Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: g0cWO7zwOXReWLQe+P6ytwV3uqqv+246RxCYCn0ci1s=
Subject key identifier: 0C:88:E2:F7:4C:29:2B:BC:5D:84:1B:37:95:58:E6:A3:D9:F9:D0:A1
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 0197B6A247D374E7DF09F408F242F3EF1941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0206
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: AwKqxDwEMAR7sZ/ZhNJhjTULgF3i5UdMwVWLYfdsPog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:47:d3:74:e7:df:09:f4:08:f2:42:f3:ef:19:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=0c88e2f74c292bbc5d841b379558e6a3d9f9d0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:c5:fc:a7:67:4f:ea:b5:f9:97:a3:81:40:
f8:a2:49:e9:38:01:02:c0:71:9c:aa:87:54:46:e3:
98:c6:84:c2:44:95:d9:66:92:1a:01:78:51:90:00:
0e:42:9f:41:1e:59:e9:3f:63:c4:e9:0d:60:f0:9a:
e1:c1:bf:47:3f:f1:42:bb:ed:9f:89:b6:20:75:cb:
31:1f:44:46:e7:5a:52:4a:9a:fc:09:53:e3:63:56:
6b:9b:2d:6f:64:eb:04:50:c9:0b:21:2c:b9:1c:8c:
aa:b5:17:bc:c9:fc:ab:b4:cd:38:69:13:ac:4c:c2:
31:30:a2:31:e5:c2:28:3e:0f:a8:e8:fc:c5:cb:f8:
43:87:7d:fc:c6:65:fe:92:51:f8:90:17:5e:ce:58:
f1:ca:6b:60:2b:ac:cd:75:35:1f:cf:c4:fe:6a:2e:
00:68:25:c3:3b:72:38:5a:76:02:c9:c0:36:81:85:
33:61:64:31:13:d4:2a:31:7d:2e:dd:2a:29:da:16:
c2:9d:f0:6b:e6:65:3c:32:64:08:e3:14:9e:8c:0e:
c3:87:13:c0:11:0a:dd:63:0d:78:d9:e1:a6:cc:cf:
5e:ea:d0:a1:b7:98:33:d0:99:dc:1e:0f:56:6d:37:
96:73:89:f2:0c:0b:a2:71:57:a4:30:5a:34:76:01:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:E2:F7:4C:29:2B:BC:5D:84:1B:37:95:58:E6:A3:D9:F9:D0:A1
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:18:18:d7:dc:55:5b:46:78:23:e5:34:35:e4:ac:4f:af:90:
f1:bf:63:c0:dc:bd:1a:ab:89:58:b0:e5:67:e9:a8:b5:12:8b:
0c:c9:76:0f:db:c2:34:62:5d:16:36:26:6f:95:79:97:00:4a:
bf:8d:da:bc:85:9d:18:f9:87:30:98:e2:bc:63:c6:b3:8d:ef:
5e:a0:d9:30:e1:82:24:7e:b4:ae:3b:28:69:a2:4d:d4:cb:55:
6e:62:4a:58:a9:f8:76:b8:52:22:a9:51:06:60:fd:9e:65:ac:
32:20:5a:b6:66:ed:8b:77:eb:09:a1:46:dd:5e:4e:f2:98:9a:
93:36:34:71:73:9e:50:7c:77:b5:a2:9a:70:51:ff:78:f6:7a:
7c:b3:96:6e:5a:66:93:81:ad:09:4c:8c:48:0e:6c:20:62:dc:
86:43:9c:b6:4c:68:77:de:da:ba:97:93:35:f7:5b:a5:57:62:
93:52:c3:8e:11:02:bc:cf:15:dd:c9:a2:d1:4c:c7:04:2b:5c:
95:90:8d:76:28:da:06:3e:2b:74:e4:71:74:cb:7c:2d:e6:93:
0e:67:3a:14:8b:60:62:63:ce:52:ad:18:3e:dc:bd:e9:4d:00:
8e:32:14:08:ce:36:fc:22:e3:07:9f:25:b6:08:ff:5d:99:33:
13:76:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:16 2025 by rpki-client