Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File: wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier: vk9sPj3H8Wkx+IKy2MrReBNfO9iObGBtiegtBxtZaa4=
Subject key identifier: 98:38:D8:58:14:72:F3:5F:B9:C2:90:3B:C1:05:A6:45:FE:1B:2B:E6
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer: /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial: 01976F99A27ACE5DE95AED2629517F6F79B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number: 0A0F
Signing time: Sat 14 Jun 2025 18:00:28 +0000
Manifest this update: Sat 14 Jun 2025 18:00:28 +0000
Manifest next update: Sun 15 Jun 2025 18:00:28 +0000
Files and hashes: 1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: OiVnMkqhocU/VxDSi9pRX/aNSGXBzGDtaLixY1PU+gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a2:7a:ce:5d:e9:5a:ed:26:29:51:7f:6f:79:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
Validity
Not Before: Jun 14 18:00:28 2025 GMT
Not After : Jun 15 18:00:28 2025 GMT
Subject: CN=9838d8581472f35fb9c2903bc105a645fe1b2be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:06:bf:2f:b3:ba:d0:cb:e2:7a:3d:17:25:
dd:4b:da:8c:b6:2b:f9:62:09:84:4f:5b:c2:e0:61:
02:71:fb:b4:2a:3e:67:20:0e:ac:5e:c8:c0:df:3c:
08:ea:79:c0:a5:b0:a7:60:00:b9:30:d7:bc:17:04:
0b:91:dd:1e:52:c0:94:b7:b6:db:ba:07:c4:e4:38:
6d:98:d2:00:80:60:b9:25:21:a1:5e:26:7f:5c:1e:
0c:4b:18:bd:45:db:67:06:ee:fb:2b:73:78:45:62:
2f:c4:4a:78:b7:e6:bd:94:39:2b:9f:f1:75:8a:e2:
fe:ab:7d:5c:03:48:9a:c3:0c:7f:d2:4a:10:41:16:
1c:67:92:4e:69:c8:43:15:16:25:ac:d8:4d:bc:e8:
37:e3:a2:b3:ce:78:85:a1:b1:05:a5:ee:65:4e:6f:
7b:5c:44:ff:cc:bd:6a:ae:a6:1c:3c:b5:ff:40:37:
08:8e:42:bb:17:5d:9e:66:50:3b:b0:41:31:01:bd:
23:12:f2:72:dc:46:3c:c5:4b:8c:e4:37:08:95:ee:
14:b5:4e:2f:cf:1b:15:4c:fc:1f:f1:a7:17:a1:a0:
a0:1a:ff:03:c0:61:c9:83:f7:4f:8f:ed:7d:af:0f:
a1:80:45:3a:4d:df:d8:38:ce:3b:de:d3:ca:6e:48:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:38:D8:58:14:72:F3:5F:B9:C2:90:3B:C1:05:A6:45:FE:1B:2B:E6
X509v3 Authority Key Identifier:
keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fb:0c:49:2c:cc:02:c9:e4:02:6d:1d:1f:46:f9:80:33:c7:
5c:39:f9:03:2e:a3:bf:34:13:17:7e:5e:9f:a3:9f:ea:a9:42:
59:fe:16:1d:4e:e8:8f:76:a6:3f:5b:ad:47:63:9a:5f:e5:ce:
95:00:d0:72:ce:a6:a1:82:e0:49:9b:57:76:d5:15:6b:81:05:
6b:18:01:eb:40:99:6b:b8:4c:f4:76:f6:f9:ac:8b:be:b9:ff:
f6:89:b1:81:22:8a:bc:98:b7:b7:8a:27:d2:57:0a:ab:05:79:
7d:9b:09:1b:95:1d:f2:b1:79:1d:4f:7d:9e:f6:9e:94:07:91:
34:26:2f:14:81:99:0d:2f:c5:f4:5d:d8:c4:d3:ad:a1:9a:c5:
60:c4:41:d8:70:94:42:51:f8:b5:63:94:58:8d:40:33:54:ea:
78:f5:ba:bc:fb:da:a2:a6:f4:c6:ad:5a:1a:f0:ba:8d:63:62:
1c:02:be:36:c5:87:ac:9b:91:3e:ad:55:d7:06:f9:16:94:33:
c5:c4:15:b7:34:40:be:d7:38:78:9a:f0:6d:7a:e3:06:f3:75:
19:e2:2d:8f:03:2c:73:fe:3b:c3:2d:db:c2:8e:e0:9f:ac:fb:
2d:ae:39:a1:0a:04:1d:73:60:ba:5f:89:9d:6b:d9:ec:55:64:
cd:ef:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:45:06 2025 by rpki-client