Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier: XzUhbMI/nkkIIRnyFJjPmtGz7g+/wAwp6i2LihUi7Tk=
Subject key identifier: E2:BB:59:96:5B:F0:58:5C:FF:3F:9C:DA:C0:37:7A:11:8B:CF:F1:03
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial: 01976C98B699F7C4656B0D41DD0D884296D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number: 03D8
Signing time: Sat 14 Jun 2025 04:00:36 +0000
Manifest this update: Sat 14 Jun 2025 04:00:36 +0000
Manifest next update: Sun 15 Jun 2025 04:00:36 +0000
Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: 7aO2/GbgH2n5WJXXCNjQEDKjBSxqbzTD+Ca+6hJT2Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:b6:99:f7:c4:65:6b:0d:41:dd:0d:88:42:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Validity
Not Before: Jun 14 04:00:36 2025 GMT
Not After : Jun 15 04:00:36 2025 GMT
Subject: CN=e2bb59965bf0585cff3f9cdac0377a118bcff103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:e4:c7:fa:f8:70:c7:e9:1c:53:8d:a5:c0:
11:41:40:cb:72:11:3e:7c:2e:40:7b:55:b4:2e:2a:
a0:07:a7:aa:3a:57:0c:c9:e9:13:20:5c:4b:b0:aa:
0f:91:5f:de:5b:d2:40:72:4e:05:b9:69:27:4a:a7:
94:fa:fd:95:b6:0b:d9:99:81:2b:f5:e1:03:dc:d0:
10:e9:b1:85:16:86:63:8a:9d:c9:6d:bd:6e:72:1b:
18:8e:7c:c6:ac:b1:35:71:70:a5:ad:ca:77:8b:be:
1f:c3:17:1c:f8:60:60:8f:cf:5e:7e:01:a5:c5:16:
c3:b8:cc:4b:d8:1b:5b:3a:75:bc:33:80:6f:6b:52:
a2:f4:96:fe:35:36:88:c5:5d:08:0e:4b:b1:c8:4e:
d0:83:3d:1b:ca:5c:08:b2:53:85:3f:3b:91:67:e2:
5d:63:d6:16:b3:3a:03:14:9d:16:e1:66:b1:68:a6:
24:52:e3:50:c9:7a:b9:4a:8f:30:60:16:3d:c1:6e:
93:d5:61:b8:8e:f8:03:f1:40:4b:64:50:aa:78:46:
99:5c:17:ca:91:83:d4:ed:cb:8c:59:c0:51:a0:30:
6b:d8:a0:79:21:33:21:a7:39:c4:0a:94:76:0c:8c:
50:cb:55:d2:4d:8e:51:41:7a:89:61:bf:d1:4d:4a:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:59:96:5B:F0:58:5C:FF:3F:9C:DA:C0:37:7A:11:8B:CF:F1:03
X509v3 Authority Key Identifier:
keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:08:fb:b4:08:26:65:48:68:03:82:12:e2:c6:6a:ee:62:a5:
49:eb:a2:a1:7b:23:fb:0d:d2:14:bc:c4:1f:47:ea:f1:31:c6:
ad:32:39:5d:bb:12:11:3f:d9:f2:aa:41:5a:ac:08:20:cc:bc:
9e:d8:d8:8c:45:74:db:21:48:21:6e:8f:b5:3e:ca:8d:a9:e8:
ed:b7:e4:34:7e:84:8b:08:67:32:b5:5f:05:d3:59:2a:42:23:
3a:aa:ee:7b:49:7a:c4:ee:89:64:f2:8e:4b:cc:24:00:bc:9e:
51:b3:15:2d:73:97:26:18:4e:3d:7b:50:2f:87:64:c6:98:16:
10:20:61:8b:dc:83:db:3a:08:c0:fb:3a:1a:16:4a:c3:e5:d8:
70:04:bc:7c:c8:de:33:a1:3c:33:c8:6b:7a:e5:3c:d5:24:04:
29:0a:84:a1:50:56:73:96:dc:75:c8:1f:ac:80:fa:90:02:bc:
31:63:d1:84:a1:0f:d4:66:42:1f:8b:24:5c:47:e5:7a:c2:ff:
8e:cd:00:72:d6:28:0f:8d:f6:60:62:3e:e3:5e:36:c1:8f:6f:
b8:a7:43:25:bf:45:d7:ad:5f:92:1d:b3:07:00:7c:31:94:a7:
23:2b:fe:f3:b7:d4:09:1d:0a:d8:3d:a9:b3:e6:91:8c:49:37:
93:81:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:29 2025 by rpki-client