Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
File: 1-Wa0UKbR3EL4Td28NLTovztI2E0.mft (raw, json)
Hash identifier: WlPcE5Ff2qWJoegyQSWMce+WxuWA6gy0Z18WEJIL2vY=
Subject key identifier: F0:E4:BE:53:2D:53:8C:BE:B4:EC:B4:03:84:74:91:CE:2E:04:26:BE
Authority key identifier: F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
Certificate issuer: /CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Certificate serial: 019750B39E75A0DBE299936BE2ED023594D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
Manifest number: 0334
Signing time: Sun 08 Jun 2025 18:00:38 +0000
Manifest this update: Sun 08 Jun 2025 18:00:38 +0000
Manifest next update: Mon 09 Jun 2025 18:00:38 +0000
Files and hashes: 1: 1-Wa0UKbR3EL4Td28NLTovztI2E0.crl (hash: BSU9x133B2xsHzT+UEfoGtYnMKSzjdmVez9T5mq/6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:9e:75:a0:db:e2:99:93:6b:e2:ed:02:35:94:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Validity
Not Before: Jun 8 18:00:38 2025 GMT
Not After : Jun 9 18:00:38 2025 GMT
Subject: CN=f0e4be532d538cbeb4ecb403847491ce2e0426be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:81:17:2a:e8:77:62:78:3b:0e:6e:64:d5:3c:
09:36:c2:eb:d4:bc:0f:8e:02:a8:33:a7:62:6c:66:
d4:9f:7c:58:0b:3d:11:3c:9c:fd:87:48:ac:e3:f0:
b9:1b:c1:2c:87:b7:b1:30:8c:60:b0:7c:3b:70:78:
ca:73:b1:81:96:9e:3b:1c:b2:9d:fc:89:d6:6d:57:
d2:88:92:1e:27:f1:02:04:03:94:ee:e9:3b:3d:fe:
b0:3b:e2:5c:59:81:40:5d:fa:30:1b:13:7d:ed:a0:
65:1b:b9:8e:30:3c:c8:1f:e8:b6:61:14:3a:15:b4:
1e:31:10:dc:1c:46:b7:c1:9a:cd:ef:3a:3f:bf:aa:
59:2e:92:48:cd:87:98:b4:ca:73:fa:44:a9:77:e9:
72:ef:b3:d4:af:ad:0b:79:bb:cb:01:3f:13:46:82:
90:f8:a7:d8:06:a9:8c:e5:21:94:11:e2:f7:07:75:
9a:51:60:20:5a:34:c5:e9:45:14:b1:2c:b6:5c:10:
f7:f4:41:5e:7f:bc:8b:06:54:ef:b3:2f:ba:7c:be:
9f:62:0b:ac:4e:22:9d:88:fb:82:01:9e:01:64:53:
fd:93:38:52:7d:d9:1e:9c:1e:0c:c1:91:de:40:4d:
fd:39:52:32:3b:0f:01:3f:6a:6b:21:3b:d1:a4:63:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E4:BE:53:2D:53:8C:BE:B4:EC:B4:03:84:74:91:CE:2E:04:26:BE
X509v3 Authority Key Identifier:
keyid:F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:61:38:3b:94:33:aa:a1:09:4a:a5:30:d5:1b:95:32:f0:
f0:87:8d:ea:27:e2:2b:7e:63:ad:a0:b9:2f:bc:ef:b5:2a:6a:
4b:f3:fc:35:9d:b4:1e:54:5a:02:51:ff:02:ca:c0:96:ef:c3:
a8:e1:27:8b:e2:bb:66:65:8d:d4:2c:39:9b:50:89:f6:3c:69:
9a:16:eb:9f:a3:c9:62:6a:b5:f2:40:70:47:f6:25:05:d3:08:
4f:72:fe:d3:a9:ae:e3:cc:7a:66:90:16:1e:0f:a7:a4:47:24:
04:5e:86:24:7e:f3:10:29:7f:bc:61:7c:11:27:4b:45:b8:9c:
7f:9a:53:38:d5:44:81:b2:0b:d8:79:f2:95:65:c3:13:7b:f0:
2a:eb:74:73:ea:09:aa:ac:ab:39:56:58:3e:c9:61:08:0c:a7:
a2:3d:e6:a3:18:8d:e8:ec:ce:86:37:a7:11:12:f8:2e:de:db:
97:d1:d6:72:0b:19:cf:7b:51:ec:e9:61:e5:b8:8c:14:bc:13:
8e:6f:cb:32:55:43:9f:37:ff:d1:34:ff:e8:6a:82:1f:0a:c5:
ae:1c:ae:cb:c5:27:84:ad:fc:58:63:a9:e5:4c:51:ac:cc:20:
3d:80:a4:1b:a6:87:b0:dd:ac:6e:43:42:43:4e:6b:b2:07:46:
bf:ff:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:27 2025 by rpki-client