Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: DlSN6xrAiXwItmpAiv9RfLucP+bgRVKZDk+wf1kmBUo=
Subject key identifier: EC:C9:34:7B:BD:CF:F5:5B:BC:19:82:84:31:62:CF:EF:66:DF:B1:79
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 01974A7B30E148C11F02A415E28DD4BB5ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0BE3
Signing time: Sat 07 Jun 2025 13:01:16 +0000
Manifest this update: Sat 07 Jun 2025 13:01:16 +0000
Manifest next update: Sun 08 Jun 2025 13:01:16 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: W9dM5HUY4a24AtwvMyIqr7sSLz/uXV25iLJAmb4fd5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:30:e1:48:c1:1f:02:a4:15:e2:8d:d4:bb:5a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Jun 7 13:01:16 2025 GMT
Not After : Jun 8 13:01:16 2025 GMT
Subject: CN=ecc9347bbdcff55bbc1982843162cfef66dfb179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:43:f2:94:69:50:20:76:80:0b:97:4e:14:
a3:53:f2:c3:5e:df:85:e2:ee:c9:2a:b7:b7:76:a4:
d1:59:57:b2:05:e7:1e:83:d7:63:94:df:b1:00:11:
49:af:2b:d8:82:b4:ff:f0:eb:e1:26:ed:dc:28:70:
9e:dd:b8:ef:75:67:20:41:01:06:fb:f5:12:43:37:
1f:9e:90:c5:1a:e9:93:1b:20:f0:08:fd:5d:53:60:
d1:86:e8:df:25:35:ff:53:cd:b7:99:8f:23:e5:82:
35:d5:b5:18:f7:c2:bc:41:a4:d1:24:87:25:9b:98:
f6:07:63:a2:9a:78:dd:ab:d1:eb:54:16:cc:32:9c:
20:dc:ef:d0:32:ea:eb:13:7d:8f:a2:16:3c:f1:5e:
d4:8c:43:0f:00:ab:48:2c:ea:65:89:ab:b5:7f:60:
9f:e5:ef:0a:e8:f9:ce:58:4b:e2:d6:6c:b8:d0:fa:
e4:50:d6:e0:57:fc:96:c8:9b:8c:6c:8d:f0:78:cd:
7f:27:9f:8a:25:2e:ff:9c:cf:9b:51:21:5b:eb:c3:
cd:42:6d:a0:c5:21:9a:c3:b4:63:76:f2:5d:2b:dd:
50:90:f2:ce:6e:82:40:92:1e:3e:ed:0b:bc:ef:ee:
74:18:21:d5:1b:eb:69:fe:ec:62:51:9c:22:ff:24:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:34:7B:BD:CF:F5:5B:BC:19:82:84:31:62:CF:EF:66:DF:B1:79
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a3:0e:f5:c6:7b:14:e5:35:a7:26:b0:25:3d:d7:73:1b:20:
01:88:d7:b9:9d:a3:17:8e:43:5a:46:6b:5e:c1:7a:24:2b:33:
2c:be:d6:9c:67:79:fb:95:5f:d2:49:e7:0b:ca:44:dc:ba:f9:
b4:cf:90:88:9f:8e:d9:6c:59:95:46:c3:8e:25:79:5e:2f:21:
ce:32:8f:8c:32:7c:cd:42:dd:06:3e:aa:40:cf:3b:17:39:a8:
b3:aa:7c:2b:da:79:6c:21:02:5b:11:72:9c:5d:e3:fa:11:9a:
b4:a8:68:0c:5e:d5:bd:94:e2:0f:49:a5:98:d9:b4:aa:a2:cc:
f3:7e:21:04:19:96:32:b1:a7:f8:5e:3e:86:13:a4:39:78:a4:
6a:b1:c9:89:f5:75:12:cb:bf:21:d1:f7:d4:25:af:30:02:5a:
4a:33:e1:b2:f2:d8:c6:86:08:d4:b6:77:46:dc:7c:e3:3a:90:
a8:96:11:42:8d:4f:56:39:9f:24:a7:bb:8e:16:20:77:09:c8:
16:37:14:21:06:19:2f:d8:27:92:2a:e8:39:5b:f7:ad:2e:05:
58:ad:62:78:b7:de:18:20:a4:e9:35:1b:69:66:ca:fe:63:4f:
27:aa:14:8b:9d:28:a9:d4:e1:e2:00:d9:3c:01:66:4b:0a:2f:
f0:61:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:59 2025 by rpki-client