Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier: RjbFAWTc3vMlEs1zRe2xlas9o2LfkG2bS6HEfr2Wfwg=
Subject key identifier: 37:2E:3E:30:7A:FA:56:D1:0A:03:1E:E0:A1:17:DA:80:86:57:34:0C
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial: 0197B70EFD1AB03F8A92464089831B1056A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: wFi575guAFZ/bqf7hZcZcuCcou507S5d4Yf5/iH0urE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fd:1a:b0:3f:8a:92:46:40:89:83:1b:10:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=372e3e307afa56d10a031ee0a117da808657340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:1b:08:f9:4e:40:70:d7:cf:0b:e0:b7:1b:
14:68:76:73:6b:9c:da:72:7b:ca:63:d2:18:f3:63:
8a:ec:5b:ca:9f:cf:1a:7c:63:2b:14:a9:d4:e8:9c:
9a:c3:af:b4:c0:8e:b8:e4:9d:b3:76:cb:59:d2:50:
c5:27:74:a8:f9:d5:7a:82:7c:29:02:0a:60:c6:7c:
e9:8e:e2:87:9f:33:2e:46:b3:42:32:23:8b:c7:11:
cc:02:25:2d:14:e9:b2:92:b5:76:12:13:dc:ad:68:
c9:7c:36:9e:60:b3:25:da:4c:6c:48:ff:66:42:1e:
ae:26:00:d8:f1:e4:cd:d9:a4:98:9e:b7:ba:6f:9c:
97:a3:88:fb:96:eb:75:ff:9e:12:22:5b:26:6c:01:
fd:c7:30:28:b7:15:bc:fb:a6:60:48:2f:eb:17:8c:
ca:11:4c:51:22:a5:a5:d5:19:1e:8f:8c:59:4b:23:
3b:70:cb:35:29:ba:b9:c3:53:2b:88:16:10:7c:eb:
ee:57:80:b0:f2:28:4d:59:df:42:89:9a:ad:ea:ab:
c1:a6:87:1f:41:6b:0e:ef:8e:bf:d3:13:d8:aa:77:
51:31:ea:16:60:6a:af:8b:2c:f9:01:8f:20:c9:de:
89:d0:40:fd:a7:31:05:24:8f:df:ad:01:f5:d4:b2:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:3E:30:7A:FA:56:D1:0A:03:1E:E0:A1:17:DA:80:86:57:34:0C
X509v3 Authority Key Identifier:
keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e9:78:df:cb:bb:43:b9:ce:90:14:ce:24:94:59:28:33:bd:
ca:56:a9:44:a3:b8:54:e8:6c:3a:a4:a2:84:6a:f5:22:ac:86:
5b:56:60:d3:f9:bf:e0:6b:71:72:e5:90:48:b9:9e:19:5b:c7:
ca:b7:64:7a:de:fb:48:15:5f:e1:02:a0:e7:8f:84:8b:30:55:
4b:ae:01:c6:a8:d1:33:c6:9e:0c:46:7d:29:d8:c4:e9:88:8c:
53:68:8f:cb:17:d1:d4:96:16:88:08:b2:7b:a1:06:7c:c7:26:
b9:3a:0b:fa:3a:75:a5:05:90:af:99:0b:3a:fa:17:41:b3:fe:
ff:b9:3a:ac:45:e3:12:6b:c5:f4:9a:45:1e:41:e3:ac:af:08:
a8:d7:e8:5a:ea:25:3b:0b:57:65:fb:cc:99:39:ee:81:6e:e6:
39:37:01:e7:3d:ce:66:dd:64:67:92:c6:dd:12:5e:07:cb:af:
d5:5f:8b:63:bb:3e:02:31:ea:88:50:47:51:c2:38:81:27:fd:
31:0f:cf:6d:ce:39:3f:00:21:a7:57:5d:9a:2a:66:f3:d7:a9:
6f:7f:59:b6:a1:63:b3:f8:80:1c:15:9c:79:9b:fb:dc:55:e3:
d6:83:a1:ff:f4:4e:89:16:8c:b1:c3:c7:39:2e:73:b7:59:64:
fb:7b:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:00 2025 by rpki-client