Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: RXfR3ZFY1DC5Ja+3XXtbFtpNRKujd1LsL1HyVfnbEFo=
Subject key identifier: 76:15:06:46:7D:59:3C:44:C5:33:EB:E4:FA:A7:B4:82:DE:BA:69:18
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 0198D6602162DEE6BFB5C0CE948E049034D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: RKQkkb0JT4XHegg3Rq2XusiRAE6yrVQxi+I+JSpfmK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:21:62:de:e6:bf:b5:c0:ce:94:8e:04:90:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=761506467d593c44c533ebe4faa7b482deba6918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:77:f8:0b:51:1a:cc:9f:1b:2b:82:81:f7:
fd:3a:d7:7d:ac:ab:09:6e:c4:83:7b:d4:a2:c1:12:
e7:9a:f4:4e:07:fd:80:00:11:ec:3f:0f:94:31:9c:
fd:2f:fd:c7:28:af:e7:e7:cf:90:45:f4:1c:96:6c:
aa:ed:a4:1d:81:7e:93:8c:15:9c:f6:c9:2e:94:68:
3c:98:0f:c5:76:5a:2e:78:c0:d4:ea:e6:b0:25:95:
d5:67:c9:59:f0:cf:56:e3:f2:2d:3f:bf:8a:cd:f5:
d1:7d:9f:56:ad:6b:00:af:72:4d:02:6e:25:8d:ca:
b1:67:f6:24:71:17:94:19:04:33:d2:68:4b:29:df:
c6:4c:b7:5a:81:25:c1:37:66:17:bf:49:30:be:f8:
8e:53:d3:09:c5:ba:e0:52:0d:37:fd:c4:92:fc:02:
8a:ab:7a:9c:4b:6a:ca:92:5f:3b:6e:04:56:a7:8e:
eb:64:eb:ec:e1:4b:d5:9f:9e:94:b9:43:7a:d1:70:
e5:4c:21:d3:b9:60:9d:22:2a:75:5e:eb:38:48:f9:
17:0c:d6:e0:c7:fc:13:99:48:13:0f:c1:89:ac:1f:
11:76:6e:ae:d1:1e:6a:22:d0:d2:d8:79:6b:76:4f:
ef:5d:20:e0:99:f3:60:63:13:db:49:20:34:fb:c5:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:15:06:46:7D:59:3C:44:C5:33:EB:E4:FA:A7:B4:82:DE:BA:69:18
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b9:78:8a:fe:6d:cf:75:65:77:c8:df:b2:9a:a7:88:cb:ff:
0a:20:14:8e:85:39:f6:6f:39:14:04:ff:fd:2d:89:fc:44:ea:
4e:bf:d2:48:50:ed:e0:30:75:3d:bb:56:7b:26:c1:4c:ea:95:
5a:c4:41:cc:aa:38:f6:90:67:df:df:53:62:5a:b5:ce:75:3f:
38:0e:0a:6a:91:5b:2d:05:2d:2f:54:33:f4:2a:d7:18:bc:ba:
30:7c:8f:3f:10:7b:e3:71:b2:dc:30:d2:94:f9:ea:dc:7a:e5:
b7:fe:6a:99:e0:04:99:f2:80:cd:a7:bc:86:28:1a:f1:90:14:
f5:44:7a:4d:51:83:dc:31:61:8e:37:9a:a9:0c:e6:53:93:96:
d8:08:bb:e3:c6:f0:93:4d:09:09:e2:42:04:ec:db:f7:87:cc:
d1:54:5c:ff:db:46:d1:e8:65:1c:9c:1d:e9:6a:9c:b7:be:18:
99:d9:b3:d5:72:5e:11:01:45:cf:1e:f6:76:7f:19:61:32:11:
48:ac:ca:b2:fe:e1:a7:e0:47:f8:8c:b1:10:8e:f1:93:ec:13:
17:e9:b5:48:47:fc:af:51:7e:db:f9:99:6f:f3:42:ab:a7:85:
16:93:09:c4:af:ce:bf:9f:29:41:a2:22:4b:8a:9a:ca:6e:14:
45:6a:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:26 2025 by rpki-client