Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier: zntn3WYBwr1O+0CveSozpMnhB/lsftCREaRHA2vA5DY=
Subject key identifier: 14:43:BA:91:6B:CC:5E:CF:36:61:FB:32:10:E3:57:CB:13:C9:3B:E5
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial: 0198D65F10231DA9F26F387F8683AD1CBD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number: 143A
Signing time: Sat 23 Aug 2025 10:00:10 +0000
Manifest this update: Sat 23 Aug 2025 10:00:10 +0000
Manifest next update: Sun 24 Aug 2025 10:00:10 +0000
Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: mWloYFJjtxd1ioADG+FX8OoXH20mpVT0GCnbmXNEyQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:10:23:1d:a9:f2:6f:38:7f:86:83:ad:1c:bd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Validity
Not Before: Aug 23 10:00:10 2025 GMT
Not After : Aug 24 10:00:10 2025 GMT
Subject: CN=1443ba916bcc5ecf3661fb3210e357cb13c93be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:5b:1e:92:e7:c1:d5:ef:ce:42:3f:33:13:
d9:fa:de:e5:36:ea:3c:34:8d:e2:34:34:97:b8:79:
32:ff:46:39:51:d4:37:9b:aa:82:4b:3e:32:a7:68:
d2:6e:e8:bc:67:1e:36:d0:6b:58:69:d3:87:ef:7e:
e4:e1:33:9d:12:a0:fd:e6:91:36:4a:ef:63:05:9c:
76:07:15:47:eb:d9:ff:aa:3b:3e:36:dd:4e:98:38:
90:d2:f3:5d:47:f3:2f:f9:1e:06:47:81:3b:14:23:
4c:4d:d6:44:45:59:29:3b:17:0f:9c:64:f7:07:46:
11:9c:03:3b:4a:49:8f:37:b8:3d:68:a8:46:0b:3f:
68:b3:f2:54:ba:4e:1f:c0:f6:8a:ef:f6:5e:74:a0:
51:1b:47:8d:d9:5a:93:0c:65:de:0c:92:40:f3:15:
a0:ef:10:49:22:e7:ae:fd:a2:e8:9d:55:6e:30:3f:
dd:f2:86:4a:1b:cf:ef:4e:da:30:6e:d8:6a:38:4b:
cb:63:6f:cb:3e:46:1b:56:93:26:dc:83:fd:37:a9:
ea:e5:d9:8a:db:d1:99:ed:29:9f:b1:05:83:c7:a8:
34:58:c3:50:1d:0e:fc:e2:9a:07:d4:8a:60:6f:46:
06:ab:5f:e9:86:e8:63:61:ec:ff:ea:8f:56:f4:28:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:BA:91:6B:CC:5E:CF:36:61:FB:32:10:E3:57:CB:13:C9:3B:E5
X509v3 Authority Key Identifier:
keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:63:21:58:ce:9d:86:72:fa:36:1e:04:eb:ed:56:cb:b2:
b5:b9:2e:8b:3b:78:52:87:32:cb:69:38:ef:c8:31:bf:97:34:
8d:84:06:bd:13:39:db:0f:b2:82:61:c8:87:e7:78:d1:b7:f8:
a4:e9:09:77:d9:0e:30:9c:d4:77:f2:79:cc:5f:9c:ed:df:db:
09:74:f4:35:1b:fc:81:e7:9e:32:8b:4c:f8:98:a3:92:fa:91:
5c:e9:35:8c:d8:1e:4a:c9:f5:04:33:24:d6:fd:b4:cf:73:5d:
02:24:07:ad:a1:3b:ba:0a:93:ef:9f:1c:87:9a:d1:a4:68:b6:
97:2c:aa:6f:bb:fb:09:33:af:4f:86:d8:0c:6b:dd:95:03:b2:
40:43:29:4c:59:5f:f8:8c:09:f0:f9:26:11:d3:98:ad:13:79:
c6:0b:1a:38:2a:6d:01:4e:32:46:10:89:e4:db:40:eb:a5:8e:
0d:46:0b:c2:23:6f:f0:68:8c:7b:6a:73:fa:48:c2:b9:63:b1:
f7:92:c1:ea:09:f4:3a:d7:2a:b9:72:dc:e1:61:61:6b:5f:76:
01:bc:24:2b:d8:f6:35:c0:e1:46:0c:10:de:cc:7d:3e:cc:20:
6a:f6:ed:fa:d3:92:61:54:13:b8:17:06:9a:75:6e:23:d7:39:
58:1d:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:43 2025 by rpki-client