Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier: cwpX7iHomR33hTXar4bQxKx8SlzKUEoXZ799np+BTgE=
Subject key identifier: FE:FF:E0:9F:33:2A:86:1B:FC:73:46:FB:F9:C9:D2:7E:F6:F9:EB:11
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial: 019769616DD4DA456A1B83707FA3C17F84A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number: 0C43
Signing time: Fri 13 Jun 2025 13:01:22 +0000
Manifest this update: Fri 13 Jun 2025 13:01:22 +0000
Manifest next update: Sat 14 Jun 2025 13:01:22 +0000
Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: 7FXAkvishSXXiZcRgRsA3/n0YYRIhbB6Rluz84l/3/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:6d:d4:da:45:6a:1b:83:70:7f:a3:c1:7f:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Validity
Not Before: Jun 13 13:01:22 2025 GMT
Not After : Jun 14 13:01:22 2025 GMT
Subject: CN=feffe09f332a861bfc7346fbf9c9d27ef6f9eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:3f:c8:44:65:01:1a:54:20:ff:f3:87:02:
f5:ec:dc:eb:cd:fc:ca:71:24:e6:db:f8:83:0f:64:
4a:cc:b2:22:66:2e:6e:10:28:22:0f:f9:aa:6d:e9:
59:e0:84:db:3c:3f:c3:7d:c1:0a:ef:f5:53:91:90:
0b:dc:d1:25:87:fd:2f:36:3c:5c:bd:82:2b:f8:0e:
ac:11:99:40:7c:25:7d:99:8e:6b:b3:1f:07:77:47:
fd:54:69:66:6a:20:10:ae:a5:ab:8a:6d:f0:b5:ef:
49:cb:65:78:f4:89:34:e0:6a:cb:38:8b:71:f9:2e:
a9:e6:d3:5c:b4:d4:2e:b6:ed:54:bb:07:44:a5:bc:
c9:14:f2:b1:55:20:40:a0:27:87:62:2b:ea:56:f7:
64:0e:ec:1d:3a:63:5e:23:29:cf:a5:5f:e1:39:84:
45:66:2f:af:2c:fb:e1:2a:3f:c6:dd:a1:a5:b7:d4:
60:19:cb:20:e1:dc:db:76:8f:57:54:b7:9e:3d:ab:
27:70:56:2c:f0:18:7b:06:cf:c2:5a:30:03:ae:f4:
88:f2:00:d2:00:51:da:88:95:1a:26:f4:ca:b2:2f:
9b:c2:e3:7d:be:24:6f:f4:a2:30:e3:1b:fd:2f:94:
5c:41:42:3c:bc:a5:f0:70:d0:a5:4a:ff:41:b2:c2:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FF:E0:9F:33:2A:86:1B:FC:73:46:FB:F9:C9:D2:7E:F6:F9:EB:11
X509v3 Authority Key Identifier:
keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:db:f5:d1:d6:7d:25:dd:9a:f1:84:a5:0c:36:c8:13:f6:
80:0d:10:60:39:7d:55:80:99:7a:3d:af:38:d0:fb:ac:55:37:
a9:6a:ad:21:8c:ed:60:4e:22:5e:6f:fe:11:ab:f4:0b:ff:c5:
0e:45:97:14:0b:e4:bd:16:07:85:31:06:b2:bc:50:54:8e:3f:
56:40:2f:91:bd:86:04:45:51:c4:01:c6:7a:2a:e8:bf:c9:92:
92:44:d5:3d:ce:86:53:5c:3c:a8:4e:37:0e:7a:cd:1b:7c:19:
df:7a:0d:75:b8:d4:2d:91:bf:45:58:b1:2e:a7:33:3c:67:dc:
12:bf:48:4f:5a:57:bb:38:46:c7:03:40:5a:00:1c:e1:d9:c6:
78:44:dc:55:5b:44:2e:e8:a5:e3:b0:9c:2a:d4:71:94:25:4b:
b0:52:81:be:6b:2f:26:ac:9e:a1:b6:d7:ea:b4:ed:41:88:e8:
be:6e:ca:35:83:99:91:5d:35:e6:17:88:2f:c0:56:67:a2:68:
76:87:76:4b:a8:99:ad:38:dc:76:8c:b1:19:e9:a4:63:e5:be:
60:b0:60:4e:80:9d:f0:b7:c8:e0:ba:06:b8:12:9b:40:6c:d7:
2e:fd:0d:f2:5f:42:00:e6:3c:24:99:b6:a1:2b:76:02:2f:65:
b8:e3:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:48 2025 by rpki-client