Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File: wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier: i2NAoZqT32Ken2dPXT/fhIL6noELovNW1oHX3GidGDU=
Subject key identifier: 14:C3:48:D1:A8:4E:06:16:FF:6A:08:AF:AA:31:B2:68:85:7C:3D:6F
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer: /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial: 01974A7B6033AD369B03C2D1ADA5AFB09D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:01:28 +0000
Manifest this update: Sat 07 Jun 2025 13:01:28 +0000
Manifest next update: Sun 08 Jun 2025 13:01:28 +0000
Files and hashes: 1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: QfpUAQkmGmT50yCglHc2ZeMARPdie7B9MVXjohbOTd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:60:33:ad:36:9b:03:c2:d1:ad:a5:af:b0:9d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Validity
Not Before: Jun 7 13:01:28 2025 GMT
Not After : Jun 8 13:01:28 2025 GMT
Subject: CN=14c348d1a84e0616ff6a08afaa31b268857c3d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:fa:55:c0:02:f9:f3:a8:dd:c8:9c:21:f5:
1c:8a:78:3c:2c:70:06:b2:10:2d:69:c5:69:d5:ee:
18:fa:05:a8:0c:fd:e6:98:0d:23:e9:f6:e5:28:16:
33:fc:1b:7a:a4:0a:84:e9:4a:d5:95:34:41:15:97:
37:43:06:be:1a:b1:2e:ef:f3:3d:5e:05:02:de:de:
fe:6c:59:96:28:22:55:74:45:49:37:5f:93:0e:64:
58:c1:db:ee:44:5a:1b:a4:57:da:bf:1e:ba:11:66:
02:d4:10:dd:4d:d9:85:16:17:84:aa:86:df:9e:d9:
55:f7:b9:5a:b7:12:55:e9:a3:4f:46:86:04:2e:6f:
40:ee:f5:48:c6:85:02:7a:4e:f1:f0:4c:f5:48:80:
b3:40:d0:24:9e:12:15:10:ca:ff:64:08:ef:d4:6b:
9c:32:6b:86:a8:cc:10:24:16:6b:7a:8e:c6:bf:d4:
aa:73:01:84:e0:d7:52:e9:00:9f:b3:c9:00:36:0b:
3c:e8:76:f9:5f:ff:29:a4:3f:6c:b7:4b:57:25:9a:
af:14:8b:25:a2:8b:da:e3:90:66:70:0f:f2:ac:5b:
c5:19:ad:44:82:ba:1c:d5:13:1e:0c:7b:d3:33:0b:
e9:c2:8f:34:57:d9:3f:97:e9:84:0b:24:81:cf:a5:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C3:48:D1:A8:4E:06:16:FF:6A:08:AF:AA:31:B2:68:85:7C:3D:6F
X509v3 Authority Key Identifier:
keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:e2:ca:5f:4c:04:3c:4e:9e:39:6b:85:da:c2:ee:72:db:
18:26:96:6a:56:b1:45:5d:80:3c:10:30:0b:e6:02:76:d2:11:
e0:f3:c2:7e:7f:d6:8f:e2:02:63:d5:59:91:d5:b5:52:f3:00:
87:79:d4:02:ee:e4:09:41:23:85:c5:b3:fe:ab:eb:53:27:c7:
a9:d9:f4:e7:71:36:c9:f4:6d:6f:ea:1b:7a:1e:db:ea:7c:33:
29:56:cf:25:b0:5c:0e:c7:33:ee:a3:f5:76:82:ca:14:07:aa:
74:9f:95:4c:78:92:ba:62:ec:13:ef:c0:f3:62:d1:d9:01:69:
3c:74:b3:58:43:50:49:07:7e:fd:df:69:8a:87:1a:ce:b7:f8:
96:d8:55:34:4d:d7:e2:08:4d:17:07:8b:46:88:03:9e:28:ad:
34:ac:52:f5:01:52:bc:a1:69:3c:c9:bd:07:89:b4:e2:89:e5:
a1:51:d8:32:3f:f7:84:28:47:17:96:4b:4a:45:70:44:c2:67:
10:5b:c8:d9:d7:66:41:cc:92:ac:bb:68:73:7c:83:51:73:a2:
b3:38:fc:7a:ce:43:b8:f3:1d:53:62:ea:7d:c1:d6:b7:35:fe:
9a:25:54:9d:c6:23:17:18:5b:ac:fa:ed:be:81:53:ad:32:d2:
8c:aa:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:51 2025 by rpki-client