Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: bpiQn9AAzURAPKRsMNEwgicfz1Vz+93ouXSs5yebWbY=
Subject key identifier: F4:5A:F1:7A:23:05:9D:E4:74:3B:8F:29:E9:57:1A:A6:64:3C:B3:B8
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 0198D58379FA152CAE05B1F01C73F021B0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 0169
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: idmEVwrVx1jazpw2ebRll1qXjxD/RGPPpmy+sL1p8lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:79:fa:15:2c:ae:05:b1:f0:1c:73:f0:21:b0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=f45af17a23059de4743b8f29e9571aa6643cb3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:0e:2b:47:a6:3a:6c:6e:1b:d9:ae:02:62:
70:14:72:fc:33:1c:a2:72:1c:d0:4a:0b:db:43:55:
a1:bc:38:d9:5c:75:f4:49:81:6a:00:af:66:62:70:
99:34:2c:c6:f5:1d:16:1f:81:b3:32:fd:98:6b:05:
d7:d4:fd:00:20:de:67:a5:46:51:ee:71:67:db:ce:
33:0e:16:98:1b:c9:99:41:3b:67:65:14:49:fb:75:
13:97:6d:30:37:09:21:1a:a6:ab:00:58:f2:bf:75:
06:9a:16:33:c8:fb:82:f0:ed:47:08:1b:42:44:ef:
5a:e9:7d:f8:ba:b1:ea:50:9e:f5:e4:d3:67:cb:88:
65:0d:15:47:90:43:4a:37:be:8f:e0:85:01:63:3f:
e5:a2:c7:4a:24:71:e6:eb:1e:29:a3:8f:42:95:45:
a3:9e:db:a6:d2:32:d4:d2:bb:9a:6a:6a:b7:74:d7:
40:b0:50:70:ac:95:2a:84:f6:51:8c:3c:54:16:db:
f3:22:0b:6e:fd:ae:db:34:19:ca:a6:4b:a8:a4:7e:
59:20:c3:77:9e:0c:b2:04:be:bc:ff:ad:69:cd:1e:
e0:03:c4:88:4d:5b:90:8d:35:d1:cd:87:17:77:6f:
0f:a8:19:fd:10:1c:d9:10:ff:29:6d:b9:9c:f4:10:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5A:F1:7A:23:05:9D:E4:74:3B:8F:29:E9:57:1A:A6:64:3C:B3:B8
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fc:7e:4f:f5:07:30:59:74:e6:07:46:be:3e:60:d8:83:7c:
a1:16:f5:d5:b7:5b:21:18:c4:ee:6c:8c:cf:75:19:e4:eb:d9:
13:3f:25:8e:78:58:62:81:61:9d:ee:52:e1:52:de:58:98:6e:
50:f6:e9:3d:45:75:5c:d3:2d:e7:75:af:46:d9:08:56:de:1e:
54:83:6c:ea:79:f0:f8:c3:55:25:88:9a:67:14:fe:cb:57:7d:
f0:f8:1b:b5:1d:9e:99:0e:86:3f:2a:e2:f0:45:86:e4:81:5b:
a0:d8:fe:ee:2a:e2:92:39:9b:08:67:77:c5:5f:59:ee:62:74:
fc:20:b2:b3:21:3e:96:d4:eb:33:09:0f:37:a3:11:ff:f6:18:
31:bd:b0:67:2f:82:fa:35:68:de:98:b7:8c:8a:04:e1:15:a8:
53:bf:fe:5a:08:0e:91:b0:c2:79:8f:91:de:20:13:db:39:66:
32:ee:a3:00:d0:02:9e:69:cd:52:a3:20:c0:27:68:80:5a:5c:
11:e1:ee:80:bd:0e:ba:83:9f:e9:a1:c3:07:74:64:1a:ec:bd:
63:1e:5b:9f:b1:77:dd:d3:17:db:e7:15:3f:33:cd:f9:7f:d3:
bb:47:48:dd:4c:2d:29:3d:64:6f:5c:bd:92:55:e9:bd:87:d7:
e1:46:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:12 2025 by rpki-client