Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: uNYuYHMuLszZZH6JEFPaRIuDtw/4oHmA6PueZKRlbXA=
Subject key identifier: 9B:8B:52:24:85:CA:3D:32:F7:62:0F:58:A3:A2:18:22:46:97:CD:F8
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 019846D202B0427CAD66C004B6CD24C10657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 13:00:25 +0000
Manifest this update: Sat 26 Jul 2025 13:00:25 +0000
Manifest next update: Sun 27 Jul 2025 13:00:25 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: KgoJGh/9iHyOnxdKVAxSxo9MXZ1BjPIBQ+P5jinHDcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:02:b0:42:7c:ad:66:c0:04:b6:cd:24:c1:06:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: Jul 26 13:00:25 2025 GMT
Not After : Jul 27 13:00:25 2025 GMT
Subject: CN=9b8b522485ca3d32f7620f58a3a218224697cdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:37:10:0d:68:45:96:e0:be:7b:04:c8:fb:
0c:c2:f5:29:ea:11:18:5e:6c:d6:53:fa:af:17:dc:
4a:86:8a:2b:da:2e:d6:5f:a3:8b:8f:8b:ea:6e:36:
6f:0d:3b:17:26:34:91:4c:ca:75:ac:d1:49:04:aa:
7e:ce:ea:2a:0f:12:cc:f6:b8:e5:67:49:64:38:48:
44:1f:42:b9:35:f1:46:72:6d:70:b7:01:ef:c5:be:
2d:20:9e:39:f0:92:a0:29:93:bc:25:16:c9:60:f1:
6e:07:ee:2f:90:87:51:74:f6:4d:61:ae:ea:bf:63:
33:1c:62:be:ce:ae:89:a9:48:25:9b:49:eb:59:af:
69:6f:c7:6c:1a:0f:1a:ba:6b:1c:b6:21:4c:46:2c:
67:8b:44:c3:4e:a8:3e:2a:0e:0e:15:94:78:fc:d8:
5d:1d:e5:92:9b:19:92:20:78:5c:8c:14:2d:81:17:
44:39:e6:6c:f1:c0:fd:47:9e:95:7d:d1:cf:cb:f7:
7f:55:53:37:d5:7b:f7:6d:0a:98:3a:8d:67:90:66:
fd:3b:72:d3:1e:9a:93:8c:10:b1:8b:d3:3f:81:0e:
7e:d3:b4:cb:fd:71:58:d3:83:92:ba:61:fb:32:71:
65:2a:2c:9d:5a:e9:d3:04:55:e7:55:67:4b:ef:0f:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:52:24:85:CA:3D:32:F7:62:0F:58:A3:A2:18:22:46:97:CD:F8
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:45:83:40:f4:6c:81:be:52:28:aa:66:72:c7:75:a5:d7:95:
82:41:d2:d9:9b:a0:3b:a7:53:d5:e1:4e:10:9f:09:fd:2e:fc:
94:7b:c9:84:b3:ab:f1:59:20:17:72:5f:5f:34:07:8c:69:c1:
71:af:aa:dd:34:b0:1d:95:11:76:b4:9b:56:4c:52:35:25:8d:
35:2b:55:54:a4:9e:b5:d6:f4:ec:ca:05:23:18:9e:ac:83:a9:
f5:11:07:29:14:8b:a4:16:c1:c9:e6:8a:80:ba:fa:c6:f7:5c:
45:d6:7a:1e:40:6b:65:80:7b:6b:da:b8:e8:c2:f9:2e:67:0e:
16:73:0a:48:2d:18:16:ba:55:33:06:a4:33:d0:6c:67:c9:02:
57:e9:ae:ed:61:2d:e9:30:28:ff:b8:5b:d1:d4:55:9e:c0:b0:
78:36:57:67:7f:a8:d6:4b:43:23:a5:2b:85:99:f2:e8:db:34:
65:77:23:0a:1f:79:c3:c1:ec:30:28:fd:4b:1a:32:19:ab:77:
37:cc:b5:b5:e8:22:fe:ab:d4:9d:d8:68:84:3d:a5:92:a5:d5:
89:c7:fe:19:90:1e:6c:83:4d:44:37:bc:fd:6e:d6:1a:aa:10:
ae:60:1f:0c:1d:d7:76:a5:b3:15:e4:26:bb:54:b9:14:a2:f1:
35:6b:c4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:31:33 2025 by rpki-client