Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
File: W3jiiHXnMAJWzM62gfCmAIc9eVI.mft (raw, json)
Hash identifier: 27cAk3QWWTQ+liX17WmVnXczOQ8m+glacYmw3I1F7co=
Subject key identifier: 58:23:AC:A4:3B:9C:58:41:C7:5A:7E:BA:6E:AE:08:A9:F3:D6:EB:7A
Authority key identifier: 5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52
Certificate issuer: /CN=5b78e28875e7300256ccceb681f0a600873d7952
Certificate serial: 019748C32F45FB827DC16F6BF84F1D319DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
Manifest number: 040B
Signing time: Sat 07 Jun 2025 05:00:40 +0000
Manifest this update: Sat 07 Jun 2025 05:00:40 +0000
Manifest next update: Sun 08 Jun 2025 05:00:40 +0000
Files and hashes: 1: W3jiiHXnMAJWzM62gfCmAIc9eVI.crl (hash: 6wSSOCXSdjeVNLgthAomG3UgtXKvuOkzehpf8uKciac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:2f:45:fb:82:7d:c1:6f:6b:f8:4f:1d:31:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b78e28875e7300256ccceb681f0a600873d7952
Validity
Not Before: Jun 7 05:00:40 2025 GMT
Not After : Jun 8 05:00:40 2025 GMT
Subject: CN=5823aca43b9c5841c75a7eba6eae08a9f3d6eb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:3c:23:38:64:90:99:24:02:33:31:65:b4:
f1:ef:90:9b:d5:d6:76:b8:a9:1c:bc:42:75:7b:e2:
78:e9:1a:b7:0f:14:98:bd:2a:39:73:ff:d1:e3:c2:
16:a0:9e:74:cf:54:bb:86:ea:9f:95:c0:10:79:d8:
0f:10:e4:0f:72:19:34:15:ba:b1:7b:d3:e3:5b:ea:
ff:be:64:4e:4f:45:50:33:a5:6a:a2:78:70:0b:56:
db:38:e4:0d:4b:26:95:0b:e6:53:23:23:72:89:6d:
f3:1d:ae:c7:4b:de:37:88:ef:e3:ac:78:8d:ec:86:
e2:12:77:9b:68:77:68:39:67:2b:ca:a4:38:16:4d:
5f:4f:f2:b8:ad:84:1f:3d:8c:5f:15:6a:11:ce:00:
7b:7a:a3:7e:cf:18:d5:aa:f9:4a:79:26:c3:eb:46:
58:e5:3f:4f:87:8f:7b:8e:f0:3e:12:92:a3:df:bd:
71:0c:7a:7b:50:e6:5a:30:80:c7:9d:0f:d0:fe:c5:
06:35:cf:a1:9d:b8:18:99:6b:6b:7a:de:c2:0a:55:
1e:a0:16:29:1d:bd:be:10:02:79:6c:c0:b2:d6:df:
7d:ba:a9:4e:c4:a5:0b:50:9e:da:38:52:b8:d5:52:
f8:13:79:db:29:63:94:4d:c7:98:e2:d8:f4:93:60:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:23:AC:A4:3B:9C:58:41:C7:5A:7E:BA:6E:AE:08:A9:F3:D6:EB:7A
X509v3 Authority Key Identifier:
keyid:5B:78:E2:88:75:E7:30:02:56:CC:CE:B6:81:F0:A6:00:87:3D:79:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3jiiHXnMAJWzM62gfCmAIc9eVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/967137-2a8b-4f40-8ca9-638e315beed9/1/W3jiiHXnMAJWzM62gfCmAIc9eVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a3:71:df:8d:7e:d9:c2:98:a5:4a:28:28:4d:1c:d2:a3:1e:
06:33:2b:44:0d:1e:e6:0b:70:7a:c0:18:a3:95:95:a6:a5:97:
67:51:10:4e:b6:a8:3e:96:ea:b9:d8:a8:37:5b:d8:c6:86:88:
77:5b:51:35:7c:6e:b1:f8:c9:94:22:a9:0e:c5:6a:af:ac:1f:
ea:fb:60:91:a3:bf:e2:1e:09:85:39:16:2d:05:3e:d3:e6:b2:
2e:0b:dc:9b:8e:23:b7:ff:ba:80:85:2f:ee:1e:78:bf:ca:75:
bf:a8:b5:37:83:e9:e6:ad:80:9b:83:22:3d:db:c3:65:fd:30:
7e:54:af:95:2a:99:76:12:55:df:fb:ae:5d:4e:d4:c4:e1:fe:
a1:6e:23:51:34:5a:57:cc:ba:d1:ef:5f:3e:f3:f4:3e:63:ba:
68:b1:8f:49:60:42:dd:27:30:0a:2f:6a:46:3d:7c:38:fc:0b:
77:e9:ee:af:e9:37:fd:71:b3:64:ec:32:e2:00:e7:25:9c:4d:
f5:8a:56:91:a9:02:80:6a:3b:a6:a6:ef:b2:7d:a8:07:3e:12:
9a:03:34:77:14:52:c3:d8:a4:08:76:22:47:7c:02:09:d5:1e:
95:9f:69:72:ec:dc:a0:f2:1d:35:a1:03:41:e2:9b:87:30:9d:
f8:c9:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:25 2025 by rpki-client