Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File: wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier: ai2N8ymPrFHZa01FPkXg8nGKxxLaTXfHiptfgaFt26c=
Subject key identifier: D8:34:17:37:87:51:C7:BB:C7:8F:DB:8A:D0:22:D3:59:61:79:32:96
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer: /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial: 0197C0486825CE7D3BD3489897356D630C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number: 0CAE
Signing time: Mon 30 Jun 2025 10:01:00 +0000
Manifest this update: Mon 30 Jun 2025 10:01:00 +0000
Manifest next update: Tue 01 Jul 2025 10:01:00 +0000
Files and hashes: 1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: ySWiCeGUxTC+5BzatEpMCtbmUaFrbhr9aNH4q3VSrAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:68:25:ce:7d:3b:d3:48:98:97:35:6d:63:0c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Validity
Not Before: Jun 30 10:01:00 2025 GMT
Not After : Jul 1 10:01:00 2025 GMT
Subject: CN=d83417378751c7bbc78fdb8ad022d35961793296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:15:9b:36:75:cd:7e:01:cb:6a:60:73:5f:
aa:d8:13:0f:c0:c9:64:51:6b:e9:12:79:04:a0:b0:
22:94:81:3f:42:ae:14:37:cf:ea:2f:b5:a7:73:80:
6e:2d:09:8f:d1:a4:0e:0e:2d:21:2b:1c:70:51:8f:
17:61:3e:ab:88:eb:df:79:06:8b:c0:35:98:68:b9:
ac:8f:0f:11:43:8d:6f:89:3d:97:ab:25:2b:21:3f:
83:57:d1:08:9b:41:2a:22:12:ea:66:5e:4f:36:d7:
b9:af:6f:bd:80:37:77:d2:81:2d:bb:9f:de:e9:bd:
50:a7:e1:db:57:40:c5:e7:2c:f8:d2:55:35:71:bf:
06:f0:06:71:10:60:7c:44:35:48:b7:62:d7:71:8a:
33:b7:9c:9e:f7:1e:15:4e:e0:99:19:31:4a:a0:8f:
07:7a:a2:49:00:88:a2:03:5e:05:22:da:f2:bd:87:
7d:65:a4:9e:c8:4b:c0:57:d0:ce:c6:52:bc:54:91:
6e:3f:31:a3:48:47:7f:83:24:81:ec:ab:b7:19:d1:
1a:07:75:5e:e5:d6:60:87:9f:bd:8f:b3:a4:ae:df:
74:64:14:03:ad:85:93:34:c8:3c:88:24:af:a1:72:
2c:ab:9b:62:44:eb:d5:fb:ae:b7:4a:95:19:18:33:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:34:17:37:87:51:C7:BB:C7:8F:DB:8A:D0:22:D3:59:61:79:32:96
X509v3 Authority Key Identifier:
keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:55:d8:46:7f:2c:d6:04:77:93:e3:9c:10:40:f5:9b:eb:e3:
72:56:de:1c:c5:bf:41:58:bb:33:9e:58:46:81:58:fa:4b:2a:
04:db:fa:dc:a5:c9:93:90:e4:57:9b:be:a5:b6:73:19:09:ac:
0c:9c:5a:ce:f2:f8:4b:d3:cc:fd:c3:22:13:bc:d1:76:b2:67:
52:d0:3c:49:cb:36:8f:30:f7:5a:b6:bc:f1:95:32:41:3c:4e:
fe:1d:f2:f7:09:f2:04:cb:7b:a9:27:45:98:4d:87:ab:ac:54:
73:58:68:ea:b2:36:3c:76:50:44:06:df:9a:a0:03:b0:4d:a7:
10:92:64:3e:65:57:60:b1:d4:e4:e6:04:9a:e4:ff:2d:7a:ba:
e6:9a:73:e6:27:08:92:6f:dd:ed:2d:f6:24:bb:ff:1d:c9:18:
0c:e3:91:8a:fd:c9:0b:93:af:94:ec:29:f4:6e:f6:21:83:fa:
8b:0f:ee:8a:42:1a:ca:85:c2:18:b3:f9:d8:a4:73:54:e9:f8:
a2:af:89:d7:fd:78:96:d9:69:61:72:f5:be:90:06:08:bd:a4:
6a:46:5f:86:06:c5:08:59:65:eb:16:1a:d7:8a:84:4e:82:84:
a5:76:5d:1f:da:ac:b2:21:f4:66:e2:73:c2:7c:ea:9e:f0:c3:
68:8a:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:43:37 2025 by rpki-client