Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier: qX4teHyD8aGPWkb2D81NjLFJbLEh7UvqEc2aS5wCQ2o=
Subject key identifier: 9D:05:9E:AF:FC:48:2D:14:1D:80:54:34:17:DE:4C:A4:4E:F1:F4:55
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial: 01974E8E72C39FB5A2F411962962EB71C4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number: 11FF
Signing time: Sun 08 Jun 2025 08:00:47 +0000
Manifest this update: Sun 08 Jun 2025 08:00:47 +0000
Manifest next update: Mon 09 Jun 2025 08:00:47 +0000
Files and hashes: 1: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: EHfEfvivtuvH8Oj3Ktwo4rG/o6+TQUhM5WQ8miQdq98=)
2: q9zEIJSyiAtted-qK0IC2QOIvVc.roa (hash: Dw02XDclSknqFZSzdcVjqUMXTqYYIsr90SDwtwPQEIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:72:c3:9f:b5:a2:f4:11:96:29:62:eb:71:c4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
Validity
Not Before: Jun 8 08:00:47 2025 GMT
Not After : Jun 9 08:00:47 2025 GMT
Subject: CN=9d059eaffc482d141d80543417de4ca44ef1f455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:b2:ad:9c:55:c2:2a:9c:2a:62:cf:59:f0:
9a:1b:97:98:0d:43:f3:2d:9a:a3:0a:02:a6:ce:4b:
ab:fd:09:1f:94:7f:7f:0e:b4:1c:f4:fa:c2:14:ab:
bb:4b:c1:30:76:d8:a9:d9:50:fc:2f:d8:24:9f:d8:
7e:1d:e1:0e:a5:17:1b:d0:8b:51:70:32:5e:2b:26:
a2:25:02:fd:99:87:d3:41:65:0b:8b:7a:56:b1:81:
3c:78:78:f5:1c:92:03:c9:0f:9b:2c:d6:8e:99:ba:
00:56:92:fe:6a:0b:9e:d1:77:00:57:02:e5:6e:89:
1b:b6:40:89:99:f9:1c:a0:e0:8a:d1:ed:c4:0f:3c:
f6:d6:d6:c9:2b:d2:d7:8c:63:00:7d:30:0c:b4:e6:
9d:23:1d:a6:9c:6c:42:a9:a8:c4:38:53:24:d4:ea:
a8:7f:8f:70:33:e4:7f:6a:6f:4b:b4:48:d5:2c:90:
64:a5:b1:b8:fb:c3:b3:8d:52:4c:b7:6a:dc:a5:4e:
1a:9a:d1:58:4a:36:12:0d:5f:ad:5c:64:a7:75:92:
df:68:2b:7f:64:ed:89:32:16:0c:7e:95:c7:93:2c:
25:1d:28:1d:a7:16:f0:69:d5:20:9d:9c:04:c8:6a:
6b:c9:7e:58:65:72:c8:e8:88:f7:ae:3b:13:e5:fb:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:9E:AF:FC:48:2D:14:1D:80:54:34:17:DE:4C:A4:4E:F1:F4:55
X509v3 Authority Key Identifier:
keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f7:88:2f:4a:77:95:c4:8c:21:36:56:7e:44:64:8b:09:0f:
7f:70:a5:75:8b:c0:cf:bf:0f:60:ae:03:45:0b:96:de:72:77:
eb:d3:b9:ab:4a:6b:4a:cd:52:b0:ad:b7:d7:5e:e5:5d:90:f3:
84:3c:75:b6:1b:1f:a3:de:cb:3f:da:64:21:a7:7f:bf:ab:70:
9f:dc:d7:00:19:0f:05:69:76:11:23:83:96:fe:fe:fc:c1:81:
11:2f:5c:9b:62:e6:ea:a7:40:70:a0:31:c7:e7:d1:68:6f:65:
19:8c:53:5d:c3:39:f0:12:e7:e4:51:a5:90:bf:2d:db:c7:fe:
d1:3c:52:d4:0a:f0:a6:79:d3:9a:97:93:a1:f8:53:22:a4:b8:
16:0b:da:fe:f9:ea:84:26:c6:ce:a2:92:4b:8d:17:8f:0a:75:
d7:f6:74:a3:82:68:e6:74:93:94:02:73:0f:4d:84:45:9f:f5:
59:26:7d:96:07:d2:35:a9:b2:56:db:f1:11:3a:a4:c7:ed:2c:
21:de:c4:71:ab:6f:9c:fc:aa:8c:c7:28:81:4e:c9:74:49:8c:
0f:e5:b6:b8:a8:9e:8c:1a:33:27:1a:79:d3:e0:85:ec:8b:3c:
4b:49:ed:c0:60:84:16:18:0a:1b:a2:d4:76:04:36:39:39:5b:
56:db:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:45 2025 by rpki-client