Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
File: wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json)
Hash identifier: fKMS1sUX4Cz62HYPPtP5C1CXqJFM3oGSVcLx5Vo+/Fw=
Subject key identifier: B2:9C:C7:01:EC:39:E9:57:8E:CF:FB:A0:8E:25:7E:CD:90:64:F1:32
Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
Certificate issuer: /CN=c12c072c35909d525322b027586bacfad119f17d
Certificate serial: 0197B6D728261FA81B2ECE60D8462DA6B4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
Manifest number: 03D7
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: mO7+FU1tjMHPxKdM/HuMaVV51LgN4lu6sBSahxUxLTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:28:26:1f:a8:1b:2e:ce:60:d8:46:2d:a6:b4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12c072c35909d525322b027586bacfad119f17d
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=b29cc701ec39e9578ecffba08e257ecd9064f132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:56:7f:2e:1d:47:b7:7d:be:85:1d:13:c7:
da:e4:e7:c1:69:92:e7:69:6d:38:93:7e:0c:7f:91:
2c:8f:a2:62:97:79:96:5d:35:44:8d:b3:c3:d1:8f:
c5:8d:0d:be:5c:3e:89:b5:36:45:4f:fe:ce:f7:30:
7f:30:b8:50:03:a5:75:5a:83:97:b0:bb:8b:87:e0:
30:66:7e:13:fd:c2:dc:3b:ad:ae:9a:53:ef:f0:1d:
8a:fa:99:26:22:a5:67:a7:26:12:8f:bb:63:f7:47:
53:05:78:78:1b:24:ce:6a:30:6d:36:6c:65:00:1b:
51:67:30:c0:9b:10:93:25:cb:32:30:10:99:6d:b8:
15:7e:6e:b1:ff:5d:45:97:61:e0:b1:97:ab:fa:3c:
52:8a:c5:8a:44:a0:c9:c9:8d:3d:44:3c:e3:54:7f:
38:1f:3e:fa:32:fc:bf:13:7d:a3:b1:b4:9d:cd:85:
d1:a2:ce:ba:7b:94:cc:e4:cb:3c:b5:a4:f2:30:e0:
75:1a:2c:a7:56:05:39:cb:5e:15:03:2d:08:e4:64:
bc:a5:be:28:18:28:07:43:f6:a6:d0:4d:ed:62:69:
af:83:e2:8c:a8:fc:ef:8e:ff:f8:52:8d:95:13:7e:
94:18:4b:51:13:19:49:ce:c6:16:63:71:f4:5b:90:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:C7:01:EC:39:E9:57:8E:CF:FB:A0:8E:25:7E:CD:90:64:F1:32
X509v3 Authority Key Identifier:
keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:73:b1:23:f4:40:9f:d2:02:43:d8:9a:51:31:ea:10:6c:
80:c7:07:fc:35:8f:83:d1:25:11:31:9c:bd:d8:b6:9a:07:a6:
ec:a1:71:c5:71:8f:8a:19:c3:2f:e8:24:a6:10:40:06:da:dd:
d9:45:68:6e:54:29:4e:ce:c3:0e:f1:e0:01:59:32:0d:7a:d0:
0c:ce:f1:d9:23:4c:49:88:46:74:2d:bb:3c:4d:8f:6e:03:b3:
06:96:6e:2f:83:4c:80:ef:88:dd:0e:e0:8c:f7:4d:fb:ad:cb:
2d:29:60:48:ef:ba:43:f8:0a:b0:43:ee:52:36:5c:15:cf:d5:
e5:33:48:d5:d2:39:60:1e:3c:5d:48:c1:37:d1:54:54:6a:ea:
be:53:a6:dc:b0:1a:a6:ed:91:53:13:f1:f9:b4:02:41:08:84:
54:f5:b0:2b:e1:b6:45:6b:6f:71:90:d6:cd:87:be:d4:ce:50:
2c:e9:a7:56:d7:20:64:a3:c2:c0:d9:a5:36:82:c7:e4:e6:36:
30:8a:69:09:7d:fc:7a:ed:68:4a:64:4a:8d:16:0c:36:04:6f:
14:f9:48:64:89:53:52:df:5e:87:4b:cb:ff:34:9f:1d:ae:81:
b7:00:80:f0:fc:6a:2f:f6:01:93:d6:7a:f7:b4:b1:66:d7:db:
bb:db:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:20 2025 by rpki-client