Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: Srayp1j8dkRs/Je+hR9YFN6VrHgLU4EgydEy4EZv7e0=
Subject key identifier: D8:27:8D:DA:75:C5:AB:7F:ED:75:C5:63:4D:CF:44:38:6C:07:AF:70
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 01976FD0CD81DBDD453BBBFE5CBD1CC136E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 0EE7
Signing time: Sat 14 Jun 2025 19:00:44 +0000
Manifest this update: Sat 14 Jun 2025 19:00:44 +0000
Manifest next update: Sun 15 Jun 2025 19:00:44 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: NU8z/XTpWEF04yL2FJcEO20K1NAX9jqxwP3VXstBsI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:cd:81:db:dd:45:3b:bb:fe:5c:bd:1c:c1:36:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Jun 14 19:00:44 2025 GMT
Not After : Jun 15 19:00:44 2025 GMT
Subject: CN=d8278dda75c5ab7fed75c5634dcf44386c07af70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:23:10:cd:67:df:28:1d:7e:c1:e9:cb:15:
71:f4:90:19:9a:ac:a3:e1:35:08:bb:5b:b8:de:bf:
cf:cd:dd:3a:e5:0f:3f:68:07:ed:e1:5d:77:b1:a3:
d5:db:e5:1e:13:9c:a0:32:57:8b:41:36:eb:ca:7c:
d9:46:68:1c:b9:64:84:93:28:7e:fe:f7:26:93:a7:
d3:a9:89:44:07:c4:16:8b:5c:ad:64:29:e9:18:89:
35:3c:14:06:a8:35:e6:9d:f3:4a:54:9e:d6:5d:dd:
bf:54:98:f4:ce:bf:2a:6b:40:1e:99:20:8f:a9:3e:
e8:75:86:29:77:78:36:73:00:ba:dc:b4:36:89:84:
e1:3c:d6:e6:bb:2c:0a:61:a8:4d:c1:50:13:a7:1c:
50:7a:2c:2c:8c:c1:84:51:86:29:e2:a2:50:6f:b1:
5a:59:8d:4e:41:33:1b:04:ab:86:6d:85:aa:9d:96:
4d:df:3f:48:ac:b2:20:0b:f3:56:b3:88:0c:31:d5:
e4:22:7f:b8:ee:c7:1c:da:b0:50:58:95:42:1b:57:
02:ea:79:5d:2d:94:5f:71:fa:72:08:19:14:fe:79:
42:a9:55:3a:ee:e9:cf:57:b3:16:c9:78:c1:dd:b3:
0a:6a:72:f5:36:00:52:89:e6:e5:b4:02:ac:61:5c:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:8D:DA:75:C5:AB:7F:ED:75:C5:63:4D:CF:44:38:6C:07:AF:70
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:95:4e:8d:f6:e8:a7:37:e5:23:43:69:ad:44:cf:43:21:68:
4f:1d:e3:f0:da:41:ef:f1:aa:3f:ac:b1:1f:92:64:4a:0a:3f:
67:68:0b:a7:ef:d9:50:2d:48:3d:95:f0:3b:28:0b:ca:55:ee:
fc:28:e7:30:1c:27:8f:54:4f:4d:3e:cb:00:16:4b:b7:37:4d:
56:09:29:d4:0b:d0:8e:4a:c3:c8:d2:4e:a5:2b:49:e5:4b:7d:
a9:32:0a:5f:7d:17:78:ed:c2:c2:6a:03:32:64:93:b8:fc:93:
f6:bb:f4:66:e8:d3:72:64:48:f3:6d:26:48:f7:26:5f:a3:6f:
c7:b0:d1:f1:04:9a:68:cf:14:20:3c:95:0b:04:81:70:02:24:
71:7b:16:8b:ca:84:36:7f:2e:99:d0:29:c5:9d:49:c1:de:03:
e2:5f:01:64:93:20:2e:04:74:bc:99:99:53:99:7a:95:fd:13:
f1:ca:1f:8b:10:a6:3c:76:02:60:59:e2:19:6d:fd:e2:8c:84:
43:ee:95:bd:50:1a:82:46:69:d2:f6:bb:17:6e:b9:01:e2:e4:
1f:c1:ed:6d:9b:08:12:6f:fe:3b:63:0c:2e:8e:ae:93:83:63:
71:e7:5a:80:4a:13:27:17:f2:31:bf:a5:5b:f6:f1:f2:9a:6c:
e4:0b:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:20:49 2025 by rpki-client