Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: 2anRq/e+IiX6XNNFhuq/BhXGN6AtMnb6a/+GhXls/JY=
Subject key identifier: CC:85:28:A9:BD:48:87:80:4C:B6:48:08:06:24:98:E9:5B:0E:B4:E3
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 01974E575E8B4B1A645357D213C0FC8DD454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 1004
Signing time: Sun 08 Jun 2025 07:00:38 +0000
Manifest this update: Sun 08 Jun 2025 07:00:38 +0000
Manifest next update: Mon 09 Jun 2025 07:00:38 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: enx0VzEw78A0soU098OfCjFYN2700CgPmWPfdov5VzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:5e:8b:4b:1a:64:53:57:d2:13:c0:fc:8d:d4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Jun 8 07:00:38 2025 GMT
Not After : Jun 9 07:00:38 2025 GMT
Subject: CN=cc8528a9bd4887804cb64808062498e95b0eb4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:7d:31:b8:cb:f0:b8:14:72:05:03:8e:30:
96:e6:98:11:69:c1:56:81:b5:f9:bf:d0:75:c9:d8:
18:10:05:3f:1d:13:1a:28:0d:a6:21:84:d5:d8:36:
a5:95:27:b5:80:e5:00:22:38:25:b5:4f:1b:95:cc:
ff:4b:db:f8:0e:64:40:ca:4e:a0:56:08:1f:9a:98:
44:15:82:d8:a7:7c:43:e9:02:3a:08:b3:92:e3:8f:
2c:1c:ca:e4:d7:42:53:3a:a7:ae:61:54:97:9e:d8:
b1:7c:32:01:ef:94:a0:cf:d5:aa:f7:c3:22:1d:d5:
1f:3f:3b:61:b2:b8:20:8c:95:36:2a:cc:58:4a:e6:
3c:93:1b:e1:46:5e:63:c1:a5:f3:5f:5e:33:60:36:
fc:3a:a7:42:04:2d:93:03:84:4f:02:d5:4b:09:f4:
0d:aa:1b:1c:a3:d2:e6:db:85:fc:bc:cf:6a:97:6b:
4d:5f:5f:8b:ea:cb:c9:59:6d:32:94:6a:f0:7e:a6:
eb:e0:91:40:7f:f9:83:68:01:66:fb:1f:7c:59:6f:
bb:f3:03:00:b7:96:1e:7c:b1:3c:00:48:ca:a5:33:
9c:d6:99:d0:b1:08:42:05:82:65:37:07:da:54:81:
3a:35:53:9c:c5:82:7f:d4:87:92:90:e7:ca:39:14:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:85:28:A9:BD:48:87:80:4C:B6:48:08:06:24:98:E9:5B:0E:B4:E3
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:be:b9:d9:d8:c2:2e:c5:d3:9a:c3:48:2e:e4:8c:66:a4:35:
d1:20:7d:41:fb:7d:ab:e8:c3:f4:89:2e:a5:e0:20:65:3f:86:
dd:1c:7d:a5:f7:c0:19:18:54:1a:59:7d:94:5e:80:6f:14:e1:
1b:de:a3:d4:6b:33:7e:57:b8:35:b2:d0:cd:1b:e1:95:c8:96:
0c:63:18:3f:ff:98:42:9e:07:d9:2c:b8:64:6a:1a:9d:7f:f5:
04:40:12:6a:91:33:12:8b:77:a8:70:92:16:16:88:25:f0:14:
99:12:80:69:7f:a9:51:91:92:c2:b3:f3:bc:ee:26:4d:03:09:
66:51:26:0d:c4:a2:88:cb:bb:49:08:35:9a:de:d3:d5:06:25:
58:01:b0:86:95:6b:14:91:f0:67:fa:cc:9f:d9:78:1b:d1:a2:
e0:29:e8:e9:8e:d8:c7:58:ba:61:c4:6d:25:b9:f4:1a:26:12:
83:5c:7a:c6:b7:92:fd:b0:23:a7:59:25:eb:8f:f7:09:8b:e0:
b5:17:11:7d:74:5e:f6:47:72:2e:7d:77:d2:ac:1d:fe:ae:69:
d5:5b:33:ad:ce:3d:4f:58:88:66:12:bd:8f:6a:2d:76:91:34:
e5:d7:98:9f:8b:ff:3d:81:64:6d:f5:43:45:77:e1:63:c1:9d:
d0:85:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:14:22 2025 by rpki-client