Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File: wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier: 4w+pxWWwPOIDgw2hAuZk1AawCTTYdiFiZhsLUmayr8U=
Subject key identifier: 61:43:54:C0:D6:C0:4D:D0:9F:84:9D:6A:AD:1D:2A:E1:CD:E3:36:6F
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer: /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial: 01977E313E67820FF9982219B0790A63434F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number: 012A
Signing time: Tue 17 Jun 2025 14:00:45 +0000
Manifest this update: Tue 17 Jun 2025 14:00:45 +0000
Manifest next update: Wed 18 Jun 2025 14:00:45 +0000
Files and hashes: 1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: oFJQDGDyQrpa1xcn94n1/ntNi2bzCROM6x+s0mNZgVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:3e:67:82:0f:f9:98:22:19:b0:79:0a:63:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Validity
Not Before: Jun 17 14:00:45 2025 GMT
Not After : Jun 18 14:00:45 2025 GMT
Subject: CN=614354c0d6c04dd09f849d6aad1d2ae1cde3366f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:16:00:7a:4d:88:9d:75:00:d6:16:cd:16:
87:45:4e:82:98:90:7e:cc:20:a8:8e:a7:21:1e:bb:
60:1c:14:89:d3:85:12:b5:e0:f3:8a:73:3c:4b:7f:
04:50:9b:8d:f1:36:b3:0e:17:cb:26:5f:9d:9b:a6:
e1:b9:c6:d0:4e:f0:7b:13:d3:ea:fa:1b:47:29:19:
7c:73:b9:6b:ef:8e:54:6e:c8:21:c9:29:00:5c:49:
e8:93:f9:0c:6b:24:ac:7c:9a:35:94:69:bf:4f:ea:
b8:10:cd:14:6e:ae:19:79:21:44:d7:fc:b6:82:ed:
b9:07:8b:3a:d1:18:60:5e:6e:fd:18:e6:b5:7c:ea:
ab:49:fc:c8:ab:b9:a2:bb:97:92:e7:fd:e7:ad:72:
f1:64:41:d7:a4:54:46:4a:16:d7:2b:18:75:4c:9e:
b2:6c:6a:a1:5d:eb:d9:95:79:08:b2:28:88:47:77:
83:b7:78:3d:d3:d9:dd:7c:0a:98:10:f0:95:cf:11:
49:06:79:3e:ff:c4:6f:8a:9a:9d:63:7c:f6:0e:1f:
98:b9:2f:a1:df:62:98:bd:dc:14:4b:d2:2f:0f:05:
35:88:ea:e8:8d:69:e4:48:27:c1:e9:9f:af:84:4d:
3e:46:7b:9a:d2:ba:e0:c3:de:3a:b1:a8:7f:11:68:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:54:C0:D6:C0:4D:D0:9F:84:9D:6A:AD:1D:2A:E1:CD:E3:36:6F
X509v3 Authority Key Identifier:
keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:73:4c:6d:e5:43:f6:ca:bc:60:02:00:e4:b6:b1:12:47:
8c:03:e9:3c:94:cb:19:a4:bd:81:cb:7b:f5:d0:0a:1e:81:71:
9f:28:ab:80:85:4a:0c:d0:12:0a:6c:6e:be:3c:2a:cf:f1:55:
39:a9:97:8c:e7:0f:5e:fa:c5:44:87:21:d3:77:1a:02:8d:09:
55:f3:fe:a7:04:d0:95:a7:dd:f6:1f:d2:b9:85:57:a4:8f:56:
9a:f3:64:2e:67:a7:4e:11:47:bf:01:78:5a:f5:0e:f6:e1:dd:
90:46:3c:98:32:a7:e2:dc:84:88:40:95:10:a0:f1:90:76:a3:
fc:37:92:00:66:cf:a1:c6:0b:d2:d2:2b:be:0e:ac:6b:fa:c2:
bc:dc:34:7c:c0:5e:80:e6:62:ba:08:d9:4e:71:1b:b4:c1:57:
06:e7:67:c1:02:b6:21:2a:7d:01:2e:d5:da:da:cf:80:bf:c1:
c9:bb:e1:8c:5b:82:22:3f:8e:27:5d:1e:7b:fd:62:e7:94:8a:
40:e8:e5:50:4d:3b:e7:dd:05:0d:ba:85:9e:ab:27:01:7e:3b:
a4:ae:fa:95:6b:a6:e6:85:42:43:1d:85:e8:36:2b:a6:31:4c:
bd:a0:cf:b7:18:88:b6:7f:96:2a:2d:19:68:18:38:13:8d:29:
e5:f2:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:04:22 2025 by rpki-client