Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: LuCvuDuiMam4f/ssUSebPQMd/etEVKWiXnYcZ6KCovw=
Subject key identifier: 08:39:F4:BA:43:97:B5:48:AB:3B:60:49:7D:1F:9C:08:7E:C8:0B:EF
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 0197C191C0CE4D0BFAA7E6BE98071C62F8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 15B6
Signing time: Mon 30 Jun 2025 16:00:44 +0000
Manifest this update: Mon 30 Jun 2025 16:00:44 +0000
Manifest next update: Tue 01 Jul 2025 16:00:44 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: 91CeX+TLcYZFAvqoHETn5hldpmhGgWdlqNvTBg91uUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:91:c0:ce:4d:0b:fa:a7:e6:be:98:07:1c:62:f8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: Jun 30 16:00:44 2025 GMT
Not After : Jul 1 16:00:44 2025 GMT
Subject: CN=0839f4ba4397b548ab3b60497d1f9c087ec80bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:8a:6d:2d:0f:38:cf:44:c8:aa:f9:27:2e:
08:38:9a:62:57:31:05:45:57:2e:c7:77:bf:26:49:
95:cd:bd:98:70:1c:db:c9:35:b4:5c:00:20:1c:a4:
7b:f6:47:34:38:e8:0d:3d:df:88:1a:ec:0c:09:d4:
bb:68:c5:77:93:24:c1:3d:a3:6e:cb:3d:b4:2f:dd:
f8:97:40:1d:fa:32:93:40:d6:86:6a:3b:e2:7e:b8:
ab:1b:92:4f:32:ae:41:e2:83:24:fb:18:ba:34:77:
8b:a4:bd:2b:38:60:c2:90:50:a9:42:bc:b6:cb:e7:
ec:46:0f:47:d0:f8:09:88:ae:d0:4b:0d:3d:c9:4f:
95:17:73:f8:fd:e8:40:e9:57:b5:47:4b:67:0d:7b:
5a:ed:59:73:1b:c1:aa:40:76:78:31:bb:81:b2:ed:
a0:db:9c:2c:9e:e9:5e:1d:56:ac:09:0a:f1:b9:d4:
92:fe:32:c0:29:ee:7b:36:34:98:ba:5c:79:8d:98:
95:7b:ba:50:f4:95:d3:19:25:f8:20:46:ad:6e:a5:
f6:0f:ad:08:87:88:8c:f7:33:5b:cf:74:ee:1c:00:
a5:d4:bf:8c:74:ab:34:f1:0d:c7:44:93:89:a1:22:
2e:78:30:cc:b3:80:4c:9c:38:25:18:2e:a6:f6:16:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:39:F4:BA:43:97:B5:48:AB:3B:60:49:7D:1F:9C:08:7E:C8:0B:EF
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ed:7a:7f:b4:0e:a6:2b:74:a0:77:5a:75:f4:7e:f8:43:fa:
2c:a8:2a:1f:44:fb:a8:67:0d:40:20:7e:94:e7:d1:a4:2a:03:
f1:90:26:f1:27:91:27:af:27:37:10:5a:a7:13:ff:51:9e:e8:
ee:e6:21:3c:e0:0e:f8:f5:92:79:23:1b:e2:a5:0a:16:4f:bd:
6c:ec:67:e7:99:21:fe:07:5d:0d:04:f1:f4:ff:ae:34:c5:4e:
ce:2a:56:b9:78:bc:88:bc:6b:01:7a:83:5f:de:bc:5b:c9:05:
fa:14:04:08:5b:d2:f9:41:ce:3f:f5:92:7a:b3:8b:90:5b:e7:
7f:38:77:14:21:f9:89:a3:94:3a:f4:cf:6f:e1:18:09:00:5b:
10:b4:3c:2f:62:0c:e1:a3:ec:c2:2e:a2:1c:eb:c1:f9:4a:55:
ad:35:e9:78:6c:d4:64:95:d2:78:64:90:99:be:5e:63:01:1f:
55:aa:04:6d:dc:e7:f1:f8:39:41:79:c6:2e:49:da:18:e8:37:
b0:4a:5f:c8:e5:66:bb:2a:08:d2:79:27:2d:35:9e:7d:75:34:
ec:d6:ff:fe:39:97:b6:37:33:5f:ba:d1:4d:52:f2:7f:7b:50:
fd:ba:29:d2:53:fb:ac:79:68:32:27:17:12:d6:c2:90:9b:cf:
4f:dc:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:39:57 2025 by rpki-client