Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: a5q0fkBDZl+4xQQH+0W4pnK1TFDhYJZaxEvzFuyREaI=
Subject key identifier: C3:EF:83:D2:44:EB:DD:E5:CB:BE:FA:B7:9E:FE:8E:FA:55:C1:5F:16
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 019748FA2DCB024E5EB09F785108B27B13A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0C07
Signing time: Sat 07 Jun 2025 06:00:44 +0000
Manifest this update: Sat 07 Jun 2025 06:00:44 +0000
Manifest next update: Sun 08 Jun 2025 06:00:44 +0000
Files and hashes: 1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: Njq389QgylxT2ZsAHz0yqxVwWvHpUZWCwpWTOiK3zR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:2d:cb:02:4e:5e:b0:9f:78:51:08:b2:7b:13:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Jun 7 06:00:44 2025 GMT
Not After : Jun 8 06:00:44 2025 GMT
Subject: CN=c3ef83d244ebdde5cbbefab79efe8efa55c15f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:ee:f3:b0:19:1c:74:0a:f0:2b:b1:30:58:
65:ac:40:b2:2e:9c:d6:87:62:3c:e0:37:89:47:f5:
cd:c0:1f:69:7a:9d:ea:53:77:da:f4:0b:eb:05:76:
1e:8f:4c:a8:2c:24:02:78:7d:87:45:a7:94:cc:fb:
94:1e:83:15:97:f0:2a:17:e2:aa:6f:a1:84:e8:9a:
59:57:5d:25:37:21:0a:07:cf:6a:bd:88:e4:bb:15:
9c:54:ec:cb:9f:b1:30:78:18:ab:9f:40:a2:96:15:
4e:1e:f8:20:11:37:00:c7:b9:5f:ba:67:d8:74:7f:
f4:49:76:77:b9:80:e7:af:99:f4:23:ba:36:3c:59:
27:d2:93:ea:db:7c:4c:6a:8e:b9:51:0a:5a:18:7c:
91:86:58:13:00:68:16:3f:57:e6:44:34:f5:9f:1d:
c5:59:08:ec:7e:5f:38:1f:4a:35:d7:b6:e5:a3:23:
46:53:89:36:b3:03:05:51:5a:47:77:42:3a:65:e0:
9f:33:8b:90:c2:98:e9:2a:49:4e:a0:bb:e3:16:00:
d1:8b:f4:e4:e6:b7:bd:7f:e6:d4:86:fe:fe:6b:07:
9b:14:7f:22:4d:f2:50:04:0c:aa:be:53:14:da:2e:
7f:0a:bd:55:4d:22:09:cd:10:b7:79:d3:7d:40:78:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EF:83:D2:44:EB:DD:E5:CB:BE:FA:B7:9E:FE:8E:FA:55:C1:5F:16
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:ec:f8:08:35:6c:72:88:80:4f:0a:69:cd:50:7c:bb:7d:
c7:92:29:43:5f:b9:67:89:fd:1b:8e:0b:22:6c:25:e7:b7:13:
b2:ae:aa:2b:a1:12:bc:bf:d2:81:20:49:5c:8d:fd:c2:7f:89:
02:c1:0d:0b:b2:2f:de:9b:11:57:93:bd:63:f4:c0:48:43:5e:
25:3a:ff:44:9f:33:55:e0:07:0d:d2:90:d4:f2:d2:89:ac:dd:
6d:ed:7b:4a:80:da:57:26:d7:73:a1:42:d3:34:3f:56:16:f5:
39:7a:80:36:5d:5e:3f:10:b6:57:84:6c:ba:89:2d:77:08:33:
98:a9:17:b3:9c:da:5b:9c:29:52:36:a2:bb:42:79:30:0e:dd:
87:9f:de:d6:a3:ab:c8:d8:5e:77:88:ed:93:fe:1e:e9:d7:cb:
db:78:58:ed:86:23:be:c6:51:83:9d:c2:85:ec:5e:1d:86:b5:
ac:d4:07:51:8a:db:99:75:82:84:38:32:a7:67:0f:a6:95:fd:
e4:e7:a0:22:cd:f7:dd:a1:7f:8b:ab:63:b6:e7:26:6f:c2:84:
cc:5a:5a:49:97:aa:07:c8:60:d0:23:4a:bf:da:e8:59:e3:99:
08:c9:52:3a:8d:f2:53:16:94:b1:d9:9d:3c:4a:e6:fe:37:fe:
59:3c:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:59 2025 by rpki-client