Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
File: wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json)
Hash identifier: BaleFWI3iFL1d082bidrexVpEmBRkMsnuO+iNbRPkgE=
Subject key identifier: B5:41:4B:7B:5C:6E:03:8B:3D:D6:7E:05:06:33:F6:02:98:42:2F:DD
Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
Certificate issuer: /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Certificate serial: 0197692A03B3B54F5BF7F8C7401DA0006CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
Manifest number: A9
Signing time: Fri 13 Jun 2025 12:00:50 +0000
Manifest this update: Fri 13 Jun 2025 12:00:50 +0000
Manifest next update: Sat 14 Jun 2025 12:00:50 +0000
Files and hashes: 1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: rwvH0V0uhQmUWFHq2woH6vpIVIr83ZLNx/gV1Kheiz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:03:b3:b5:4f:5b:f7:f8:c7:40:1d:a0:00:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Validity
Not Before: Jun 13 12:00:50 2025 GMT
Not After : Jun 14 12:00:50 2025 GMT
Subject: CN=b5414b7b5c6e038b3dd67e050633f60298422fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:ff:59:24:66:9e:6a:82:b3:ea:8e:a5:64:
5e:4a:d7:2d:dc:2f:51:e1:a7:be:04:41:40:a9:ae:
c3:ca:16:86:66:80:8d:b2:d5:46:63:4f:d5:e5:2d:
e4:73:e6:0f:de:dc:ea:ab:ad:fa:1d:33:88:a6:72:
ca:a9:e9:87:16:e5:6e:41:13:b1:68:48:5d:a0:63:
38:c8:cd:09:2c:64:3b:11:90:c2:42:92:c5:51:1d:
2d:e6:eb:84:74:93:43:21:8c:87:f1:4c:b5:25:f8:
c8:08:6e:79:34:79:38:b6:e6:60:3f:23:0e:e9:b2:
8e:7a:99:e6:53:3a:16:6e:3d:fd:7d:bf:2a:2b:4d:
5a:d4:5c:d5:4d:58:c4:ff:88:76:82:4f:e3:ea:10:
96:94:a9:d1:6a:63:f4:fc:fe:b7:a5:5c:93:41:88:
11:b0:56:92:27:ca:4a:93:4e:6a:47:66:b3:56:6b:
ca:0d:f8:2b:7b:e3:b4:44:1e:6d:bd:6c:7a:f6:51:
63:f5:48:d9:51:94:5f:d8:5a:11:a7:8b:41:68:2c:
c5:8b:00:34:d7:fa:32:49:7f:a0:2f:8f:86:23:b0:
a3:ee:02:fe:a3:d8:4c:c1:ef:c1:68:99:4b:92:56:
6e:65:48:6c:bc:0d:b3:66:fd:ad:fe:f3:d6:fb:1b:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:41:4B:7B:5C:6E:03:8B:3D:D6:7E:05:06:33:F6:02:98:42:2F:DD
X509v3 Authority Key Identifier:
keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:91:e8:3e:84:ae:8b:2c:02:28:1a:36:68:13:c1:23:cc:73:
61:ee:2e:4f:9d:1a:85:00:dd:49:af:50:63:f0:49:46:18:8d:
0c:d7:d4:da:66:b0:e1:38:0b:74:6b:b4:f6:f7:ec:26:f8:3c:
b3:fd:9d:28:7d:7b:73:65:04:66:66:15:6c:5b:f0:3f:b1:bc:
c5:df:8e:59:49:b3:9c:b7:48:d4:e2:77:8c:2b:57:28:08:dc:
bc:1a:12:4b:52:9a:15:f8:fc:4e:a7:c0:4d:53:14:0f:4f:0a:
ae:28:f2:11:f3:af:e4:20:e0:0b:1e:ed:d3:ee:b6:71:c8:34:
19:8b:8e:fb:ee:79:1a:ba:b0:ee:fd:47:cd:75:d8:9c:1a:cc:
dd:e1:40:11:70:e1:37:a9:1f:f6:83:bb:52:bb:65:62:7f:8f:
b2:87:60:4a:00:9a:c4:98:c0:4e:01:9d:95:82:c8:b4:49:1e:
ff:9c:67:5e:88:e0:1d:a4:88:bc:26:25:a5:c7:6c:47:72:39:
85:4c:b1:73:e7:45:4d:dd:90:d1:74:4a:1e:09:33:33:e1:bf:
01:b0:bb:56:0f:02:83:e7:cd:4e:27:e9:a6:e4:86:3b:a5:c5:
23:3b:cb:ae:80:61:61:9a:0d:ad:eb:53:b8:c4:b4:cb:df:2f:
c4:30:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:27 2025 by rpki-client