Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: qRuIM2EFJl0vhP6Q23/dtxlharP+5fRCyRg3OLgGECI=
Subject key identifier: 3A:6F:A2:F7:CB:F1:B5:AB:78:A4:21:1D:4F:48:60:29:F2:27:F7:B3
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019776E63362F79AAFDE017C8013803AD9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 080D
Signing time: Mon 16 Jun 2025 04:01:26 +0000
Manifest this update: Mon 16 Jun 2025 04:01:26 +0000
Manifest next update: Tue 17 Jun 2025 04:01:26 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: XhdnzrVanmWNmizHb7rxKL4PTEqr4qnFRcg82/XROYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:33:62:f7:9a:af:de:01:7c:80:13:80:3a:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Jun 16 04:01:26 2025 GMT
Not After : Jun 17 04:01:26 2025 GMT
Subject: CN=3a6fa2f7cbf1b5ab78a4211d4f486029f227f7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1a:7b:2f:d6:0e:0e:6f:a0:3e:0f:b2:f1:a6:
70:01:5c:8e:7b:b6:b4:c1:e0:be:41:6d:ae:33:b0:
bb:88:56:33:1c:d9:b2:32:a4:5d:a9:9a:d8:b2:50:
5d:6b:46:36:04:b6:d0:ba:0b:32:6d:d9:06:f8:2a:
96:fa:26:3d:6f:c8:0d:9c:65:5e:13:01:01:57:2d:
ff:9f:8c:f0:59:d9:48:eb:fe:c5:f1:a1:ad:5b:7e:
1a:6c:cc:eb:5e:5b:e3:64:35:e7:51:a9:69:40:20:
ca:f3:c1:19:0f:18:b9:8b:52:0a:bc:a8:d2:1a:97:
99:14:23:fe:ad:dd:9c:80:48:33:94:c1:de:5b:5b:
e4:52:7e:9f:e8:77:ab:77:71:7e:05:b4:c0:38:0f:
e9:7c:c7:99:8d:25:5d:d7:c2:79:9c:5d:84:da:03:
1e:cf:97:7e:06:67:dc:59:e4:de:6a:43:36:4d:0d:
9e:95:6d:57:ed:31:3a:2c:c6:0c:92:90:98:65:32:
69:c2:38:a0:00:cb:f2:6b:24:ff:96:bf:57:b8:45:
d8:a5:f3:f5:53:c5:39:db:29:dc:e8:7d:d2:90:06:
99:ad:ed:7b:af:a1:d1:48:ac:9d:ab:10:22:d3:48:
5d:08:99:9d:1a:f8:9b:6d:df:c6:17:ff:71:84:84:
79:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:A2:F7:CB:F1:B5:AB:78:A4:21:1D:4F:48:60:29:F2:27:F7:B3
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:3b:a2:9d:a0:23:74:ca:5d:a1:56:f1:0e:db:78:2c:70:
0f:2d:cc:c8:38:12:12:7d:58:1d:12:ac:2f:45:d4:04:05:cd:
80:bc:b8:e9:54:88:66:49:29:d5:1a:dc:6d:13:44:7d:2c:25:
87:ba:ea:83:f7:a6:a8:33:9a:60:cf:b4:85:e8:7d:e0:f9:2d:
b2:86:27:1f:98:56:63:68:95:d0:96:cf:d3:20:df:53:f3:98:
0f:3a:b7:0f:60:0a:2a:3e:6c:f5:91:a0:bc:2a:d8:18:de:24:
5b:e4:53:20:0f:f1:2b:bb:d9:6e:f8:05:59:a9:05:0e:18:3c:
39:93:52:af:a7:3d:82:21:91:13:8f:dd:68:9b:d9:44:8f:0f:
82:24:65:21:68:b7:98:f6:f7:49:c8:0c:e0:08:c7:71:88:1d:
d6:e3:11:8f:da:9a:94:f5:cb:51:9b:6f:b0:62:1c:bb:3d:82:
b3:c5:84:d8:4c:34:c2:4d:fa:06:02:e8:60:48:cc:94:c8:6b:
25:02:95:40:e7:2e:ec:a6:06:d8:ca:3d:9b:4b:62:56:35:a9:
77:26:1c:6a:42:86:e3:7b:95:df:ba:2e:25:04:1d:b1:09:f5:
f4:83:1c:df:ea:2d:25:2f:45:b1:c0:2f:b9:ee:1d:87:ec:72:
da:b0:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:30:37 2025 by rpki-client