Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
File: W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json)
Hash identifier: vAdsG6ZQaTeZsVYl1CpwX8wqHPz8gAPwGkuuru5uzk4=
Subject key identifier: 8D:1C:A9:9E:AC:CF:CD:CB:F9:B5:FD:81:CB:AD:BD:62:7B:C8:53:0F
Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
Certificate issuer: /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Certificate serial: 0198D5BC45D9E80CB1C6A6BE8193C10CB68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
Manifest number: 0241
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: QXWWh6F5WKugCaz2xdc8vahTNd2/w/m/7lzP/IiYG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:45:d9:e8:0c:b1:c6:a6:be:81:93:c1:0c:b6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=8d1ca99eaccfcdcbf9b5fd81cbadbd627bc8530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:3a:c9:73:f4:20:dc:88:48:b9:46:15:49:
c6:ea:c1:43:04:df:70:5a:5b:4f:18:65:d6:98:31:
93:a9:4f:a2:20:fc:6a:31:da:cf:4f:c8:c6:0a:f8:
79:6c:8c:67:94:55:7b:e3:8a:ec:81:3a:fe:ba:58:
09:f6:ac:07:af:77:ad:06:3f:6b:a6:41:2c:0a:bf:
8b:6c:e5:0c:51:e2:a2:8d:65:47:19:d2:5b:0c:01:
c9:2b:71:27:ba:93:88:0e:3b:15:fe:0a:c9:96:83:
80:7c:f6:02:3d:01:57:8c:18:3b:9a:54:a0:d0:5a:
b5:4f:07:47:d1:6a:f4:31:c6:61:7f:3c:56:47:f2:
80:fe:77:88:22:b1:3d:48:0f:58:b9:0c:c3:84:98:
b6:86:40:fe:59:bc:9b:d5:9d:93:91:1f:a6:b6:89:
53:c8:74:6e:a7:0e:85:4a:fc:a4:49:4c:6a:f3:b4:
34:23:b5:23:65:94:1a:18:b9:e7:f0:b4:62:89:9c:
ba:d1:12:cb:b5:81:4a:4f:3c:8e:91:75:75:19:8e:
ec:b7:f2:23:2b:de:34:b5:57:e6:20:5a:92:fc:f9:
4c:78:60:0b:b2:25:22:43:80:10:ee:6a:c9:82:39:
87:cc:4b:3f:44:88:f2:84:a2:6e:3c:00:6c:bd:0c:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:A9:9E:AC:CF:CD:CB:F9:B5:FD:81:CB:AD:BD:62:7B:C8:53:0F
X509v3 Authority Key Identifier:
keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:33:7a:74:5a:41:5a:b4:48:6d:08:fb:d5:61:ae:fb:7b:fc:
c3:64:b4:e3:b8:cf:f8:4b:64:c6:4c:fb:c3:da:4e:c3:2a:cf:
78:6a:30:a1:c4:6b:17:f3:33:94:0d:1e:da:fc:c9:00:0c:a5:
6d:ba:58:0f:06:86:5d:42:98:67:32:3e:4b:ef:fc:ac:f6:76:
5f:8f:63:55:84:d2:4a:eb:f9:e6:b4:b0:90:fd:17:43:d0:11:
dd:f7:df:16:2f:2f:aa:c2:27:32:be:55:b1:e5:68:63:ab:e3:
ab:25:c3:ee:d3:25:49:26:45:be:37:d9:f7:f1:2b:ff:dc:91:
49:06:16:fb:c2:97:01:9e:a3:78:f1:f5:33:a6:5a:3d:ab:91:
3f:18:25:73:60:61:c7:e2:bf:92:0c:19:ff:d6:59:2a:7f:86:
b5:7a:03:77:85:9d:f1:56:d3:00:e7:f6:b6:0a:6d:44:8f:20:
d8:0e:14:28:f1:0a:a5:a7:58:44:5b:de:f2:3a:88:dd:75:e4:
e3:e9:b6:cf:76:72:e9:5a:b1:0b:10:e0:b3:f9:70:cb:71:e1:
4e:58:ed:aa:ff:2b:97:2b:7d:65:c9:66:ac:94:45:5b:b7:ca:
09:ad:72:1a:cf:cb:84:22:74:10:50:b7:01:cf:d9:ae:3f:aa:
a1:e3:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:47 2025 by rpki-client