
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier: 8IsYikC9UA6NVRgWukfBmmsc37Nx4F0CYmbn0meqhcA=
Subject key identifier: 18:21:9A:8D:ED:AC:15:4E:2C:D2:B9:6C:8C:4E:0A:F9:71:64:2B:05
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer: /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial: 019745F8D88FEEB12E850290CEAEACC45C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number: 1449
Signing time: Fri 06 Jun 2025 16:00:25 +0000
Manifest this update: Fri 06 Jun 2025 16:00:25 +0000
Manifest next update: Sat 07 Jun 2025 16:00:25 +0000
Files and hashes: 1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: iSg2kePXHR6RGp5URRmnfDhd6GmkO3jEszL/loItr2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:d8:8f:ee:b1:2e:85:02:90:ce:ae:ac:c4:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Validity
Not Before: Jun 6 16:00:25 2025 GMT
Not After : Jun 7 16:00:25 2025 GMT
Subject: CN=18219a8dedac154e2cd2b96c8c4e0af971642b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:e2:ea:1b:4d:32:f1:82:a3:8d:96:f0:40:
d5:49:3c:d2:c7:c9:7c:24:92:b0:c1:65:8e:e6:d1:
af:1d:77:3d:a8:38:e3:8e:e5:fb:57:26:b6:55:e3:
54:a9:9d:6b:e7:77:c2:20:84:42:26:60:71:9c:83:
2b:37:a8:20:5b:f4:19:af:d4:3e:fa:9b:ab:79:bb:
c4:22:4e:3a:c8:3b:0a:c0:89:96:ff:cb:35:a0:3d:
9c:ea:73:8f:a9:bc:06:b6:b2:93:36:8d:2d:7b:05:
d4:79:78:37:3e:89:c2:61:5b:44:7f:e4:c8:1c:ec:
84:5f:ce:37:75:d2:52:50:8a:7e:e9:44:72:da:e7:
e8:a6:71:b5:77:13:67:51:62:41:05:ec:3e:44:7f:
bb:88:54:a2:98:42:4c:e8:0a:29:09:59:45:5a:5d:
12:13:5b:31:fb:b8:ab:d1:a4:d4:0d:5e:84:97:64:
db:4c:8f:06:82:c0:69:cf:81:65:47:f4:2e:ed:86:
db:ae:50:17:97:4c:79:50:a3:e3:0a:b0:7d:4b:21:
93:ce:45:75:aa:21:9c:79:89:49:f5:e0:90:35:2f:
08:52:17:2f:40:f3:d7:b9:51:25:33:ab:c6:30:dc:
6c:01:6b:5a:ac:a7:f5:5e:75:0e:a7:ed:a3:e7:9b:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:9A:8D:ED:AC:15:4E:2C:D2:B9:6C:8C:4E:0A:F9:71:64:2B:05
X509v3 Authority Key Identifier:
keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:22:aa:37:70:46:01:dd:ef:b3:f1:12:42:a6:e0:68:2f:04:
81:35:e4:50:4c:ab:b6:0f:1a:53:49:cc:e3:48:db:56:7c:0a:
47:4b:6f:94:7e:3b:c6:c9:f1:84:1b:4a:a1:db:5c:cd:6f:7d:
a4:45:d1:56:a2:06:ca:dc:f0:e5:13:5a:4b:de:b6:3d:18:f5:
c6:0e:54:af:bb:a0:ac:d2:19:19:9d:5a:d0:34:93:cc:dc:a1:
c9:cd:0a:13:38:c3:8d:46:17:e0:ea:cb:36:df:08:37:e9:fb:
22:14:6d:ad:92:8a:b7:d9:19:33:cc:fa:1a:59:ea:f7:4d:19:
85:7a:bd:02:f1:63:a6:02:a2:e2:f4:19:d0:49:c1:e7:26:43:
8a:92:78:6e:44:45:bc:eb:41:4e:1f:2a:0b:97:3f:b3:b7:3c:
ac:c9:aa:7f:3d:85:3e:54:52:f7:28:f2:e3:c2:1d:04:59:15:
b9:cb:ba:2d:29:27:f0:ff:8b:ed:a2:ed:77:f6:29:dc:e0:42:
8e:0a:72:b2:75:cd:ee:ce:7d:43:af:be:bb:6d:ed:8f:f1:33:
b5:7a:54:d2:0a:51:fd:e9:0d:7b:72:15:1d:04:68:a2:c0:f7:
1f:12:89:12:0c:30:ee:b2:81:6d:ba:d6:2f:95:45:0f:88:26:
12:e4:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:59 2025 by rpki-client