5f:7e:14:3a:
c0:2a:36:18:94:9f:8a:21:32:22:1b:ce:9e:bb:f9:4f:d5:b7:
b8:6e:a1:3a:45:93:51:78:78:89:51:d5:b5:d8:d5:da:aa:7a:
7d:19:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:46 2025 by rpki-client