Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier: vwZEGE4RFha1fH2gdIyMci9zFBw3OXkfS+Q2nr+pvCc=
Subject key identifier: 5C:72:9F:6B:55:20:ED:E4:8C:C3:A4:9D:1A:08:87:3D:84:EA:63:1F
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial: 0197BBC6EC834ECD13DC8A56304E18243AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number: 135C
Signing time: Sun 29 Jun 2025 13:01:05 +0000
Manifest this update: Sun 29 Jun 2025 13:01:05 +0000
Manifest next update: Mon 30 Jun 2025 13:01:05 +0000
Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: F15N1gpdQSLhzbRFGOpXietili+qDJhaQlzIRw3nVbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c6:ec:83:4e:cd:13:dc:8a:56:30:4e:18:24:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Validity
Not Before: Jun 29 13:01:05 2025 GMT
Not After : Jun 30 13:01:05 2025 GMT
Subject: CN=5c729f6b5520ede48cc3a49d1a08873d84ea631f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:c3:49:3b:95:2f:ad:d5:a7:e9:4b:9b:33:
88:3a:78:ac:9a:25:6b:5c:fb:b0:51:21:33:5e:c3:
6a:0c:d9:bc:0c:c4:e4:bd:9d:65:5e:e4:9e:bf:85:
da:8f:e6:f4:30:cf:0e:aa:44:d9:45:b6:4a:45:1c:
c8:98:e1:b0:f4:5f:b4:0d:df:66:73:35:a9:1a:9a:
20:1d:24:d4:ee:86:ff:7c:10:d4:f2:a9:03:3b:b9:
98:15:96:7c:97:89:1f:de:2f:1c:2b:37:54:f6:59:
f3:e7:23:75:79:39:00:20:35:26:ab:a1:56:83:42:
fd:a4:06:59:ac:14:6f:0f:78:4e:53:a0:11:ef:47:
7b:1e:ab:7e:4f:98:2a:6f:fd:92:3f:cf:be:58:94:
af:d8:2c:36:7c:f6:8e:80:26:7a:ba:37:69:b7:40:
0c:ed:1e:8a:f8:7f:c7:0a:5e:92:41:a7:a9:c7:79:
7f:12:5e:e1:50:70:02:d6:19:b6:54:2a:77:e1:36:
ee:92:38:ca:ef:8d:f3:95:25:cd:a5:6d:a8:2b:52:
86:fd:e8:61:fd:7e:e9:5e:67:6a:95:66:6f:ec:2f:
02:27:2d:c7:b4:b5:86:3e:56:2c:9b:e8:3e:64:61:
60:40:b7:a4:8b:1c:1c:aa:fa:7c:d6:a6:81:7c:ec:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:9F:6B:55:20:ED:E4:8C:C3:A4:9D:1A:08:87:3D:84:EA:63:1F
X509v3 Authority Key Identifier:
keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:48:a5:69:21:59:d4:19:d7:b5:5d:94:7e:8e:63:b6:ae:
94:3a:60:5b:d4:a3:00:6c:a1:5c:49:b5:9e:bd:39:e7:8d:f9:
9a:d7:25:82:ad:4f:9d:17:77:ad:90:aa:92:09:57:c1:30:36:
42:94:60:27:7e:20:1f:f1:96:80:6a:62:3b:47:82:39:07:50:
21:06:c1:24:39:8d:9d:52:5b:c5:14:74:b1:eb:c8:2a:9a:74:
d3:59:71:43:6a:9d:2c:2e:22:67:c7:c6:f0:61:d6:01:ab:70:
17:f1:fd:2f:35:97:41:9e:e7:84:23:97:dc:a3:20:4f:77:92:
ea:98:53:cb:21:58:e7:b0:17:fd:55:80:8e:07:f3:42:c4:e2:
1f:9f:92:4f:cf:46:c0:62:b0:ee:0a:57:30:46:8d:f0:09:fd:
81:20:4a:14:e9:12:a4:40:2e:9c:29:04:d2:a4:6e:bb:24:67:
84:e8:c5:dc:ed:bb:38:7d:bc:f7:92:93:83:43:bf:1d:0c:05:
26:70:cc:b4:c7:21:d3:7b:5e:64:dc:11:ac:2f:aa:05:06:53:
0e:6f:8a:b8:e7:2c:14:cc:7d:1a:0b:22:ff:07:c2:70:71:d9:
76:f9:29:5f:9a:73:26:4d:42:f1:9e:92:72:a4:1f:6d:e1:b4:
ad:01:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:52:31 2025 by rpki-client