Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
File: WrJabDkrjmejrSH2D9MxHWt_Hlw.mft (raw, json)
Hash identifier: 8pcXm0UguD3HgUbMd+kCkzMXKNb4t0feKR1oDAqBqaY=
Subject key identifier: CF:87:72:E4:A9:0F:8B:81:60:81:22:98:52:AB:5D:8A:0D:DE:E0:18
Authority key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
Certificate issuer: /CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Certificate serial: 0198D65F165C85BED4B0B4E31AA58830A9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
Manifest number: 0EE5
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: WrJabDkrjmejrSH2D9MxHWt_Hlw.crl (hash: NYBkvtKZv2ejqbhEurjEvo1viE0U2L39yKnvwV7AP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:16:5c:85:be:d4:b0:b4:e3:1a:a5:88:30:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=cf8772e4a90f8b816081229852ab5d8a0ddee018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:62:a3:19:6e:8a:0c:97:f3:8a:f4:1e:ec:
06:a8:6e:5d:a6:7a:77:ad:50:14:d2:bc:39:71:18:
e9:0d:3a:c2:df:06:ec:e1:52:98:63:6e:8c:c8:ca:
c6:8a:28:90:1a:30:3c:8c:7f:56:16:18:c2:1d:9f:
08:0d:a6:77:59:10:da:d9:05:80:80:ba:0a:89:89:
25:76:02:87:ed:b4:55:6b:52:4e:b1:c1:36:dc:fd:
08:54:4c:64:99:48:4b:50:95:4a:51:67:ca:4e:5f:
25:4d:c5:d9:42:14:43:85:5b:2b:39:f3:54:f8:01:
cc:df:05:d9:1f:cd:11:75:3a:23:8a:fe:e7:e9:92:
b1:f5:9e:22:79:69:7c:74:d7:f5:7b:5a:33:bd:9f:
52:29:2e:05:9b:bb:f5:ce:78:94:42:f4:77:fa:17:
02:de:95:8c:64:ed:b1:8d:34:6d:3c:a4:21:00:c3:
93:2d:a2:90:cb:c0:44:1d:2a:6d:4c:8b:c3:c3:39:
15:65:ed:01:c1:ee:fb:6b:2b:f6:a5:fa:0e:ba:9c:
19:9c:20:66:9b:b7:95:06:2e:4a:79:76:3d:99:fe:
4e:55:16:dd:1d:0f:f6:a5:e0:59:56:e9:e8:a6:6b:
90:0c:c2:0b:20:e7:ae:3e:03:7b:d7:2b:f5:fd:70:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:72:E4:A9:0F:8B:81:60:81:22:98:52:AB:5D:8A:0D:DE:E0:18
X509v3 Authority Key Identifier:
keyid:5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:10:a6:fa:63:17:5b:46:3c:dc:e6:9b:14:0d:1d:11:dc:
33:c4:9b:8d:19:71:3d:ba:ee:e9:d0:70:ce:df:31:bc:bd:1c:
a7:c7:61:3e:7e:77:59:e2:70:b5:7a:07:cc:18:3f:73:fa:bb:
ff:d9:82:b0:9e:08:71:cc:1c:66:14:d2:8e:8c:e4:d4:2a:a5:
2e:80:4c:32:d2:0c:16:cb:3e:f6:d4:fd:b2:ed:c5:a2:a2:a5:
8e:3b:e3:65:78:5c:8e:7d:f6:de:2a:2d:63:42:70:10:5b:b4:
b8:51:c7:b9:c5:54:95:53:a0:c4:3d:ef:69:6e:08:df:17:aa:
68:ef:21:8a:0b:12:be:75:77:cb:0c:5a:91:0f:dc:8d:de:57:
aa:b1:d3:b6:7b:96:3c:03:6c:f9:48:19:c9:b1:c0:24:5f:03:
87:fc:a0:be:71:fc:21:fb:df:6c:cf:59:28:80:ed:99:5d:4c:
ef:0e:dc:be:39:13:64:88:da:0e:92:ba:30:00:bd:ed:f3:ea:
0a:ef:bd:e4:26:94:01:cf:73:19:b0:aa:96:17:63:8e:d5:1c:
be:d7:6d:82:3d:13:8c:8d:4d:75:89:63:40:2c:d2:c6:1e:ce:
8a:b6:0d:bd:11:78:66:ec:bd:7a:48:96:26:1b:67:a0:d8:cf:
6f:cc:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:32 2025 by rpki-client