Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: 3sTJvgQTbvhms+iFBNTLpytGE7qF3S7uhzdoUqLidig=
Subject key identifier: 5F:68:16:2C:26:DB:33:2E:B9:3B:A0:EE:2D:F0:62:93:00:CC:B8:87
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 0197B88FE9A8A2D60044AF0718229A0AE29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0C1C
Signing time: Sat 28 Jun 2025 22:02:08 +0000
Manifest this update: Sat 28 Jun 2025 22:02:08 +0000
Manifest next update: Sun 29 Jun 2025 22:02:08 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: f/FNkxBDdXBf9ZxQ/6SifTvjqMgCCXXmTHa8/3eQ1SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e9:a8:a2:d6:00:44:af:07:18:22:9a:0a:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Jun 28 22:02:08 2025 GMT
Not After : Jun 29 22:02:08 2025 GMT
Subject: CN=5f68162c26db332eb93ba0ee2df0629300ccb887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:38:a9:3c:33:d7:6a:7b:89:c5:64:d5:f1:
17:2e:12:2d:d0:49:91:96:8c:35:3e:4f:59:90:b0:
b0:0b:a5:9a:d6:f2:de:ee:56:33:d6:19:23:43:26:
89:21:4b:45:23:c4:12:83:27:50:ad:66:b0:8a:98:
db:6a:eb:8c:56:38:e3:95:1b:4e:76:b5:bf:44:86:
70:bc:b9:c7:09:bf:ac:bc:26:07:d7:d9:3e:7f:25:
5e:40:34:e8:e9:56:85:3d:2d:4c:9a:c3:75:04:b8:
50:2e:b5:c4:7d:32:09:84:a2:e1:8b:4e:e2:7c:37:
bd:7d:69:00:97:ac:84:1c:f3:0c:c3:fa:97:b5:05:
2c:74:b1:4e:b6:50:ef:fe:37:d1:35:8a:b7:c4:10:
6f:e3:50:f2:fa:39:51:a7:05:ed:34:2c:73:d0:3b:
95:24:eb:be:69:84:fc:14:3e:b9:b8:07:21:27:4b:
f7:fe:ae:6f:d9:96:01:2b:19:2b:42:e1:2d:23:99:
40:30:93:09:24:32:b5:9c:3a:58:f4:2c:29:58:0c:
93:6d:dc:93:09:62:e7:05:44:af:9c:cc:04:95:22:
c9:e9:0b:15:be:e2:09:20:66:c9:4b:18:07:8e:da:
a0:ae:dc:8c:00:95:67:4e:b9:f6:1b:71:00:a6:c3:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:16:2C:26:DB:33:2E:B9:3B:A0:EE:2D:F0:62:93:00:CC:B8:87
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d6:ab:f9:e5:f2:6e:cc:a6:37:57:a2:fc:57:72:83:94:96:
25:3f:6d:4f:f9:5a:a8:ab:b7:e0:b8:e3:2b:ea:3d:cb:85:41:
1b:92:5d:64:42:f8:63:77:af:87:55:cc:65:70:c7:fb:a5:fc:
19:0d:14:86:ca:eb:2b:8d:6b:74:9b:8d:63:b0:bc:50:5c:32:
ef:4c:af:85:66:4f:01:50:17:4a:d2:c9:b8:e1:cb:7e:ad:a4:
2e:ce:e5:37:07:8d:bb:eb:d3:d7:80:7f:22:b1:f5:59:c0:04:
a8:f7:7b:8c:56:48:0b:44:42:61:ce:e4:a3:7f:4c:ca:41:ed:
08:e7:e4:44:fc:a1:59:15:a0:23:c0:6e:a1:d6:7d:47:b2:ec:
f9:13:9f:ec:28:64:12:72:83:22:db:8a:d2:f0:82:6e:1f:d7:
83:cd:1b:24:dd:18:9e:b2:d4:02:be:37:37:e4:a7:72:19:d0:
55:32:58:49:32:71:ca:ba:cd:43:f5:c0:e9:91:f9:f2:0e:be:
d8:63:79:f5:51:e5:31:98:77:d3:2e:6e:5e:a3:ad:25:b0:7d:
64:78:6b:a8:9b:19:34:36:7c:4d:9d:04:3c:17:06:96:23:ec:
40:22:d8:e4:8b:42:ac:e2:ee:23:11:a0:ec:64:39:1a:62:93:
cc:19:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:32:23 2025 by rpki-client