Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
File: wwOJmXRU-gA-H_yM0ui35l2T9OI.mft (raw, json)
Hash identifier: sa2jj+D4MbhjTlChZOHVD6PIMAf7exnr9OzcEfzWi04=
Subject key identifier: 65:D7:D4:17:70:CA:24:2A:38:62:B4:93:77:17:43:CE:B3:49:A8:7C
Authority key identifier: C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Certificate issuer: /CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Certificate serial: 0198D65FF04632592236203E12EC5841162E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
Manifest number: 0A56
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: wwOJmXRU-gA-H_yM0ui35l2T9OI.crl (hash: FHR3exbrT8/lFbHHwG2Q6fKjdwQlLgpaQK6RDnHN3nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f0:46:32:59:22:36:20:3e:12:ec:58:41:16:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=65d7d41770ca242a3862b493771743ceb349a87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:82:57:32:d9:43:c1:b0:7c:ee:a1:a5:7d:
2b:1b:bf:b0:e5:bf:80:f6:2b:b9:05:ca:18:04:56:
e4:5e:57:e9:55:56:71:ed:f0:a1:7d:10:6a:f4:a6:
eb:94:b1:ad:a3:20:8e:66:8d:b2:7d:95:9e:e6:3c:
74:26:eb:18:93:41:b4:4e:f7:24:ad:82:e6:e7:eb:
4a:3d:be:33:43:ae:aa:cf:d1:34:88:20:f1:d9:6c:
bd:9f:96:3f:ee:ac:7b:ec:bf:aa:5a:6b:2e:e4:7b:
14:99:52:54:97:88:ee:b0:b0:0e:6b:dd:df:af:a9:
bc:1e:fe:d2:4d:8c:44:6a:c0:d1:33:6b:44:74:a0:
12:a7:a4:2f:2b:f9:08:6e:5c:a8:4c:03:c7:18:49:
26:fd:95:af:d3:9d:59:f4:de:f0:b8:3c:68:2a:3b:
b7:36:95:92:08:51:62:3f:3c:d7:b3:13:26:36:6b:
6f:05:50:29:eb:12:3e:a7:e1:9f:2a:7e:a0:51:cf:
77:13:a4:28:6e:64:11:7d:cc:df:1f:53:b9:c9:11:
4c:90:34:ec:ba:c5:e3:d1:1b:6f:ef:60:a6:ec:4d:
0b:5f:03:c3:86:35:ed:7d:1a:24:9c:39:c6:33:b1:
4c:27:3d:b2:e2:d0:78:dc:c6:b7:be:71:52:37:28:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:D4:17:70:CA:24:2A:38:62:B4:93:77:17:43:CE:B3:49:A8:7C
X509v3 Authority Key Identifier:
keyid:C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:04:73:68:3c:5b:ce:b8:d6:57:05:56:39:ea:ca:c6:48:
20:f7:7e:9e:c4:16:0b:1b:ec:98:6d:4a:52:58:3e:04:b7:38:
70:5a:0a:2a:aa:7e:5e:4a:11:40:f8:fd:7a:c2:04:e8:fd:ee:
e4:f5:80:98:6b:e9:18:00:17:65:ea:de:15:33:fa:68:44:9f:
6c:26:f1:e2:fe:19:01:8b:e1:54:6e:35:23:43:63:8a:72:12:
5a:5b:1e:d9:67:dc:9c:4e:13:25:2e:f1:49:c6:b0:30:d9:77:
7b:dc:99:ef:4f:60:4f:c3:1c:3d:ab:04:fc:3d:b4:20:5d:e3:
fd:fe:cc:9b:1c:5d:df:0d:7a:8f:bb:c7:c6:c7:c0:80:ec:50:
e3:db:4f:40:73:83:66:98:32:44:f2:cc:c8:4f:65:7c:a0:ba:
b7:28:19:be:97:ba:d2:ef:ab:c7:e5:32:ac:ce:84:68:06:67:
1c:47:1b:3c:e9:c3:bc:b4:3c:85:05:44:9f:b9:dd:c8:ee:0e:
45:b3:68:cc:f3:9f:92:ef:f2:3f:4f:10:ba:33:be:36:23:b3:
5d:ec:ef:75:a6:a1:cd:85:b5:a5:5a:c3:b3:f8:4c:ca:0e:37:
94:1a:2d:e6:6a:4e:a8:30:a1:6f:b5:0f:b9:94:12:fd:d6:c3:
59:b4:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:23 2025 by rpki-client