Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier: m8YpplUO5imivwz7rJlsgTv3LYblBrWUIBaBIxZ+QRY=
Subject key identifier: 9C:6C:86:7F:02:8B:9A:92:4C:B4:74:87:ED:D2:7A:E0:DE:11:43:A0
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial: 01976F62B5C984C775911A44F87F1BA3BEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number: 0111
Signing time: Sat 14 Jun 2025 17:00:29 +0000
Manifest this update: Sat 14 Jun 2025 17:00:29 +0000
Manifest next update: Sun 15 Jun 2025 17:00:29 +0000
Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: ussymzauR17cVAIfYuJwxpuMwU6OktAzUeeIk/ATDCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:b5:c9:84:c7:75:91:1a:44:f8:7f:1b:a3:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Validity
Not Before: Jun 14 17:00:29 2025 GMT
Not After : Jun 15 17:00:29 2025 GMT
Subject: CN=9c6c867f028b9a924cb47487edd27ae0de1143a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:8d:6a:57:3b:1b:66:44:ad:bf:c4:82:91:
8a:19:53:49:e5:c1:1a:d4:2f:83:6f:a8:4f:dd:10:
9e:86:0b:cf:50:10:77:34:1e:f0:c0:17:82:d9:7f:
53:2d:51:42:97:b4:fa:e5:0e:3f:3a:2a:31:c7:0b:
45:f6:54:ac:8e:16:5c:ca:60:6f:d3:99:48:f5:32:
33:e6:1b:9d:38:33:69:61:4a:54:5c:30:61:cb:e1:
ce:7e:7c:8c:73:49:c9:ec:88:3f:ba:ed:31:6b:f1:
9a:65:b9:1b:76:84:89:9a:88:a0:c4:fb:ec:f6:c8:
73:21:b0:1f:1e:b8:bd:4a:d0:19:18:e7:08:5c:85:
fc:6f:1d:6e:2f:12:7b:10:a2:2b:08:41:a6:6b:d6:
af:e5:3f:f5:ef:49:f9:f7:d6:32:e6:59:25:76:17:
e5:ef:ec:30:c8:b9:65:1d:5d:1e:a4:a3:50:be:0f:
c2:e6:99:c5:0e:ad:4f:0d:dc:b3:fa:18:7b:f2:70:
5f:3b:fb:c9:4d:f8:8c:bc:1c:f2:fb:f4:a1:6e:8f:
2d:bb:0c:4d:40:8a:23:78:48:d0:ad:2e:bf:05:c4:
50:26:dd:72:06:58:54:cd:0d:f9:a8:2d:a7:b3:09:
ad:4a:4d:6c:3f:b8:a2:54:e4:e1:c0:17:ed:36:73:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:86:7F:02:8B:9A:92:4C:B4:74:87:ED:D2:7A:E0:DE:11:43:A0
X509v3 Authority Key Identifier:
keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:8b:a0:37:31:3f:95:a1:a1:86:5e:2e:86:84:5f:51:ca:
8f:9b:99:b5:56:10:08:d2:4e:85:ab:d8:96:2b:1f:09:c1:c4:
38:16:cb:17:90:5f:9c:f5:2c:3c:40:96:7a:d5:e1:5f:17:88:
73:aa:23:53:96:e4:e3:32:86:f0:7b:97:d4:a1:7a:b9:10:cb:
e5:75:7a:1e:90:c3:97:00:3c:3d:d1:b7:5a:a6:20:8e:6c:5e:
1c:6c:9c:ab:14:e2:49:64:13:3c:40:6d:e3:d7:19:d4:ee:1e:
9e:1b:77:0d:c5:65:7f:61:82:e1:9d:dc:4d:91:01:09:d9:33:
0e:ec:67:11:3d:f0:f8:22:4a:4d:03:e8:58:45:bd:e6:c8:30:
69:71:12:98:e5:3f:9b:ce:ae:55:47:b2:c5:2e:a7:bc:3a:6b:
d6:5e:0c:24:a5:3d:cb:83:fa:82:3c:f3:64:f7:0d:b8:71:e3:
cc:89:8e:15:5d:fa:27:76:0c:63:0f:9e:2b:78:eb:41:c5:b3:
84:25:c0:9b:bf:42:53:ef:43:8e:be:df:34:ea:71:40:40:d9:
40:b4:7b:32:d5:d3:bf:81:f7:9c:1a:6b:5d:9c:45:ee:ef:fb:
67:42:1c:27:f3:00:46:11:d3:78:04:80:00:1f:bf:11:77:7e:
9d:ef:ff:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:14:05 2025 by rpki-client