Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier: wiUFZy6y4bgMj5po5jTSpC9g5LMPacEIgrwIFt2xcCA=
Subject key identifier: 88:48:96:6C:AC:66:62:A1:25:1D:D3:78:F8:F4:0E:2E:EC:C5:AC:B2
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial: 0198D6CD8DB4A0F0FCC86F31F8DB04ED2484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 12:00:51 +0000
Manifest this update: Sat 23 Aug 2025 12:00:51 +0000
Manifest next update: Sun 24 Aug 2025 12:00:51 +0000
Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: mUpNCG5pCz45rDZYJBinwjvS5OBl5N1babZ3DCb+374=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8d:b4:a0:f0:fc:c8:6f:31:f8:db:04:ed:24:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
Validity
Not Before: Aug 23 12:00:51 2025 GMT
Not After : Aug 24 12:00:51 2025 GMT
Subject: CN=8848966cac6662a1251dd378f8f40e2eecc5acb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:7a:3b:91:0a:94:d2:0f:64:2f:aa:77:92:
f4:c5:09:2d:dc:fb:29:92:0a:c8:df:6f:4b:d5:f6:
9a:13:c3:7f:ed:69:db:72:d3:98:42:ed:84:b7:0b:
57:73:fc:22:32:89:63:03:2c:69:c0:97:b9:01:d7:
c3:64:e4:d3:c2:39:f3:dc:ff:fb:be:c4:f8:12:fc:
17:b1:2c:4f:94:57:25:c6:35:13:36:f6:96:1f:67:
a4:f3:59:ce:ca:aa:7c:01:b9:11:c0:24:91:e3:78:
fe:a0:e8:c6:10:74:ff:f1:81:9d:3c:1b:bd:55:eb:
2f:33:dd:e1:41:69:e7:ab:da:27:11:11:61:12:c7:
17:9e:86:26:86:93:c0:fa:25:aa:18:fd:2b:a1:c6:
cd:19:9e:e2:12:a2:53:40:24:da:ac:8c:75:25:b8:
4f:75:fe:d4:13:4b:2e:5f:7f:01:5f:ef:14:47:43:
45:7f:5d:f1:df:39:9a:14:98:5d:b3:e4:1e:55:01:
1a:5b:fe:d4:53:3c:b9:ab:43:ce:5b:71:d2:f5:77:
52:d2:6d:c8:0a:26:83:7d:23:e1:eb:13:8a:90:81:
88:12:53:b9:32:25:ad:6d:ab:ff:ba:fb:78:d3:c1:
92:2a:a7:40:b7:f2:33:9e:17:91:36:d5:43:89:d8:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:96:6C:AC:66:62:A1:25:1D:D3:78:F8:F4:0E:2E:EC:C5:AC:B2
X509v3 Authority Key Identifier:
keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c6:5b:d7:f6:10:85:f6:ac:d2:e1:a7:e0:48:47:05:c1:8a:
c1:08:28:9b:fd:0a:31:3d:1c:7f:69:98:ba:70:08:db:1f:2c:
23:0c:21:a0:4b:6b:7b:c9:f9:91:57:69:09:e4:bf:63:b9:18:
f9:1a:89:5f:fc:6e:47:cc:64:71:9d:1d:71:cd:ba:3f:14:93:
b4:e1:0a:84:2c:d1:51:9a:d1:4b:80:94:18:44:5d:ed:66:d8:
04:1b:ef:7d:a8:7d:62:4c:8b:aa:85:87:b2:fd:ba:0f:51:cc:
94:78:cd:7b:9f:70:b8:90:7d:00:78:d9:9b:25:00:d3:de:82:
32:c4:66:65:1f:19:cf:4c:4b:97:d7:a4:35:2d:cc:6d:ae:53:
23:fb:2a:24:c7:24:71:94:24:0b:a1:77:01:55:59:4b:ca:b3:
59:77:61:4a:e4:d3:e4:10:34:00:fe:b7:62:cd:64:1d:7a:0a:
2c:6c:16:1b:a2:6d:aa:78:6f:91:e5:0a:c5:bc:26:51:42:a8:
ac:e7:db:74:5b:e4:11:32:68:b3:68:0d:f3:68:0e:50:19:62:
8d:12:69:d7:60:21:94:1a:43:e9:f0:d5:26:b5:9c:4f:9c:b5:
27:2a:a5:88:43:43:98:81:62:d8:8a:3f:bd:c4:64:aa:57:32:
86:4a:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:34 2025 by rpki-client