Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: Lots8471d26CLmu6k9H+Iyo3RbbmvagV3WR42gULTTE=
Subject key identifier: 72:5D:38:B9:81:FA:0F:71:9A:79:E3:DF:48:1E:F6:A4:F7:18:25:7F
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 0198D54E688F0FB4E4BF5F6643ECB4F6AFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 11EE
Signing time: Sat 23 Aug 2025 05:02:22 +0000
Manifest this update: Sat 23 Aug 2025 05:02:22 +0000
Manifest next update: Sun 24 Aug 2025 05:02:22 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: bCWwojwFbWXfvmcRkQDXGbBTA7y8ZyMn6wxTrgNy4jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:68:8f:0f:b4:e4:bf:5f:66:43:ec:b4:f6:af:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Aug 23 05:02:22 2025 GMT
Not After : Aug 24 05:02:22 2025 GMT
Subject: CN=725d38b981fa0f719a79e3df481ef6a4f718257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:8f:9e:e8:26:31:2b:0d:5e:90:d4:04:0c:
88:13:ca:6b:34:17:c6:c6:30:fe:89:56:37:6c:c3:
ef:b6:65:66:c5:ca:d6:16:57:22:f2:cd:2a:c3:da:
e6:88:30:55:b6:d0:f6:dd:b5:39:c8:7b:31:dc:8a:
0c:b5:c0:6f:a7:c0:51:5a:d6:6a:e4:69:d9:eb:90:
fe:99:cc:ae:f6:1c:e6:c0:93:35:d2:41:0e:a2:84:
bd:5d:b0:eb:47:fc:e5:d6:fe:f0:7b:1b:79:6c:d4:
9d:4e:68:a8:9a:13:c1:ac:14:74:6f:b5:9a:15:12:
9a:a0:99:c1:a6:1e:38:41:d7:6c:8a:09:fc:a2:d7:
51:23:c9:ad:fa:17:f1:8c:09:5e:99:83:fb:40:bf:
cc:0d:d1:23:73:5f:e5:b8:81:62:e4:92:f7:49:2d:
99:19:b0:0c:d2:4b:c6:43:5b:8b:a0:f6:7d:8d:2a:
b3:c8:14:9f:26:ee:d8:16:e9:50:df:13:2d:06:02:
9e:9e:91:32:74:d0:3d:18:b1:10:80:5d:aa:e2:08:
ec:21:16:6e:6b:98:80:f6:33:c8:33:3b:0c:ca:a9:
2d:2c:c2:1c:d5:1b:c3:fe:71:1e:ae:73:49:1c:45:
33:f7:d5:7f:cb:1c:2e:1c:d5:e5:58:78:96:a8:83:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:38:B9:81:FA:0F:71:9A:79:E3:DF:48:1E:F6:A4:F7:18:25:7F
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:80:6e:d1:b9:61:df:38:61:a5:ea:c4:1f:94:f7:8a:f4:fd:
43:be:9c:a3:83:90:bc:17:5e:0a:d2:0c:0d:36:9f:47:c2:05:
73:77:cc:c5:b3:17:6e:90:2c:61:61:d5:75:aa:e2:f6:48:32:
40:40:f5:69:6b:e0:9c:77:cd:e8:97:a0:39:f1:c3:c4:bf:14:
5c:cd:47:a8:e1:ec:d4:b0:8a:5a:93:d4:0c:6f:74:34:c0:dd:
c2:e3:3c:3b:7b:0e:d2:2f:4c:b1:a2:06:fa:bd:38:80:b2:f0:
91:49:5a:91:39:9c:e2:50:27:72:f2:fe:52:f8:2d:fb:e9:e1:
fe:fe:c6:ce:f0:6a:b9:79:f2:d3:17:54:b3:9f:d6:bb:1f:31:
8a:0e:57:e4:bd:28:de:35:b6:a1:f5:aa:66:aa:e1:3b:5c:84:
e7:71:a1:9c:88:a6:f3:cd:b4:d8:49:16:d0:26:7b:4c:88:03:
a7:cd:46:9a:08:56:65:a8:27:0e:8a:a0:32:52:d0:5e:d4:6b:
ed:a6:fa:78:d5:77:28:3b:b0:e6:e0:e4:35:fc:02:3d:74:fd:
a0:8f:44:e6:45:e2:7a:b3:f0:3b:5f:b2:fd:ec:d5:e9:50:ba:
30:97:b1:b7:38:ae:1d:71:06:8e:75:fb:16:f2:51:b2:ac:be:
30:72:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:11 2025 by rpki-client