Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: cVzuUnevEMTNDvP7wIdZLsl5seqysFte32/G5IkBKlA=
Subject key identifier: 96:93:2F:A0:19:ED:54:7E:3A:59:B1:4D:07:6F:C4:9E:5C:20:10:74
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 0197BA7DA726C6985FD002BDB972B8A8FB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0830
Signing time: Sun 29 Jun 2025 07:01:26 +0000
Manifest this update: Sun 29 Jun 2025 07:01:26 +0000
Manifest next update: Mon 30 Jun 2025 07:01:26 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: 2xl2Y9YfTzZjMq7Z5e2m3reBxdm8iwOZPld7L/JoEnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:a7:26:c6:98:5f:d0:02:bd:b9:72:b8:a8:fb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Jun 29 07:01:26 2025 GMT
Not After : Jun 30 07:01:26 2025 GMT
Subject: CN=96932fa019ed547e3a59b14d076fc49e5c201074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:de:49:9f:c9:78:5c:10:ff:2d:fc:98:56:
66:11:19:d8:78:e4:19:70:fb:fe:dd:42:b4:a2:61:
7c:e1:d8:10:3c:59:35:59:7c:56:47:75:e0:08:4b:
b4:42:9a:f4:18:c1:ed:0f:18:b7:3b:09:4c:4a:58:
11:0e:4f:bc:00:30:79:70:a2:11:b7:a9:65:1b:a0:
b8:28:15:e0:7f:79:5d:d5:62:e5:c7:e0:a8:2b:9a:
e5:ef:c0:97:94:2e:a4:73:2e:43:7d:7c:87:80:b9:
81:26:6c:ac:78:0f:3d:ec:67:cc:a0:09:f5:fe:1a:
2f:90:40:5d:6d:cd:27:00:78:92:39:c8:ef:98:2a:
dc:29:9d:3a:c2:8d:d6:56:28:6c:83:cd:37:83:a1:
a7:01:9a:f9:71:47:30:be:cc:8b:2e:53:f4:e0:b0:
45:de:85:d5:5a:a3:38:8e:99:42:86:01:be:11:4b:
e1:08:65:52:5e:2c:21:c7:fe:09:ef:07:a8:71:1e:
71:05:82:d8:16:e1:ab:76:8d:a4:d3:51:f4:2c:a2:
8d:1d:8e:14:ab:6c:61:26:01:36:5f:d2:6a:1e:64:
e2:c2:27:56:12:47:90:38:47:d8:bc:41:76:98:59:
3a:c1:7d:bb:c2:ac:d3:a5:ef:2f:d8:a7:00:00:e1:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:2F:A0:19:ED:54:7E:3A:59:B1:4D:07:6F:C4:9E:5C:20:10:74
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4c:7d:0b:72:92:b8:d6:e8:4c:e3:c4:76:01:5d:53:b9:64:
a7:73:d7:2b:a8:d5:10:d9:59:31:4b:04:2b:bf:56:38:9e:98:
5b:47:37:a2:9f:2d:69:f8:fb:1a:d4:79:38:58:06:8f:b0:5b:
53:09:d5:db:3b:f3:ae:75:b1:bb:73:8f:83:83:be:25:c5:96:
e4:a5:f1:a9:57:a2:c3:b0:45:2b:1d:75:16:b1:05:80:ce:7f:
01:26:12:7f:58:7f:0e:d8:39:d8:66:76:a5:11:2d:64:c4:e7:
d1:0a:cf:8d:9e:b0:8f:8e:80:cc:2f:37:f3:b8:bc:73:30:21:
2b:b6:62:8c:90:6e:3f:99:c8:93:78:05:42:38:20:63:5b:fe:
fd:cd:a4:bd:8d:05:71:f4:c8:00:6c:f1:d0:10:b3:cc:40:b5:
1b:c3:a5:4c:08:95:a5:8c:a7:90:0e:e7:74:0b:56:29:2b:31:
89:89:97:93:96:e1:52:7e:81:89:38:76:31:32:f4:17:27:b6:
2a:d9:19:a6:59:18:2b:e6:8b:cb:0f:de:6c:dd:c7:53:20:a0:
47:2c:02:4b:c9:91:e0:e4:5f:e3:f2:a7:05:e8:44:c9:47:77:
a0:ec:d7:b3:83:94:55:64:05:37:a7:21:7f:f6:5e:f7:eb:e3:
7f:ed:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:35:44 2025 by rpki-client