
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: mUvy5uSYXY+QEviVXaehQudG52rcLN6Vzja6ZKX30xA=
Subject key identifier: 5C:4F:0F:FA:8D:A0:BB:57:FC:CB:F3:48:E1:EB:01:67:66:99:55:1D
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 01975045911EADE86CF735CBFB2FCE962434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 16:00:25 +0000
Manifest this update: Sun 08 Jun 2025 16:00:25 +0000
Manifest next update: Mon 09 Jun 2025 16:00:25 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: 8KWSdMz7PPqCOAqict+ybo7LWXHWdFtL24DjV7zeiME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:91:1e:ad:e8:6c:f7:35:cb:fb:2f:ce:96:24:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Jun 8 16:00:25 2025 GMT
Not After : Jun 9 16:00:25 2025 GMT
Subject: CN=5c4f0ffa8da0bb57fccbf348e1eb01676699551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:c4:e1:80:ed:cb:3c:73:97:9c:5c:ab:02:
9b:04:13:d2:e3:6c:a0:6e:db:4c:ab:e7:16:93:be:
92:32:01:60:52:d2:93:ba:68:63:a5:bb:3b:2a:85:
65:51:8b:16:02:57:f0:d4:80:38:46:b3:9f:d0:c7:
32:80:01:0d:00:3b:2e:b2:b3:a9:32:78:28:0f:cc:
3c:06:58:31:8a:ff:b9:7a:b9:cc:3c:2d:91:8a:db:
cd:a5:c8:13:e4:f6:6e:a4:81:48:05:bb:7a:ca:d9:
82:6b:b4:c2:2b:4b:aa:b8:02:6e:d8:94:96:a8:e7:
93:2f:14:53:94:f7:8c:3d:17:c4:02:7f:3c:10:83:
b3:46:31:27:81:36:60:a1:83:29:cd:84:ea:de:8e:
d4:9c:60:65:81:1c:9c:f4:9a:6a:30:80:5f:c8:cb:
06:52:50:c7:9d:15:27:05:55:d6:39:a5:23:5f:a6:
ff:b3:a6:26:dd:d6:78:15:83:48:cf:f4:55:1a:4a:
d0:7d:0e:16:9c:60:8c:95:e9:4f:82:25:43:4f:bf:
cd:2f:64:6f:de:8d:32:6b:02:b5:5d:b6:39:09:5f:
38:69:66:b7:ec:5d:97:fb:41:90:71:f5:ff:bc:4d:
19:3f:f7:10:93:47:94:40:a2:a2:4a:fc:c8:00:89:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:0F:FA:8D:A0:BB:57:FC:CB:F3:48:E1:EB:01:67:66:99:55:1D
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e6:b4:aa:72:23:50:83:07:36:ad:1a:4b:15:92:68:17:5f:
6b:84:f7:d6:af:59:13:27:a0:fb:d3:f8:92:be:da:b6:8b:4f:
48:2d:e8:f0:36:99:45:e9:3a:fe:a8:6e:91:5a:6f:40:73:41:
a5:ba:e7:30:aa:84:96:6d:0d:b8:34:9d:fb:e9:da:56:a9:a9:
5d:30:8d:1e:25:1b:0e:7c:be:28:d4:62:0b:c9:e9:05:a6:ee:
79:77:a1:af:ce:96:f1:5a:72:dc:c3:f1:8a:c4:aa:39:f4:31:
55:42:9a:86:70:eb:e5:74:e7:44:c7:0e:da:92:d7:17:a1:d6:
01:ae:3c:81:c9:e4:39:c0:f4:5c:33:a7:d7:f8:c5:68:2e:d6:
11:e3:74:88:ee:5d:18:2e:b6:fa:d5:72:8a:34:10:1b:ff:6b:
8c:f0:19:a2:d6:c5:4d:31:b8:f1:5b:c1:16:8c:84:43:ad:c2:
6a:07:80:bd:82:f3:d5:b5:88:f5:70:5f:2a:4c:62:82:f0:8e:
13:7b:76:a3:53:24:91:39:42:22:de:82:55:c0:e3:01:72:0e:
10:8a:bf:65:e6:2f:47:4f:19:6d:06:2a:a3:4e:75:ff:cc:83:
10:68:ff:6e:61:a8:a6:f0:ec:82:2a:49:65:b6:dc:13:48:ce:
08:01:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:19:52 2025 by rpki-client