Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: xHGMmxqV6+lHAavhA4W+i49VP3Qzf/gWeWm9P5OZLY8=
Subject key identifier: A1:DB:F3:D7:93:38:6F:EB:BD:50:06:8F:A7:D9:9E:0A:B5:04:3C:EC
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 01976C98DCB7A101A109BCD43E9C3CE64F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0BBB
Signing time: Sat 14 Jun 2025 04:00:46 +0000
Manifest this update: Sat 14 Jun 2025 04:00:46 +0000
Manifest next update: Sun 15 Jun 2025 04:00:46 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: oxP8Nv/RaUcdzrs4QkeEjoDxw1dim8YxbLxqR9Au+Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:dc:b7:a1:01:a1:09:bc:d4:3e:9c:3c:e6:4f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Jun 14 04:00:46 2025 GMT
Not After : Jun 15 04:00:46 2025 GMT
Subject: CN=a1dbf3d793386febbd50068fa7d99e0ab5043cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:21:b0:1f:bd:d9:13:43:71:09:c7:62:22:
96:3a:2f:10:ea:a4:b4:77:db:e4:42:36:4b:06:ca:
c2:5c:b0:08:1d:75:01:2a:c9:c6:e0:ea:5d:7d:07:
40:27:89:62:84:6b:75:f2:57:86:ae:a5:fb:ec:a9:
6b:73:03:33:77:3c:17:4a:c3:18:82:49:5a:8a:5c:
98:2b:62:75:98:8f:94:89:e0:69:cc:fd:50:42:ca:
39:70:43:e3:08:35:ea:f8:dc:e9:11:f0:0a:5d:33:
6c:7d:8b:ac:5a:3d:a9:b4:e8:84:2f:a6:ac:fd:f8:
ba:6a:2c:c3:45:b0:92:8a:ac:6c:b3:ab:01:e0:af:
48:a6:4c:d1:9a:2a:91:54:f5:95:67:8a:85:49:d2:
9d:b7:a9:d9:14:10:cb:ef:b9:93:90:02:0d:15:04:
07:81:fe:1e:5e:fa:13:a1:26:34:73:6b:fd:cc:68:
b3:67:22:4e:c4:44:56:80:38:6d:c2:69:66:da:88:
e9:3e:60:e4:7a:41:cc:d3:fc:06:7a:61:9c:ce:64:
97:80:c3:79:c7:9c:34:27:7b:bb:e3:b9:5e:6a:fa:
28:3a:ef:96:83:fe:f0:c5:b1:38:4b:38:6e:b1:6d:
ed:44:52:22:ad:10:84:8a:73:a0:5d:f2:36:24:8c:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DB:F3:D7:93:38:6F:EB:BD:50:06:8F:A7:D9:9E:0A:B5:04:3C:EC
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1e:a5:75:a9:2f:a3:5f:71:1a:6a:fc:47:6b:1d:b7:16:4a:
a8:90:1c:23:51:59:b4:da:dd:a8:2a:f1:32:47:11:bc:10:5d:
98:a0:1b:7f:f2:6c:69:c9:92:20:57:44:c8:09:86:47:56:02:
7c:74:48:02:9f:f9:8d:5c:ed:58:7e:01:97:30:72:6d:6a:5c:
61:f6:08:af:70:f2:d9:fb:58:6d:15:0d:d4:18:11:05:95:15:
83:f7:48:16:c8:78:b8:96:96:d3:8f:21:d4:68:ed:12:32:89:
83:1a:95:85:2c:a6:28:1e:ad:e6:a8:68:a6:23:14:e6:51:83:
59:b2:e7:18:97:c1:a2:39:98:e7:45:12:c8:d7:14:ae:c4:c0:
92:b2:52:5a:89:22:bf:2c:65:9a:a5:1f:a6:7a:52:51:e2:68:
2c:38:ba:6a:59:82:4f:86:bc:df:62:29:03:62:89:e3:b6:db:
0a:c2:6b:f9:19:9e:59:3e:ca:64:74:04:af:62:10:f8:71:9b:
6c:c5:fa:fa:e8:28:56:81:1d:ce:7d:e6:f3:30:1f:40:4b:13:
08:0b:81:07:8d:c8:eb:25:b2:6f:bb:ea:9d:14:c0:e0:bd:9a:
b5:0f:98:e2:09:0a:71:a6:c3:88:96:2e:72:39:de:bf:60:0e:
06:0a:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:54 2025 by rpki-client