Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: a0ckNOSUSIV74w2RWyZmuLi/KB5AdrXxKeT9QVbAVOA=
Subject key identifier: 76:2E:7B:DF:F7:7E:9B:13:40:52:AD:AE:44:B0:B6:1F:10:4D:5A:0B
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 0197711B2CEAD5A1A6A103867C0ED85A4936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0A07
Signing time: Sun 15 Jun 2025 01:01:35 +0000
Manifest this update: Sun 15 Jun 2025 01:01:35 +0000
Manifest next update: Mon 16 Jun 2025 01:01:35 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: Ava8d75W+rLkodyNdf2bDT1dxkOUCGfYPvtbJajyFF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:2c:ea:d5:a1:a6:a1:03:86:7c:0e:d8:5a:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Jun 15 01:01:35 2025 GMT
Not After : Jun 16 01:01:35 2025 GMT
Subject: CN=762e7bdff77e9b134052adae44b0b61f104d5a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:2f:09:9c:5e:01:c7:4d:71:a2:9e:d4:3d:
f1:58:d1:20:cb:dd:66:79:9b:f9:3d:c5:1f:53:3b:
36:a6:80:19:2c:eb:a8:0d:67:db:49:5b:1d:56:0c:
1f:2f:19:a0:2b:6a:16:53:3a:8f:ef:f2:70:ac:3d:
90:a5:80:f4:5a:bf:87:7b:7f:2f:b8:da:e6:52:d3:
00:75:6b:f1:11:95:16:7b:8b:26:03:fb:f5:11:ce:
77:cb:57:f1:fd:b1:fc:ec:fb:8a:c5:2e:7d:e4:51:
48:5f:05:22:5d:1a:5c:dd:15:b8:57:df:f5:74:9b:
c5:fc:bb:49:4c:7e:6b:ff:a6:55:4a:4e:16:9c:bb:
df:f6:4f:02:b1:72:0b:77:70:d9:2a:87:40:7c:c8:
a0:b7:a6:95:c5:37:79:50:94:a4:c2:46:63:d5:d9:
ea:08:16:54:6b:02:d1:4f:31:b9:67:f4:5f:3f:13:
ec:4a:13:7e:da:bc:7b:3e:a9:55:65:43:f1:b3:66:
92:69:05:f6:9c:fc:c8:eb:41:da:a0:fd:ea:6e:99:
b5:02:7d:d5:bc:d4:25:ca:6c:61:98:94:f0:4b:a8:
2f:98:f0:7c:61:5b:e2:76:b0:d2:91:7f:8d:9e:44:
ee:74:92:40:8a:43:a4:db:fd:68:86:98:45:ee:b3:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:7B:DF:F7:7E:9B:13:40:52:AD:AE:44:B0:B6:1F:10:4D:5A:0B
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:16:1e:a4:6e:4c:ac:99:f8:dd:0e:93:a1:b7:2c:21:57:e4:
55:ae:20:46:cc:0d:24:04:41:2a:c3:2d:79:f0:0d:26:cb:c9:
e7:f7:52:9e:99:1e:9d:71:c0:48:21:e1:60:0e:c6:de:67:2c:
80:9f:e0:7e:98:d2:ed:d5:98:b1:f1:b5:4a:c6:69:e6:60:55:
51:92:cc:d7:72:ee:c0:7e:62:25:07:64:aa:0c:4b:f2:d2:83:
80:85:af:33:df:f7:55:5a:f0:d3:42:0d:26:75:8d:37:d7:7f:
44:06:2c:ba:ea:b0:82:d1:5e:81:d7:c9:55:ef:5e:97:80:c0:
ba:17:51:eb:05:78:8f:7e:f6:93:cf:13:04:6e:b8:cb:e0:92:
42:e1:9c:df:0c:2e:94:dd:10:2b:c4:1a:13:d3:b5:f4:8f:e6:
79:8f:c9:57:e6:e0:3e:5d:4e:0f:cd:11:73:09:de:06:47:5d:
e3:0b:9f:85:47:45:af:b9:34:1f:a1:ba:1c:f2:d7:f7:92:2e:
af:bc:23:70:b2:eb:af:0b:7c:fc:ca:5b:21:8a:52:86:63:f9:
5d:9e:4e:64:24:bf:fe:4f:f9:fb:55:c2:ac:93:c2:af:45:bd:
3b:d5:65:f6:96:2e:e2:1a:1b:de:7e:7f:12:07:89:ef:e6:55:
36:b8:d8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:36 2025 by rpki-client