Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: wBy0JMbutWXOZmMsFU+99zsNmWtTdsBrnomvUT32tKo=
Subject key identifier: 34:45:D1:0F:4E:F8:6D:E9:FC:B8:14:E5:83:19:27:03:CE:0F:D5:A5
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 0197B7EA248DEF4650434E6486303FBAAB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0BE2
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: UqqZC7m645i5Eau8bdFmTKVDuyUWl7beEYIodTDubmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:24:8d:ef:46:50:43:4e:64:86:30:3f:ba:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=3445d10f4ef86de9fcb814e583192703ce0fd5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:4c:e5:90:8d:9e:5f:e6:02:88:b2:15:3f:
aa:02:26:0a:f1:27:ae:ed:c9:60:7b:69:16:0e:ab:
af:ed:65:cb:2f:f2:fd:f7:3d:16:a2:cd:96:c7:28:
8e:e0:44:41:ae:c9:b6:8f:6d:2b:ae:8e:5e:69:ee:
7b:76:b0:5c:f7:81:f8:e0:bd:47:9e:60:3a:9a:7b:
39:6a:7f:ca:02:ee:aa:64:f3:c0:ec:97:6b:c6:9c:
ca:78:f0:e3:ea:55:ba:48:9f:48:ce:7f:f1:b4:bf:
b9:00:64:33:24:cb:96:89:33:7f:89:a4:8c:e3:52:
2a:5f:b9:fa:a0:8d:83:95:34:37:0a:2b:9c:fc:e6:
df:81:7e:be:4b:d4:3c:26:b6:20:56:6b:8e:90:11:
21:24:a6:d4:0b:35:a0:8d:61:02:80:1d:9a:cd:21:
15:42:0d:cd:8c:bb:0a:e1:d7:e3:52:b0:77:84:28:
8f:11:10:13:37:70:0a:ac:92:7b:be:be:af:18:f3:
94:e4:7c:35:c6:42:41:b9:8c:37:40:2f:c1:cf:e5:
a9:44:f6:f4:10:4d:8a:d1:c1:91:61:15:05:d7:1b:
73:ec:b3:e4:c4:27:d2:a7:2c:ff:c8:fb:b2:76:71:
08:51:a5:a3:32:51:4e:4a:7b:55:b1:51:13:42:9d:
fc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:D1:0F:4E:F8:6D:E9:FC:B8:14:E5:83:19:27:03:CE:0F:D5:A5
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:30:cf:74:15:59:00:a3:db:2f:c9:b1:f0:74:0f:1d:76:7c:
65:df:94:2e:6b:fe:aa:e0:d9:5e:22:d6:30:62:ca:6c:50:76:
98:f9:90:6f:72:a3:5f:44:9a:9c:50:16:96:18:b9:b3:06:f8:
0d:5b:d9:ab:61:85:0b:7d:cc:95:99:3b:bf:58:ac:94:6e:f2:
56:eb:7c:e2:b8:97:dc:e3:cd:ba:c5:be:29:7d:64:c1:3e:bc:
5c:32:05:42:bc:4a:ec:c7:a5:67:30:c8:52:d0:fb:f2:3d:19:
9c:5f:43:f6:c6:41:59:21:78:6d:10:2b:61:7b:f6:f2:3f:79:
2a:86:64:e4:7a:01:5d:c7:e5:7a:39:7b:2b:22:84:62:27:18:
28:4e:26:68:d0:56:98:9e:94:f1:36:d4:c1:3a:88:ba:7f:b5:
df:e4:8f:1b:ee:30:37:2c:16:e8:f8:a4:23:16:01:ea:79:25:
01:14:ea:a4:b0:ea:c4:df:11:a0:b1:18:c0:53:5b:fd:ba:5a:
3e:32:f1:c5:7e:17:ea:2b:fc:85:b5:26:46:64:56:78:b8:93:
62:51:45:f4:ed:7d:1b:4f:59:cc:bc:26:9a:d9:fa:66:fd:48:
37:c0:95:19:5b:09:e8:c5:90:ef:04:9d:62:29:04:dc:ac:9a:
12:02:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:13 2025 by rpki-client