Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: sNzkSee1TYNE3U2OMd7FhdRHKpgspi/a3NuoHnR1q5Q=
Subject key identifier: D6:07:10:6D:CA:CE:33:BE:2D:72:4F:A9:E7:40:D6:C2:A0:98:FD:A3
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 0197711ADD4CBD9D7E674AD7CB9A1F2D5679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 05AB
Signing time: Sun 15 Jun 2025 01:01:15 +0000
Manifest this update: Sun 15 Jun 2025 01:01:15 +0000
Manifest next update: Mon 16 Jun 2025 01:01:15 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: tum4Rj/BmQNbPfdxGn1JioGBeKXcvlbucut9m6HB0CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:dd:4c:bd:9d:7e:67:4a:d7:cb:9a:1f:2d:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Jun 15 01:01:15 2025 GMT
Not After : Jun 16 01:01:15 2025 GMT
Subject: CN=d607106dcace33be2d724fa9e740d6c2a098fda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:96:c0:17:35:de:bd:ae:3a:7a:f3:bf:a0:
54:91:c1:ba:2d:7f:80:c6:1f:50:72:c6:93:ee:99:
d4:f1:b0:b5:b9:c6:66:40:48:17:6e:6e:15:2e:f4:
f1:40:07:ce:4d:b5:e3:c0:8b:29:b1:3b:af:82:48:
1f:d7:ea:e5:df:5f:d9:42:a8:30:46:a3:be:f1:dd:
30:fc:17:8c:80:57:a6:29:f9:fe:68:71:0d:2f:1f:
41:97:cb:89:d7:4b:bf:49:4e:3e:b3:3b:f9:af:5a:
46:69:fe:2e:d1:30:a4:0f:1a:2c:e6:af:bb:5b:eb:
4c:e8:a2:6f:5e:4b:5d:f3:91:f5:72:5c:97:1e:68:
ef:04:8c:cb:7f:f0:5f:bf:bb:29:57:68:0e:2d:e6:
65:e2:e0:a1:67:11:a3:22:63:45:cb:65:27:a2:9a:
2d:73:ab:ab:19:b2:64:ee:e9:36:19:d1:37:8c:56:
2a:e2:f2:36:c7:80:a4:41:c2:90:70:4f:80:97:df:
27:8a:b9:b4:cf:00:f7:b5:80:5f:47:e6:62:34:4c:
01:19:c1:25:e4:20:30:da:61:80:29:98:ef:3d:f1:
8c:3f:27:ef:6d:8f:81:71:bc:ab:c4:ba:c3:17:4c:
9b:44:e9:e0:19:4b:0c:c8:b2:5c:2f:3b:3c:27:4a:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:10:6D:CA:CE:33:BE:2D:72:4F:A9:E7:40:D6:C2:A0:98:FD:A3
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:fb:81:c0:64:0b:7e:7d:d4:2e:80:e0:40:18:c2:5a:da:
c8:99:8f:ad:45:b9:4f:0e:92:9f:b1:c7:c5:53:46:8e:c9:e9:
df:bf:34:81:27:8f:c6:16:0f:64:13:1f:13:2e:fd:98:ec:33:
04:f6:45:31:8c:3e:e5:11:85:d6:2c:00:9f:ab:94:53:ff:6c:
70:7c:40:7b:ae:f8:c7:e7:56:6b:0f:68:66:8c:a4:2f:61:01:
a5:d6:0e:f2:0f:e9:29:ff:9e:4d:2e:1b:28:84:b3:fe:0b:2b:
6b:bf:fd:09:84:a4:6b:31:0b:c9:69:57:f3:16:07:87:9f:af:
e4:56:1a:7f:2d:25:24:1f:2d:ed:a3:a5:69:ed:1a:f4:44:4b:
1d:8b:b7:9b:15:81:84:1f:ae:87:fe:51:df:45:fd:5f:78:28:
cc:1c:27:cd:fc:32:c7:4e:e0:1a:3e:bb:64:e9:b7:71:b4:d2:
a4:05:e9:b7:a9:3e:fb:50:ef:13:f4:b3:f8:5f:79:82:18:b6:
f2:19:03:80:9f:ea:d1:03:37:f4:66:f9:d0:d3:cc:db:93:d7:
2a:05:1b:4a:8d:bf:6d:5e:24:dc:05:c3:0f:1a:51:2c:ba:1e:
db:c1:d5:cd:32:d0:cd:fc:79:80:2a:1d:d8:17:87:79:01:82:
c2:63:5a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:54:52 2025 by rpki-client