Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File: WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier: ++vfLZPTQvmR48P8fWW8tZKb+76nhS5GAVUK44FWtF0=
Subject key identifier: 3D:F7:CA:AB:8A:09:92:2A:26:31:C7:17:60:E0:C1:1C:A2:21:07:D7
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial: 019747426EBD90FCFF1923050431270DF851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number: 0443
Signing time: Fri 06 Jun 2025 22:00:25 +0000
Manifest this update: Fri 06 Jun 2025 22:00:25 +0000
Manifest next update: Sat 07 Jun 2025 22:00:25 +0000
Files and hashes: 1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: 7OVt0ZBlywD4TOCt7scaO51wvN4lv5tnD9dz/DOBdVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:6e:bd:90:fc:ff:19:23:05:04:31:27:0d:f8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Validity
Not Before: Jun 6 22:00:25 2025 GMT
Not After : Jun 7 22:00:25 2025 GMT
Subject: CN=3df7caab8a09922a2631c71760e0c11ca22107d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:82:47:39:75:fa:33:09:0a:69:c8:b1:c2:
0b:8a:54:37:3a:d7:2a:f4:d8:98:06:3f:26:ad:10:
cf:76:35:5c:88:7f:54:14:b5:a4:b1:35:fc:8d:2a:
1d:99:88:a6:be:6e:f4:ef:98:01:1d:93:7c:39:f5:
43:c4:65:4b:0f:ab:52:9a:54:61:b3:4a:38:77:dc:
ff:4a:c8:48:62:5a:b6:18:65:31:34:fd:02:a5:d9:
77:6c:2b:c8:45:18:78:42:51:43:23:bd:94:83:97:
b9:4e:0b:22:34:8f:fd:aa:a7:8a:0e:b5:ab:fa:89:
b4:d0:f4:1c:3e:f4:72:c2:58:90:be:2c:fa:63:55:
71:44:2f:33:8f:0a:46:c8:74:e9:f7:f1:c9:39:df:
3e:30:38:10:02:4b:3a:b4:73:91:6f:cf:23:5a:c7:
cd:75:ed:05:23:44:c8:e1:49:2d:cb:ff:01:8e:bf:
57:6c:9f:7d:72:25:24:2a:19:39:c7:7f:7e:03:fd:
19:6c:60:d0:36:22:2f:88:32:7a:bb:31:4b:80:e2:
0a:84:5d:aa:28:e0:0b:ab:40:b0:50:6b:e8:77:d7:
29:5a:cc:68:23:a4:5a:c7:90:e0:0a:fb:f8:f1:2e:
b7:b2:bf:76:54:2d:a1:42:32:df:58:bc:16:ff:dc:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F7:CA:AB:8A:09:92:2A:26:31:C7:17:60:E0:C1:1C:A2:21:07:D7
X509v3 Authority Key Identifier:
keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f6:aa:6f:55:61:8d:b3:ad:2f:8e:d4:fe:85:ea:64:7e:66:
d0:08:97:7b:99:b7:d8:fa:31:18:cb:02:9b:e1:9e:f1:e6:ab:
98:5d:f6:39:c7:29:b9:a2:b3:46:08:77:1c:8b:80:fc:13:e6:
92:9b:ed:01:8e:35:87:bc:f9:ad:d6:6e:bd:31:a8:31:01:48:
b7:0a:08:df:54:aa:92:e1:40:57:b9:fe:17:75:78:f6:ae:2c:
5a:05:62:0d:ae:0d:e9:8d:42:9d:81:e9:51:29:21:b7:8b:bb:
50:e2:07:1d:e8:80:94:58:05:e2:8f:ce:fe:69:bc:a3:de:3c:
3a:e2:92:4a:95:c3:66:00:5f:ba:f6:74:4c:ac:90:3d:3d:48:
3d:a7:17:08:3a:d4:eb:27:ac:8f:68:cc:6b:9b:7d:d1:48:c9:
86:aa:ab:05:db:a6:1a:a7:d1:54:71:cf:72:93:61:4a:a8:6b:
83:f6:c0:50:25:dc:d6:aa:79:e3:e8:09:1e:27:cc:84:7a:e0:
1e:eb:b9:41:56:4a:95:ff:28:f0:72:11:68:de:5e:6d:89:2a:
46:05:2a:08:c8:23:90:92:a8:7f:99:f0:a9:61:68:4a:e0:15:
7d:59:55:a8:42:85:a2:12:1b:e0:4d:6d:ac:aa:7e:7d:b8:f7:
2e:b2:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:54 2025 by rpki-client