Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
File: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft (raw, json)
Hash identifier: g6VuDD9cdFopZQejJmDTvxfYYsrtDOHUDhbaW4/ollE=
Subject key identifier: 8D:C5:9E:6A:69:8A:98:CA:B0:91:03:68:92:33:D1:0D:6F:67:4B:A2
Authority key identifier: 09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
Certificate issuer: /CN=0963491cd67570b0783b400161c0adcaa002f0db
Certificate serial: 01976D066CE8FC471A31A714AB5EE7B35487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
Manifest number: 0463
Signing time: Sat 14 Jun 2025 06:00:26 +0000
Manifest this update: Sat 14 Jun 2025 06:00:26 +0000
Manifest next update: Sun 15 Jun 2025 06:00:26 +0000
Files and hashes: 1: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl (hash: Wm4UFMvFJxGr/K4Qh4xnCzvf4mB2mIPDTKsKfmrBhJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:6c:e8:fc:47:1a:31:a7:14:ab:5e:e7:b3:54:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0963491cd67570b0783b400161c0adcaa002f0db
Validity
Not Before: Jun 14 06:00:26 2025 GMT
Not After : Jun 15 06:00:26 2025 GMT
Subject: CN=8dc59e6a698a98cab09103689233d10d6f674ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:ee:0c:78:72:07:30:5a:fb:03:37:42:e5:
23:3c:e4:eb:df:f2:8c:d1:5f:b3:07:67:3c:75:ae:
43:dd:3d:d7:0f:19:f7:41:46:ed:b5:3e:d7:bd:fa:
13:ef:37:1b:c7:53:58:b1:b1:78:ad:b2:d2:49:b3:
95:ec:79:b8:5a:47:9c:d7:0a:66:14:1b:7f:1d:1b:
7f:ec:82:e2:82:38:df:3c:c9:7d:99:f1:d9:24:7a:
2d:2f:c2:e0:11:58:9a:ae:71:14:83:d8:d2:6e:4e:
94:d5:35:4d:29:e8:23:e1:43:cc:8f:da:3d:2a:f1:
e1:63:88:e2:9d:0f:34:0e:cc:08:0a:e0:01:dd:8c:
d9:fe:c0:83:e8:9c:43:7e:f7:fc:13:3a:a9:42:7a:
d2:6c:e1:3d:1a:50:30:8f:5d:c7:dc:1f:20:7d:ab:
a5:1f:5b:e1:93:5c:b8:ef:78:da:8a:df:9c:80:db:
d4:6c:07:9e:f5:72:42:10:ef:bf:e6:fb:10:e2:c4:
73:53:00:20:00:a0:88:46:0c:80:07:6c:c0:90:d3:
47:ab:1e:2c:ac:be:7b:de:c5:10:1a:ae:be:ab:21:
8e:0b:59:14:90:fe:53:d3:b8:c7:b4:6f:30:0e:81:
1e:23:a9:b9:05:a0:d4:b8:c6:bd:5d:67:35:af:74:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:9E:6A:69:8A:98:CA:B0:91:03:68:92:33:D1:0D:6F:67:4B:A2
X509v3 Authority Key Identifier:
keyid:09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1b:b4:fa:fc:5a:67:6d:ac:19:b1:35:98:66:e3:24:32:cd:
6f:23:ba:40:ba:d1:4e:1c:04:a4:5e:c4:3f:a3:6b:0f:f5:74:
14:3c:4e:c3:1f:cc:63:55:ce:33:5b:bd:b3:25:84:c9:08:b7:
b4:68:7c:6e:db:1a:ba:65:49:d7:45:49:9d:d1:ab:fb:32:1a:
71:c7:3f:79:2e:3f:bd:c3:0e:e0:d7:47:35:d2:8e:93:79:d8:
dd:f0:5b:1c:9e:45:2b:a1:45:e0:31:0b:9d:54:fe:73:e3:cb:
13:80:a3:31:05:15:09:48:f0:74:84:0f:ea:56:53:39:48:2e:
49:b2:05:6e:39:d0:5b:ab:4d:24:a7:cf:d7:d5:34:bc:4a:ff:
7c:2b:82:6f:08:33:f4:b3:87:9f:af:4b:86:fa:25:e1:c7:1c:
fa:75:5e:21:1d:0c:82:70:de:f9:d0:04:57:24:ea:ea:36:af:
20:38:15:37:6c:a0:4b:02:48:34:c2:05:ca:bb:96:f8:0d:67:
cd:29:c2:05:67:07:a9:55:00:f9:a5:26:e8:29:51:c7:72:52:
61:1b:ba:f2:e6:a9:18:b0:ec:83:63:90:8d:65:b6:ff:a9:e2:
e4:75:25:3a:f8:7e:01:a4:47:0a:9e:35:16:69:79:47:d9:0b:
68:5d:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:44 2025 by rpki-client