Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File: W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier: VSgBIjsweQc86ruspfDsweCrDX1JMDJIbzYWdDmbixo=
Subject key identifier: 3A:63:34:24:14:E4:0A:33:D2:72:D3:AA:75:EE:7B:47:DF:44:D7:B1
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer: /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial: 01988EEBC353EB4FC49ED590A5ED65FE9566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number: 01CE
Signing time: Sat 09 Aug 2025 13:01:12 +0000
Manifest this update: Sat 09 Aug 2025 13:01:12 +0000
Manifest next update: Sun 10 Aug 2025 13:01:12 +0000
Files and hashes: 1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: u+YqNy+6OprHbHvGr8BbJdomoqoCtfpvPAQeO+IQixE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:c3:53:eb:4f:c4:9e:d5:90:a5:ed:65:fe:95:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Validity
Not Before: Aug 9 13:01:12 2025 GMT
Not After : Aug 10 13:01:12 2025 GMT
Subject: CN=3a63342414e40a33d272d3aa75ee7b47df44d7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:08:03:2c:fc:47:a1:8f:43:c9:3b:05:cc:
6d:31:83:4b:09:d3:f4:f4:f7:95:7e:b6:7c:fd:6d:
c1:82:9f:b7:94:a1:3a:18:67:9b:81:93:f0:e3:60:
32:45:85:c5:3d:42:71:65:fe:03:d8:92:c9:10:6a:
48:5c:7f:8b:5a:4f:f8:46:2a:df:1a:a6:f2:6d:4a:
97:04:cd:a4:b8:30:de:49:14:a1:5a:a2:01:c8:c9:
d0:45:e8:08:94:72:b0:87:20:e0:4f:ba:70:b3:f3:
9a:89:a8:df:0f:4c:29:6b:29:61:59:15:1b:c3:8a:
46:39:23:29:6d:83:f3:8f:61:31:7e:bf:3c:1b:3e:
b2:83:6a:3f:47:82:32:6b:44:4b:78:29:0e:6c:90:
6f:e5:6f:29:98:e6:77:5d:c1:5f:dc:85:aa:52:cf:
86:85:49:e3:ff:1c:94:70:8d:c1:77:af:71:7f:c7:
d3:9a:ea:db:57:75:14:60:5e:f3:29:6f:b8:1a:7b:
51:cd:3b:eb:8a:0e:58:6c:2b:22:01:41:69:2c:01:
dd:cd:1a:2e:0a:4b:dc:0b:d1:23:1a:3e:c5:92:a1:
e7:6d:6f:0b:3e:cd:f9:30:f6:f4:b4:cd:ca:8a:6d:
c5:68:b7:ea:b3:90:9b:56:7e:aa:d6:06:d9:28:53:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:63:34:24:14:E4:0A:33:D2:72:D3:AA:75:EE:7B:47:DF:44:D7:B1
X509v3 Authority Key Identifier:
keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b2:ce:c0:2a:12:d8:a7:78:73:c8:05:7e:10:75:5f:7a:77:
c5:b4:c4:6a:fc:1c:ab:a2:b4:ec:79:a5:85:bc:ac:35:ca:94:
54:06:91:71:59:cd:d7:a5:d9:04:26:b8:1c:03:52:c6:31:8d:
df:6d:3d:c5:dc:4f:32:cf:01:6d:93:ca:b0:6a:c2:1a:aa:cd:
d6:e8:ef:10:81:fd:2e:68:fd:23:08:33:60:b8:cb:17:9f:65:
ca:26:22:fb:72:78:ea:dc:81:99:c6:15:b4:e1:1e:57:7d:aa:
a4:04:c0:4c:ae:87:8f:92:19:02:c2:87:44:6c:f4:b0:9a:8a:
d6:f0:ec:e7:a6:e4:6b:74:74:4a:a9:bd:cb:a3:51:32:1c:d4:
06:44:07:c8:08:3d:89:9c:59:92:06:6a:91:82:ef:f6:83:97:
f5:b2:b9:cb:c8:df:c0:1b:87:7b:86:4c:56:4c:19:75:bd:08:
bc:60:18:e8:cd:5d:85:f0:55:34:99:5a:4b:6b:13:58:b4:70:
0b:b7:7f:a9:1d:1a:7c:90:ab:f9:a6:bb:91:9a:53:fd:98:a9:
5e:ba:d3:36:3b:27:d1:2f:ab:d4:a0:58:85:79:73:51:7b:7e:
f3:c9:24:67:82:c1:d2:8d:24:b0:4a:f9:22:24:ac:bb:4f:ca:
63:9f:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:47 2025 by rpki-client