Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
File: wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json)
Hash identifier: JrsOljWk+yUC2q7lBYxlM/fEjCmxWT13k4rGs3bIGOQ=
Subject key identifier: B3:C9:F3:48:A3:F4:5C:15:AC:3F:56:8B:94:FD:C2:47:5C:0F:1C:E8
Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
Certificate issuer: /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Certificate serial: 0197778A9F9ABC033909953F5E603E230636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
Manifest number: 0905
Signing time: Mon 16 Jun 2025 07:01:02 +0000
Manifest this update: Mon 16 Jun 2025 07:01:02 +0000
Manifest next update: Tue 17 Jun 2025 07:01:02 +0000
Files and hashes: 1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: VYNEbyUhGmxgyVaHHPzdey9nvW22gHpOPh62ljrr54E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:9f:9a:bc:03:39:09:95:3f:5e:60:3e:23:06:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Validity
Not Before: Jun 16 07:01:02 2025 GMT
Not After : Jun 17 07:01:02 2025 GMT
Subject: CN=b3c9f348a3f45c15ac3f568b94fdc2475c0f1ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:f8:e7:01:43:95:ec:96:7c:67:9c:0d:13:
0a:8b:2f:90:05:9d:6b:e8:4a:fe:1f:d5:34:00:40:
0f:ce:ee:1c:e8:5b:30:35:c4:94:a7:58:67:21:90:
3a:b7:b3:d6:fc:9f:00:11:aa:b0:cd:99:6a:9e:00:
2b:d8:7d:36:42:07:38:d8:2b:e8:aa:c1:5f:ff:e4:
07:aa:71:43:79:ff:79:dd:b3:f2:02:e2:3e:6d:d4:
81:9f:28:fa:3a:e5:fe:c3:b5:bf:8a:b8:3f:56:dc:
bf:79:62:bc:17:83:d2:9e:15:6c:c8:d7:74:1b:d1:
cd:e9:e5:21:c6:fe:2b:8b:da:99:cc:a3:16:dd:b3:
77:2d:44:85:8e:93:81:f6:0a:3b:85:a0:00:21:e8:
0d:bf:72:2d:6f:83:c6:48:80:d6:bb:60:9b:12:01:
dd:35:3d:d5:ad:bc:02:69:0d:b8:9c:eb:5a:49:32:
7b:d5:30:fa:ff:55:61:26:34:f6:8e:05:f9:3e:ae:
0d:48:12:67:47:57:4f:88:bf:82:46:f8:9f:1d:7b:
3b:4c:af:bf:60:78:7f:04:ea:99:83:c0:44:f9:9f:
72:ae:52:fb:7e:2c:49:ad:ec:35:92:c0:0b:90:e1:
89:65:b1:c5:b5:38:45:da:56:7d:f7:29:93:dc:5a:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:F3:48:A3:F4:5C:15:AC:3F:56:8B:94:FD:C2:47:5C:0F:1C:E8
X509v3 Authority Key Identifier:
keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fc:dc:b5:4f:55:b3:dd:3a:60:cd:44:b8:ed:79:9a:19:4b:
f2:b8:c1:6f:59:e4:e9:69:60:cb:db:3d:80:b6:b1:91:c2:5c:
93:ce:5d:ad:5d:ef:4d:89:03:a0:54:87:f2:b9:b7:2d:8e:1b:
1b:91:7c:63:1f:27:fc:77:a5:26:a6:18:b8:73:1e:8e:54:35:
01:33:a9:3e:fd:cd:83:41:0a:bd:96:4a:08:b3:f5:16:8d:ee:
2d:41:7f:4f:12:33:2f:49:02:e2:50:53:cd:33:45:71:b7:b7:
ff:67:bc:30:6c:41:22:d2:a3:c6:cb:70:bb:e2:d3:3c:57:29:
01:d4:3a:51:3d:22:2b:bc:f6:5e:c6:2b:49:20:11:cf:e1:e5:
16:50:15:7f:c4:29:57:28:42:b2:cc:48:c8:3d:21:20:7b:89:
a5:73:b0:c4:ad:85:32:ea:df:5a:e9:af:11:31:ed:88:57:d5:
d2:d6:d4:9f:58:b8:d0:34:d0:81:a3:1d:2a:64:8f:04:2d:9d:
cf:78:da:85:52:2e:40:a0:e2:ab:9d:34:5b:7f:da:06:9d:a7:
29:8a:c1:cc:6b:f6:c4:24:dd:55:ad:90:00:87:91:80:0c:81:
4a:31:12:18:9b:82:b8:6e:11:4c:5f:a3:7f:3c:d5:ee:8a:b8:
4d:11:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:19 2025 by rpki-client