Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: 9vs7ByzBhUAtiO3vb9AKT8gz/sPLb7RF8Ll/nbjZoqY=
Subject key identifier: 15:69:19:62:4A:2D:84:F8:F4:4E:1D:16:D4:CD:8E:ED:0A:E6:FB:74
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 0197B88FA17CF9ADC20A9FC9C537EB02A4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0A2C
Signing time: Sat 28 Jun 2025 22:01:50 +0000
Manifest this update: Sat 28 Jun 2025 22:01:50 +0000
Manifest next update: Sun 29 Jun 2025 22:01:50 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: 2YWeVU6wTtmOJqv0sWlzG66hH9BOKSCMsz/mYPgoohw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a1:7c:f9:ad:c2:0a:9f:c9:c5:37:eb:02:a4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Jun 28 22:01:50 2025 GMT
Not After : Jun 29 22:01:50 2025 GMT
Subject: CN=156919624a2d84f8f44e1d16d4cd8eed0ae6fb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:8b:a9:0d:68:06:ff:c1:f2:97:0a:6a:c3:
bd:a6:a3:bc:0b:ad:0b:df:9e:f4:5e:9c:d5:61:1c:
91:dc:00:5d:00:82:a2:23:be:02:0b:c9:a0:7c:7e:
30:50:47:95:26:0b:17:b0:0d:11:76:f8:d2:34:44:
0f:ed:8c:df:d3:9d:c2:a4:5b:83:82:ab:b7:3b:28:
8f:31:d9:07:8c:89:86:63:e0:65:66:1f:0e:89:04:
04:e5:5e:3a:42:40:3f:22:55:3b:fe:e2:fe:18:13:
f1:57:6e:13:3e:e8:ac:3b:a1:02:54:9a:29:15:5a:
87:07:3c:35:ff:79:2a:aa:de:78:3d:13:bf:38:29:
40:67:b4:64:27:be:82:16:ef:a4:28:63:ba:51:94:
54:b2:aa:0a:d6:5f:56:1b:e0:8f:e6:e4:f2:49:8e:
a3:4b:e9:70:bd:e2:2f:87:67:a3:5e:d3:49:9f:70:
03:19:c1:b1:f4:ac:29:75:09:38:65:7a:fe:3f:73:
1b:88:17:2e:f9:31:c8:19:92:33:9a:cd:31:9a:55:
2e:26:4c:51:39:e9:05:50:23:27:91:d7:7e:b2:f0:
f4:5c:eb:14:39:e1:83:4a:c9:24:ed:40:de:ad:6d:
a4:51:d4:5b:6a:1e:53:43:2b:53:0a:3b:24:a5:69:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:19:62:4A:2D:84:F8:F4:4E:1D:16:D4:CD:8E:ED:0A:E6:FB:74
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5c:b5:f5:de:d6:fa:50:60:fb:d3:f0:79:f7:d5:ed:ef:11:
c3:79:21:1a:27:e1:72:84:f2:8a:9c:2f:ea:66:c2:e5:37:e4:
fc:2c:4c:33:2b:fb:f6:6d:0b:11:4a:c9:48:6c:6f:ad:e3:de:
83:09:e9:80:50:2b:6a:48:b6:a8:50:e1:46:03:21:5f:3a:71:
c4:49:03:2f:d2:18:39:bb:61:9e:5c:3b:2d:bf:35:22:86:30:
9a:7b:bc:9a:b3:86:83:e1:20:0d:33:f7:78:bd:39:bf:b5:9b:
45:91:73:59:14:83:7c:f4:2d:6b:84:e3:1b:1f:8d:c1:c8:d9:
ab:fb:7f:2d:8a:23:c0:37:c1:0d:e7:8b:1d:66:e1:fe:6f:a2:
67:1b:63:37:e5:21:32:2f:f2:5a:37:51:28:8a:1a:4c:b4:3e:
32:8a:cd:3e:ce:f6:d3:95:da:14:25:4a:04:7c:99:72:5f:92:
40:19:3f:7d:1c:f8:72:9a:15:d8:f7:fe:c3:50:b5:20:36:b4:
8c:a0:12:32:bd:d8:87:66:43:64:69:70:26:87:ee:6c:95:5d:
7f:7f:ed:92:99:00:6d:f2:2c:39:18:72:c1:1a:a4:de:50:ce:
35:a7:fe:fe:70:bc:b1:b7:09:66:54:42:53:6d:00:fb:da:c3:
55:1a:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:18:57 2025 by rpki-client