Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier: 5+2QH4l8BTeFxm87SNblV6KzNhBFkvlvaSiSp/KXUSs=
Subject key identifier: 56:16:B9:15:03:E9:EE:EB:0F:66:ED:12:1B:D9:65:D8:7B:FD:0F:03
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial: 0197B8C590D3C2775F9437237CAA9DDA2801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number: 0137
Signing time: Sat 28 Jun 2025 23:00:44 +0000
Manifest this update: Sat 28 Jun 2025 23:00:44 +0000
Manifest next update: Sun 29 Jun 2025 23:00:44 +0000
Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: QCIsattnduSQ+dd/0zdvejiDkiuqElv9qVMj2QnbHqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:90:d3:c2:77:5f:94:37:23:7c:aa:9d:da:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Validity
Not Before: Jun 28 23:00:44 2025 GMT
Not After : Jun 29 23:00:44 2025 GMT
Subject: CN=5616b91503e9eeeb0f66ed121bd965d87bfd0f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:78:0d:ee:9b:b3:75:28:a3:e0:b5:74:37:
f2:6a:0a:fb:21:b8:5b:4a:d7:df:a6:6d:03:15:6f:
21:9f:86:0a:99:ad:20:74:c1:0a:75:b1:e5:08:49:
f2:f6:e2:a9:85:8c:ba:d4:5f:ea:f3:f2:2f:84:79:
50:3b:f1:20:43:49:12:b2:28:53:6e:a0:01:3f:d5:
d8:10:7a:cf:f2:91:63:bb:07:93:98:f7:65:5c:89:
07:57:9a:df:93:f3:99:2a:b7:e7:a4:5c:af:dc:c1:
d0:71:40:e1:c8:bf:85:84:6d:d5:50:e2:97:88:00:
1b:de:1a:ea:e1:c8:f7:7d:74:95:2c:d0:b4:96:6f:
11:76:ea:9f:01:90:29:3f:48:7f:78:08:62:23:08:
9a:52:46:9f:b6:7a:bf:49:8e:c9:be:07:cb:2a:5a:
9f:89:01:d9:23:56:fb:ca:5f:b3:da:da:0e:5e:49:
08:e0:83:f9:b2:6a:06:43:cd:40:ac:57:34:4b:c3:
cf:6d:3f:c2:3b:1a:09:45:86:df:da:00:81:98:17:
0a:3a:59:74:36:4d:64:f5:89:e4:60:3c:93:d8:60:
56:49:e0:48:a0:f9:7d:4d:42:ce:34:cc:1c:df:09:
52:f7:de:4f:03:8a:ea:cb:c1:cb:6d:05:6a:93:ad:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:16:B9:15:03:E9:EE:EB:0F:66:ED:12:1B:D9:65:D8:7B:FD:0F:03
X509v3 Authority Key Identifier:
keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:af:59:bf:76:5b:3f:b6:d3:81:e1:45:bc:28:a5:ee:63:bf:
c5:73:be:2c:98:31:61:63:c3:44:be:a9:d3:53:b8:d9:b6:68:
ff:d7:9c:1d:53:81:58:6c:a9:d9:97:fc:45:bc:3e:d0:8f:d2:
97:4a:ca:62:18:8a:ae:f9:57:16:41:f5:bb:31:d8:4b:27:e3:
af:f0:dc:4f:50:9a:18:84:ee:82:cc:6d:b7:3a:d8:87:b4:25:
ec:c7:40:d8:35:a8:e0:57:9e:c5:00:a9:99:d4:2a:04:46:88:
05:74:fd:00:18:0e:50:3d:b4:c2:ad:c5:8c:81:53:a1:63:e6:
0a:bf:1f:73:d9:95:e0:d2:25:f2:77:1a:16:e0:c1:ec:aa:20:
de:5b:2a:0e:3b:09:78:61:2f:1c:5f:1b:21:e0:82:24:fe:bd:
a5:85:51:d8:4e:9e:52:36:eb:aa:34:05:91:64:cd:14:97:f5:
09:1e:09:07:2b:59:bc:cb:78:e6:fb:42:4a:1b:78:ab:c7:7b:
28:4d:f6:6c:20:c6:4b:86:91:b8:48:ba:85:12:d3:86:8f:34:
16:e4:15:e3:dc:dc:49:f5:06:4e:87:13:55:2d:b0:46:1d:63:
3c:5a:37:97:a9:a5:0b:44:4d:d0:60:e0:b3:54:2b:6b:4a:87:
3a:fe:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:14:51 2025 by rpki-client