Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
File: cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json)
Hash identifier: AYVhny0Y5ov7l0jJiryPcD+QCSvx78ha2sbdEe/P0ok=
Subject key identifier: AD:4F:47:CC:4B:31:B2:74:F2:3C:03:0F:D1:F8:64:BD:77:60:78:7C
Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
Certificate issuer: /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Certificate serial: 01976929FF109324D565E4233F613D1EEBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
Manifest number: 0161
Signing time: Fri 13 Jun 2025 12:00:49 +0000
Manifest this update: Fri 13 Jun 2025 12:00:49 +0000
Manifest next update: Sat 14 Jun 2025 12:00:49 +0000
Files and hashes: 1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: MpmPnDIVZ7NXP2apKzeHlOflu/phR6L5mqMKXzBW8tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:ff:10:93:24:d5:65:e4:23:3f:61:3d:1e:eb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Validity
Not Before: Jun 13 12:00:49 2025 GMT
Not After : Jun 14 12:00:49 2025 GMT
Subject: CN=ad4f47cc4b31b274f23c030fd1f864bd7760787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:de:2b:2b:1d:81:4d:fb:7d:4b:0a:44:f2:
43:61:a8:34:0c:53:08:88:63:11:00:b1:9e:df:33:
d7:47:fb:97:3b:22:d9:eb:e7:fd:7f:a9:8d:ea:e3:
8f:ec:4f:79:aa:1a:11:84:43:b1:d7:3e:7f:76:b8:
78:dd:fb:70:d0:f3:1f:a7:95:ce:b8:4a:b3:54:0a:
79:8b:0e:14:a8:c8:a7:36:31:76:a7:bd:19:7a:ac:
a7:d6:d7:e1:7f:46:f6:d4:f4:4e:85:b6:a1:6f:59:
67:7d:e7:74:d3:a7:20:63:39:4e:2e:ed:01:a3:06:
d7:c9:f1:58:1a:a7:61:ae:07:89:cc:b1:a5:19:16:
80:24:ce:60:ee:11:da:b2:ee:97:ef:90:f1:75:e2:
15:3c:8b:ec:62:7c:fa:b9:f0:c9:f2:29:60:33:7a:
3b:70:24:e6:bb:f7:f3:dc:89:8b:9a:14:70:4e:9b:
c5:1d:bb:0d:62:84:04:c4:1b:42:2d:cd:1f:b5:4a:
8e:11:d1:9f:21:52:03:cd:5b:86:16:30:6c:24:0f:
92:dd:1b:98:9b:c4:a6:d5:e1:a9:2a:7e:a1:20:f3:
c1:3c:e2:28:3f:df:e6:77:12:e2:20:84:de:27:59:
11:d2:91:99:0e:9a:7e:e4:e4:bb:a0:a2:9b:20:c5:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:47:CC:4B:31:B2:74:F2:3C:03:0F:D1:F8:64:BD:77:60:78:7C
X509v3 Authority Key Identifier:
keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:46:f8:07:09:7d:89:45:ff:de:d4:9a:00:2e:63:8f:ab:f2:
df:a1:51:2d:dc:83:c4:87:0a:34:d5:fc:f6:39:0c:2e:a4:27:
01:fc:7e:de:3b:02:80:f3:d7:83:38:05:67:78:9d:d0:b5:86:
b3:1f:9f:ab:2f:9b:0b:b8:83:a4:6d:67:7e:ca:c4:b7:26:f2:
b6:2c:4d:be:aa:5a:f9:d1:f1:95:39:50:ba:4f:75:de:04:21:
11:20:e8:b5:30:86:73:23:8a:03:15:f4:29:e5:a9:7a:ad:f0:
31:3a:a7:db:08:e8:b5:c3:79:9d:f3:c8:83:78:08:7d:09:e9:
b3:86:51:98:e2:f0:28:4c:66:ae:68:8d:a3:d8:4d:ec:cb:91:
64:7d:5c:fa:d6:92:0b:01:f3:46:1b:b0:80:24:f9:71:04:0e:
04:5f:2b:e9:aa:5c:bf:86:a8:af:21:b6:27:f0:bc:9e:66:cb:
78:29:8b:f4:5f:9b:01:22:87:14:46:80:ee:d4:8f:43:03:3e:
11:b0:fe:0b:4c:d5:3f:24:8a:2e:ae:b7:e1:e8:11:43:04:f8:
68:bf:48:dc:f3:f1:34:aa:ca:bc:d0:16:70:84:d7:cc:04:64:
c6:95:9c:cd:2e:d4:af:e2:c9:ba:86:b3:03:e4:d8:d2:f1:9a:
ee:a4:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:05 2025 by rpki-client