Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File: rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier: YMTe+sDiqkMpFevUWjvRyXWoJGppSGQRnV8He5Nz/gE=
Subject key identifier: D2:65:BF:E1:26:7F:1C:AA:A4:54:F8:BD:A8:44:F9:C9:F5:C2:03:52
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer: /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial: 01976F2BC1BCAF82F54F435CF33D92760136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number: 1241
Signing time: Sat 14 Jun 2025 16:00:27 +0000
Manifest this update: Sat 14 Jun 2025 16:00:27 +0000
Manifest next update: Sun 15 Jun 2025 16:00:27 +0000
Files and hashes: 1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: XTKbDqoVo249UxXQFHYll1EhZqVHN8ZMy0Ye9wjNyoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:c1:bc:af:82:f5:4f:43:5c:f3:3d:92:76:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Validity
Not Before: Jun 14 16:00:27 2025 GMT
Not After : Jun 15 16:00:27 2025 GMT
Subject: CN=d265bfe1267f1caaa454f8bda844f9c9f5c20352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:82:3d:2f:50:cb:c2:fa:d3:46:0b:2b:23:
d6:f6:42:7c:fa:ba:e1:50:db:8c:a0:b4:20:88:d4:
eb:e6:b2:81:ad:97:b2:d0:f3:47:ee:90:1d:c8:07:
89:d0:e7:6f:67:3e:3c:e8:b9:88:df:b7:92:8d:22:
5a:21:4e:3f:56:67:f1:7a:2f:94:ea:1c:09:01:f5:
7e:16:01:3b:9f:b2:dc:3d:af:ea:99:6a:c1:aa:4a:
2d:56:d5:bc:da:a8:75:bd:8a:82:32:5b:9c:7a:45:
c7:19:42:ca:1c:ee:69:5d:8e:f0:ba:b2:82:ca:aa:
49:b6:90:44:a3:8b:04:ba:db:29:85:d9:95:93:1b:
b0:8c:3e:4f:0d:cd:be:f6:b1:2f:d0:6e:22:2c:32:
fd:52:91:12:49:68:20:8f:27:5f:9f:bd:18:cf:8a:
3e:1e:47:4d:b1:cc:95:ff:7a:5d:15:b4:1c:c4:c3:
28:29:4b:00:52:c2:c4:a4:01:f9:bc:8f:10:f5:a4:
1d:75:b2:68:1e:25:98:0f:a9:0a:e3:12:43:02:7c:
13:d4:6a:e0:8f:c2:d1:4d:6c:c9:af:e9:86:e9:96:
a2:8f:0d:ba:6f:f2:d8:44:67:4a:01:bf:3b:cf:ed:
68:cc:e1:2a:dc:a2:a6:23:a1:c0:ce:e1:e3:4e:76:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:65:BF:E1:26:7F:1C:AA:A4:54:F8:BD:A8:44:F9:C9:F5:C2:03:52
X509v3 Authority Key Identifier:
keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:25:e5:84:fb:eb:3c:84:5a:9c:83:63:db:6a:4f:2b:f6:66:
26:87:59:82:5b:a9:a6:da:63:d6:51:a0:cc:ec:82:44:9d:c4:
13:ac:bc:0a:60:75:97:b2:f6:bd:1e:e0:67:f1:3c:7b:c5:b6:
b4:b4:16:60:d2:f7:f8:83:9c:fe:4b:58:18:f4:9b:3e:de:4f:
32:1b:c8:f0:58:5d:ef:ce:6e:5a:df:d6:73:de:29:43:3f:b3:
a5:e2:5a:49:bd:7b:e0:05:23:6a:64:eb:24:0a:c0:ef:84:e5:
08:cf:64:6c:ab:18:88:6c:64:56:1f:db:42:4a:d8:43:1c:7b:
a8:fb:06:15:6a:e7:ff:40:32:b3:5b:ca:ee:28:5a:00:94:fb:
b2:90:ff:f7:e6:23:07:eb:33:b0:31:8a:68:da:e1:35:9d:91:
5c:0e:99:34:41:02:dc:5d:4a:43:8b:12:25:c0:f8:ae:23:b6:
40:8e:bd:d4:01:05:04:6f:27:fa:c6:21:d3:f2:37:7b:b1:b2:
4e:f0:67:64:24:30:82:a6:03:77:d5:4f:39:0b:20:fd:8e:71:
c3:15:65:26:6b:af:b1:59:f7:15:d2:ce:a1:df:ba:de:88:22:
a6:da:80:71:b2:2f:97:63:2a:4e:26:2d:68:d9:98:e8:4d:27:
3e:aa:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:13 2025 by rpki-client