
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: xGwIHSTPaX2dqKlK0QhmYbEiR579TqEJJLZPbLGs8Z0=
Subject key identifier: BA:F9:20:04:A3:03:DA:F8:79:76:2F:9E:48:59:1E:E9:A1:4D:F1:51
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 01974E573EC6EF553DF0D3D5DB13DA42B5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 0599
Signing time: Sun 08 Jun 2025 07:00:29 +0000
Manifest this update: Sun 08 Jun 2025 07:00:29 +0000
Manifest next update: Mon 09 Jun 2025 07:00:29 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: qBaThs7xi8vhYbD/322QBullf3dSvJT/pPwLrJ6B77c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:3e:c6:ef:55:3d:f0:d3:d5:db:13:da:42:b5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Jun 8 07:00:29 2025 GMT
Not After : Jun 9 07:00:29 2025 GMT
Subject: CN=baf92004a303daf879762f9e48591ee9a14df151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:3b:67:47:b7:f0:64:f4:47:54:67:d6:dc:
90:b3:8a:41:17:9c:72:63:fd:d8:e1:d6:08:df:fe:
18:31:ba:7f:44:95:72:9f:f1:2e:9e:47:9c:2f:49:
8b:d1:da:eb:04:fc:65:cf:9c:35:be:12:f1:77:69:
71:f7:10:c0:f5:59:1d:fe:cc:25:ac:8d:9e:57:46:
03:a8:4f:f5:73:25:08:7f:c0:99:36:08:25:8f:18:
d8:d8:19:72:0d:43:e9:a6:f4:fe:f9:0d:97:ea:7b:
63:66:db:37:03:22:29:7a:5c:59:4c:76:32:a5:ff:
de:86:98:61:e4:e4:ca:23:b9:98:23:df:54:66:43:
70:eb:4d:d6:54:6b:c8:59:d2:da:ab:04:40:66:48:
50:19:33:70:66:67:85:81:28:3d:9b:28:78:b0:b4:
c9:5f:b2:62:aa:ed:ca:9c:68:32:fe:89:67:fc:1b:
2f:7c:29:a7:c5:ab:06:72:70:59:93:e4:86:2f:10:
5d:5d:1b:78:55:a0:f4:d0:79:f4:b3:bb:fa:b1:b9:
77:e4:2c:1e:16:f4:31:2d:a8:88:79:31:68:3c:8f:
16:da:92:59:f6:7e:34:79:2a:d6:26:c1:c2:fe:ed:
dc:c6:20:75:c5:a5:d2:1f:87:49:f4:aa:dc:03:cb:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:20:04:A3:03:DA:F8:79:76:2F:9E:48:59:1E:E9:A1:4D:F1:51
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9c:70:e7:b7:57:ce:2a:7e:79:21:94:44:a9:4e:6e:28:92:
89:6b:0a:b0:95:49:c2:a9:3e:2b:df:dc:7a:b4:d5:c8:de:70:
34:73:36:93:9e:0f:f0:d5:93:e6:0c:39:1e:42:10:ea:15:7d:
3e:fc:c3:59:8f:66:0e:a6:b4:8d:4a:2d:38:57:4a:69:7b:33:
01:e0:07:7c:98:49:d3:8f:97:aa:84:6a:7c:63:8c:17:7b:bd:
a2:93:ca:f0:f0:84:46:c6:80:6d:93:c1:86:d2:1e:b3:f0:82:
1d:20:22:49:7a:66:4d:48:78:05:49:75:f7:63:99:ac:96:6d:
2a:d8:bd:41:38:35:70:81:cd:a2:d7:31:37:8d:92:9a:5b:51:
d3:d3:fe:93:fe:4e:d1:f1:67:c1:16:05:8e:f1:03:93:e7:a3:
e7:36:84:84:4b:b2:d4:e0:d9:8b:19:92:a5:cb:92:3e:83:a0:
c6:fd:ee:88:26:63:11:c6:ff:9c:b6:8d:87:25:82:7c:be:d4:
a5:ed:ef:79:1f:83:07:51:33:51:4c:56:03:47:f2:e1:f8:29:
bb:d2:76:57:6e:d8:40:b5:b7:3e:57:5a:89:15:b2:d4:97:e4:
e1:86:6d:fc:75:69:05:1e:99:5f:46:f9:b2:91:be:01:15:2c:
82:ee:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:42 2025 by rpki-client