Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier: 3gDGdegi1clF+5akuh7SJW3GbCDE8/DeXJkphK7Bgms=
Subject key identifier: D5:F1:F8:F9:AC:19:82:03:E8:D8:0B:B1:09:EF:C4:5B:FE:D2:DC:3E
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial: 01976BF48F012FFC6671780C6FB3DAA5E8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number: 12DE
Signing time: Sat 14 Jun 2025 01:01:18 +0000
Manifest this update: Sat 14 Jun 2025 01:01:18 +0000
Manifest next update: Sun 15 Jun 2025 01:01:18 +0000
Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: yKZwZ4ENBPsupLzV7AHPBcn0CB8VgFsute6DUp0yGpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:8f:01:2f:fc:66:71:78:0c:6f:b3:da:a5:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Validity
Not Before: Jun 14 01:01:18 2025 GMT
Not After : Jun 15 01:01:18 2025 GMT
Subject: CN=d5f1f8f9ac198203e8d80bb109efc45bfed2dc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:93:6b:0e:59:21:2c:12:39:31:3e:70:86:
b6:18:a9:a3:b7:81:57:0a:3d:78:d9:8e:bf:51:33:
2a:91:90:01:3a:f8:ca:66:37:44:a0:5e:98:b6:d2:
93:51:d8:e4:c4:cf:b1:90:33:73:8e:46:d7:4d:5d:
84:9b:0c:ad:e9:86:38:b6:be:a4:60:c6:71:21:ac:
9a:9a:68:58:87:99:b6:9e:e6:39:57:ce:37:80:66:
7e:b2:35:38:a1:bd:d1:68:bb:a5:b5:14:05:8d:c5:
af:71:a8:35:13:07:76:5c:c5:12:63:1b:dc:e3:69:
66:78:8d:d3:eb:d3:cc:d8:07:e5:b4:f0:ec:35:1a:
94:85:16:7b:ab:da:2e:56:85:9a:5c:29:e8:a0:dc:
77:ae:45:d8:d6:6d:47:c8:c9:bf:7b:e0:e1:df:6b:
dc:71:19:95:4d:6c:66:c6:cd:95:04:37:e8:a0:61:
02:73:17:b2:52:52:d3:24:fe:5e:4f:f7:cb:1f:e2:
83:4a:a8:29:38:a0:c6:b8:b1:e9:90:e8:e0:c8:70:
53:a5:10:a4:a2:be:40:f4:dc:0f:c6:0f:ca:8a:e2:
7a:a0:a6:17:c1:57:b1:bf:db:b2:fe:bd:52:a9:1e:
1f:38:3c:83:fe:a5:1d:3b:72:77:10:13:21:aa:95:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:F8:F9:AC:19:82:03:E8:D8:0B:B1:09:EF:C4:5B:FE:D2:DC:3E
X509v3 Authority Key Identifier:
keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e4:02:8a:89:c3:89:97:64:e9:0f:67:ca:95:34:10:f4:34:
56:c5:f2:4b:9f:dd:3f:fa:c3:a5:df:ae:56:f5:26:46:58:63:
2a:d5:02:35:a9:70:84:09:6b:95:5b:ec:fe:f2:ca:36:62:eb:
aa:8b:22:89:43:7f:dc:f9:41:6e:0b:50:c2:ed:90:43:9c:36:
c5:24:ab:7f:7d:91:c3:44:40:68:61:ae:1a:e1:4e:92:89:50:
04:6e:19:29:24:bd:5a:2e:29:1e:dd:f4:8c:e8:25:8d:4c:19:
2a:35:ef:13:03:95:4a:41:63:6e:be:2c:a5:84:44:3b:94:3b:
d7:58:47:d1:49:49:54:91:3b:2f:dc:4c:a4:95:72:2c:52:25:
c3:b2:2e:7e:f5:0d:69:16:61:55:6b:57:f8:09:5c:d4:dc:82:
7b:68:a9:59:78:8a:13:e3:d2:60:6d:ac:30:9a:88:52:ab:48:
df:90:31:1a:f8:90:f1:54:98:93:f1:55:68:c9:bf:8a:05:8e:
b4:80:78:83:55:b8:3d:2a:0c:72:5f:f1:f8:59:c2:30:18:e9:
43:eb:a4:48:90:81:3b:f0:36:1c:02:85:bd:03:73:4c:86:27:
7a:99:74:ea:28:78:31:b1:a8:3d:8e:03:f5:d5:8a:14:8a:ca:
fa:a7:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:11 2025 by rpki-client