Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File: WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier: wa2JAOm23aQHIXVOH/e2rTaiOtHkfJ5x7o+VEaYPh/w=
Subject key identifier: 5A:CC:8A:EE:5C:B3:13:D5:A0:BB:28:1B:66:45:38:F0:A7:C3:FC:B8
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer: /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial: 01976BF402D2B795F926957020B62980D2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number: 0673
Signing time: Sat 14 Jun 2025 01:00:43 +0000
Manifest this update: Sat 14 Jun 2025 01:00:43 +0000
Manifest next update: Sun 15 Jun 2025 01:00:43 +0000
Files and hashes: 1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: h5qtshH1xAWX6xqb/E25OYOQPyrA1/kP7I9b91ca/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:02:d2:b7:95:f9:26:95:70:20:b6:29:80:d2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Validity
Not Before: Jun 14 01:00:43 2025 GMT
Not After : Jun 15 01:00:43 2025 GMT
Subject: CN=5acc8aee5cb313d5a0bb281b664538f0a7c3fcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:f5:4b:d7:63:0f:ac:78:df:77:07:0b:30:
2b:d4:d4:db:e3:25:20:78:a0:b3:52:2d:78:e6:fc:
10:f6:0f:52:79:50:45:99:58:b2:68:e1:e3:e9:e8:
2d:9a:a2:e1:63:74:60:ac:27:be:e1:df:65:9f:cc:
dc:80:eb:fb:fa:8a:b5:76:d4:01:30:5b:f1:f1:44:
4b:37:8e:27:d8:14:6b:c1:2c:0a:54:ac:52:81:55:
cf:ae:1c:74:f4:55:7c:1d:6f:d1:65:7d:27:da:6b:
ee:9d:1d:0d:15:f3:3d:9c:ea:86:a6:08:d7:6f:6f:
b8:c3:bc:92:1d:43:76:24:02:af:f1:7c:4b:8f:47:
06:f6:e2:ad:80:27:e9:9e:23:f2:e9:3d:7d:8a:9b:
8a:45:46:09:b4:33:55:76:4b:2c:5f:2a:f6:fc:a8:
44:3a:86:22:e2:17:98:ff:62:ee:de:46:97:6a:82:
52:29:08:da:1c:44:d8:38:44:8a:8c:4f:dc:14:04:
01:9a:dc:22:f5:56:be:94:a7:22:fb:c9:d6:b5:5e:
55:b2:49:b3:a5:c9:bf:4d:dd:18:6a:70:7c:14:bc:
3c:bd:c6:2b:9a:50:a9:54:60:8e:ba:62:52:e2:ee:
d8:f3:cf:c1:e4:d0:dd:ce:8d:ed:37:05:17:1f:2e:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CC:8A:EE:5C:B3:13:D5:A0:BB:28:1B:66:45:38:F0:A7:C3:FC:B8
X509v3 Authority Key Identifier:
keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:75:bb:05:42:8d:20:d6:a9:ad:73:9a:d0:1e:81:2f:98:
ba:85:b5:e0:b6:52:ec:4d:c1:08:8b:4a:90:49:06:52:6d:65:
42:bc:2b:23:cd:ab:f7:f2:08:95:c2:47:94:2b:ae:47:82:e9:
05:f3:64:d4:83:be:64:b9:c7:61:15:c5:15:ea:6a:3d:83:6d:
33:64:b4:f6:8a:9b:c9:fa:b4:cb:fe:21:c5:e6:72:29:4f:f3:
fc:6a:78:02:e4:e5:ff:2d:21:aa:b2:9b:0b:39:20:3e:23:c1:
52:bb:7e:26:12:ce:2c:dd:4a:b7:86:ab:f5:61:d3:04:62:1e:
67:79:7a:38:3e:80:86:1a:29:c8:7c:81:5c:8e:61:3b:ca:f8:
e9:70:80:83:d6:45:14:29:34:8f:cc:32:b9:b9:96:a6:ee:1d:
10:b6:bd:69:05:bf:47:80:8a:20:6d:b1:17:1d:98:28:f0:21:
d1:18:63:1b:34:d4:2d:a5:57:e4:f6:73:f4:dc:df:7c:6f:b5:
ab:52:d6:f3:23:1d:dc:8a:ad:f2:7e:91:9a:59:41:3d:c1:22:
96:c3:be:da:a4:3b:33:34:ef:3e:5f:18:f1:38:3c:29:b4:31:
61:e9:f3:78:41:5f:b7:4a:b3:a2:97:40:a5:43:26:e6:ab:4d:
da:1d:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:38 2025 by rpki-client