Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: c25MzPH7V6Qrn49LV+MEBfZZLdEvs/RjDWXX2Wz6wmA=
Subject key identifier: A3:57:B9:AD:C3:FD:B2:37:BF:FB:88:5A:E8:AB:FC:59:91:EE:99:A6
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 0197B6A087BBD018C3057120C215BDD36C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 06AD
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: 2c9O9O++3jO/9cscyViOTa7tys8NrcK6R2FstAs6hIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:87:bb:d0:18:c3:05:71:20:c2:15:bd:d3:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=a357b9adc3fdb237bffb885ae8abfc5991ee99a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:f1:a5:dc:d8:d6:39:87:79:69:26:c7:bf:
0a:97:11:71:c1:d4:0d:11:27:03:ec:86:1d:63:e9:
7c:94:5c:c0:5f:bf:60:f6:06:af:65:d7:b0:2a:e4:
bd:cc:9e:75:0c:ec:60:01:e2:68:3e:f3:36:fe:8a:
68:45:68:bb:05:1a:3c:80:5b:31:2b:bf:bd:a3:ab:
ef:ec:35:1d:ef:93:ab:5d:8a:d9:96:c6:12:1d:c5:
4c:88:3a:c5:17:b3:25:22:1c:d0:7f:cc:a4:81:cf:
77:81:2a:f3:98:c5:9a:c0:05:96:13:c5:0a:26:b4:
73:24:95:da:34:c9:af:c6:f7:ac:ba:3b:8a:da:89:
f7:11:e3:02:e5:a3:f8:8d:83:12:9b:ad:bc:05:2a:
cb:58:c2:90:67:1b:0f:f6:d6:3d:e9:ce:b0:12:94:
19:f2:46:9f:10:e2:a3:6d:9f:f7:01:d8:e9:3c:92:
c7:18:e1:22:d7:76:c6:f0:e6:ac:73:48:03:01:17:
be:66:82:6f:e7:86:82:fa:71:1d:ba:a8:91:d3:98:
62:2a:5b:82:5c:89:b2:9e:fe:53:f1:2a:f3:8b:4e:
4c:65:97:33:86:81:b2:4c:89:e3:6c:49:07:a9:eb:
0b:d1:7a:f1:4a:51:30:7c:b0:05:1b:e3:8a:2a:90:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:57:B9:AD:C3:FD:B2:37:BF:FB:88:5A:E8:AB:FC:59:91:EE:99:A6
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ce:37:1b:a7:b8:11:b0:b9:75:33:95:11:6d:20:12:90:26:
f2:59:0d:02:dd:25:38:ab:9e:2a:09:ca:c5:d7:02:09:12:06:
ea:ae:28:fc:ed:a5:3b:bc:ab:96:9d:74:92:23:41:55:0d:e6:
d7:c1:f0:25:99:70:df:5b:ba:b2:dd:d0:3e:f5:bb:a4:43:70:
50:47:64:4a:ad:45:6e:31:28:67:08:df:d0:18:b0:bd:03:c8:
01:3d:2d:a5:8c:e9:92:25:3b:e6:06:86:fa:65:08:61:10:2f:
e6:96:87:e9:80:10:2a:f1:29:b3:78:d9:2b:b4:fe:9c:d4:62:
84:2c:48:90:3e:18:15:0c:9b:ff:8b:a1:f0:ab:a1:29:87:47:
09:97:ec:e3:b5:93:53:0e:ed:01:04:c2:b7:7d:d8:f0:ef:23:
08:e0:ce:63:5f:fd:3a:29:8e:39:70:2f:c3:a8:0a:0b:ac:90:
82:0f:43:fa:33:2a:04:fc:f4:95:89:6f:5b:55:fb:cd:3d:a5:
c6:81:00:e6:77:57:c8:34:f6:ba:8b:d9:db:52:f3:18:06:66:
d2:03:ba:35:cf:83:fd:d1:d7:c0:05:35:f3:87:b7:36:c0:7f:
7b:aa:6f:7d:ff:cb:b4:c5:21:b2:53:15:24:23:bf:2b:07:1c:
22:c6:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:17 2025 by rpki-client