Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier: PdIP+LV4t3BoH5oyGwWqKvI+KhycScfeeEtAJoeL3Ts=
Subject key identifier: 45:DE:14:CB:8C:8C:84:04:A2:E0:61:8A:03:85:BC:07:C1:C8:F7:D5
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial: 0197771C953D20AE4A71AAB4EAC87CA93329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number: 1214
Signing time: Mon 16 Jun 2025 05:00:51 +0000
Manifest this update: Mon 16 Jun 2025 05:00:51 +0000
Manifest next update: Tue 17 Jun 2025 05:00:51 +0000
Files and hashes: 1: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: ebPeODAc6xBvDi5BC4HEf8eVFINHeBxtsShCT6O6v54=)
2: q9zEIJSyiAtted-qK0IC2QOIvVc.roa (hash: Dw02XDclSknqFZSzdcVjqUMXTqYYIsr90SDwtwPQEIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:95:3d:20:ae:4a:71:aa:b4:ea:c8:7c:a9:33:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
Validity
Not Before: Jun 16 05:00:51 2025 GMT
Not After : Jun 17 05:00:51 2025 GMT
Subject: CN=45de14cb8c8c8404a2e0618a0385bc07c1c8f7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:f3:47:ea:e9:98:25:35:ef:c5:b9:af:49:
1c:6b:4a:91:c6:14:97:06:1d:9c:45:1b:ca:ad:59:
53:d2:51:06:a1:ae:c8:fa:51:c8:e6:c0:39:f6:23:
b5:95:13:d4:a3:59:b1:4b:34:f6:f5:c2:92:a7:9d:
f4:ab:49:d3:07:c0:4a:d9:bb:cf:52:b6:d9:f0:ff:
27:d3:bc:20:27:ec:cc:ff:40:88:21:74:2b:5e:0e:
9c:87:bb:e5:05:55:8c:9b:30:b1:29:6f:f1:b9:fb:
56:64:e4:bb:b6:7e:4e:d7:85:cc:61:dc:dc:62:f3:
1c:07:1c:70:21:2e:da:fb:7e:2b:2a:14:0f:ec:a2:
be:71:f4:81:be:17:48:7d:14:c9:3d:d3:5c:38:fc:
0e:30:69:93:31:a1:3e:0b:8f:6e:c8:30:fa:b6:f9:
0a:43:00:65:38:30:ee:fa:76:c1:34:40:be:28:44:
d3:0e:d6:4c:5e:66:f6:3a:7c:6c:e0:8d:48:16:f8:
ee:53:11:89:41:c4:70:54:a0:58:74:df:40:45:b0:
4d:59:99:2e:fa:dd:ec:dd:53:39:2c:60:56:92:fe:
a7:56:d8:b7:98:d2:96:9a:88:80:7e:d8:0d:2f:29:
50:d8:4e:6c:2d:5e:d1:d5:f3:8e:e2:66:bd:af:63:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:14:CB:8C:8C:84:04:A2:E0:61:8A:03:85:BC:07:C1:C8:F7:D5
X509v3 Authority Key Identifier:
keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0c:cb:fb:d2:53:aa:aa:b6:ec:bd:05:ac:fa:67:3b:09:d2:
de:32:3f:68:e2:31:2a:4d:fb:cd:1f:b1:26:e3:ff:61:0b:7c:
2b:44:5f:04:2b:11:ca:4c:94:e3:17:f4:5f:2f:ee:1d:d1:21:
bc:42:63:e7:80:85:7c:9d:cc:5b:a8:e9:92:94:fe:26:e9:09:
ce:23:5a:a7:d0:37:f2:94:fe:ab:25:fa:ab:d1:a6:8e:0f:b9:
a0:5b:70:a8:2d:d8:db:87:43:cc:d4:f6:27:2b:fd:77:be:bf:
52:39:96:b2:d9:f7:54:b3:4f:ef:14:71:8b:12:5f:9f:98:02:
03:df:2d:4e:fc:68:01:b3:d9:ea:fd:34:99:e9:b0:c0:56:c8:
2c:25:eb:6c:93:9f:d5:19:51:d7:00:95:7a:36:92:ad:f8:a5:
fd:d0:0f:af:f1:33:ff:7f:85:62:59:0c:41:53:73:4b:84:05:
e3:41:f6:af:71:3a:4f:9d:78:28:95:19:39:14:4c:70:4e:05:
d3:48:36:f6:3a:b6:fd:4a:95:c9:fa:8e:4a:f7:da:f7:16:1a:
62:ba:39:c6:f8:d1:ca:3e:76:af:da:d3:4e:32:9e:95:e5:36:
a5:74:64:16:97:20:9b:15:b8:7e:5d:1b:25:88:67:6f:fd:5d:
13:0e:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:16:31 2025 by rpki-client