Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: E948bv/TaMw/MqsitbJSDnFXPjdchywDxGUd+6m7xn0=
Subject key identifier: D3:32:19:E9:9D:9A:BC:EE:C6:C4:25:EF:6F:29:FF:E8:80:37:0B:73
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 01974C68C40D8AA714C2ADC9A274B11B6D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 07F7
Signing time: Sat 07 Jun 2025 22:00:23 +0000
Manifest this update: Sat 07 Jun 2025 22:00:23 +0000
Manifest next update: Sun 08 Jun 2025 22:00:23 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: A+z/xApATJVzN63PVInlDt76UlBl5/NTu1RxNrKrePE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:c4:0d:8a:a7:14:c2:ad:c9:a2:74:b1:1b:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Jun 7 22:00:23 2025 GMT
Not After : Jun 8 22:00:23 2025 GMT
Subject: CN=d33219e99d9abceec6c425ef6f29ffe880370b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:69:bb:de:36:35:26:ae:a3:65:8b:48:98:
5b:9e:ee:9c:a0:fc:2e:7f:06:af:05:81:20:7f:af:
b0:05:6a:76:7d:1b:00:bb:a4:06:2b:c6:6f:48:37:
05:cb:a0:2d:fc:59:32:e8:8c:28:b6:54:c4:e0:95:
4f:a4:d7:eb:d7:40:c1:4c:6f:2f:ef:71:0e:93:4a:
f4:06:38:93:aa:dc:97:c9:a1:09:7d:50:b4:31:b9:
69:2d:4c:4d:be:a1:79:04:2f:2f:3a:7d:2c:39:9e:
96:39:5c:eb:7d:d4:97:3c:a0:02:d7:a9:4a:be:1d:
51:ac:bb:53:34:e0:63:52:c2:7d:27:82:c8:af:d9:
3f:f5:d2:61:b3:f7:cc:fc:49:a3:cd:56:a3:ba:30:
2c:4f:ec:bd:c2:3a:ed:32:84:d0:a8:72:a8:e3:3f:
9d:40:18:5b:89:37:e3:68:b2:4f:42:2a:e6:27:b4:
b4:c9:b3:da:42:49:c7:8a:92:c2:85:57:dd:26:1e:
a9:d5:db:22:31:b4:02:1e:6b:ca:4a:a0:9e:39:7e:
d1:68:ec:7f:b0:95:75:e8:28:44:88:b0:62:32:55:
b2:13:14:60:0e:f9:2d:db:43:24:08:ec:ef:97:e6:
02:28:01:21:5b:d2:96:e4:9a:7f:d8:8f:50:2c:1e:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:19:E9:9D:9A:BC:EE:C6:C4:25:EF:6F:29:FF:E8:80:37:0B:73
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6e:5e:2e:d5:49:f3:1d:14:5d:92:a9:83:c0:11:f8:74:2b:
b9:1f:84:53:c3:c8:7e:d5:36:d3:61:b9:01:a5:2d:79:20:87:
2d:f3:71:05:f0:ea:da:d5:04:cf:f2:db:df:d6:cc:0b:0e:e9:
3c:88:82:17:2b:b2:e0:31:b6:c4:64:8c:f1:49:fd:10:e7:12:
75:2a:d9:bd:1b:e0:8c:3b:b9:31:5b:52:65:dd:b7:7e:54:41:
3f:50:3f:c8:9b:6e:45:7c:c3:ec:51:0e:8d:90:1d:c7:00:82:
2d:23:d8:37:72:da:23:77:e7:91:3f:81:c0:39:e0:bf:14:ea:
6b:9b:69:96:b6:f6:e9:fc:29:7b:6c:f3:e1:8b:de:2f:26:a3:
9e:24:eb:9c:70:69:19:1e:bf:49:08:91:ed:f2:d5:c6:e6:8f:
48:ae:fc:7b:4f:7d:c3:71:f3:88:cb:e5:56:aa:7b:f5:3b:f7:
e0:28:ed:76:d3:af:f7:38:0e:ef:72:e4:ba:4b:a4:87:60:f7:
d6:6f:b7:87:e4:7e:b4:b1:91:7d:32:fd:06:6b:d1:40:f7:46:
17:fe:7b:d4:0f:f6:b8:75:89:f4:81:ed:0f:71:8b:73:80:f0:
2f:94:27:e3:a8:55:9b:75:8f:6e:fc:04:ea:ef:97:31:9e:3d:
87:51:f1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:37 2025 by rpki-client