Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier: U/TF9gZbBkv1FExQXdCnvSxBaQHZXqnDHOaQrqfWzR4=
Subject key identifier: 3C:24:5C:CF:23:00:4D:C4:E6:CD:75:BC:FF:9C:CB:74:DD:E3:98:19
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial: 0198D4733C53F3B78B286EFE2AE3BE8520FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number: 08BF
Signing time: Sat 23 Aug 2025 01:02:58 +0000
Manifest this update: Sat 23 Aug 2025 01:02:58 +0000
Manifest next update: Sun 24 Aug 2025 01:02:58 +0000
Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: re17YqcYLXBNFr01BQqojZQeEEG7RmVVB+0tOoxxDRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3c:53:f3:b7:8b:28:6e:fe:2a:e3:be:85:20:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
Validity
Not Before: Aug 23 01:02:58 2025 GMT
Not After : Aug 24 01:02:58 2025 GMT
Subject: CN=3c245ccf23004dc4e6cd75bcff9ccb74dde39819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:a8:5d:b4:c8:e6:ee:08:07:de:41:87:38:
21:7a:2e:10:7e:4a:36:5e:54:20:c4:af:d5:00:19:
a7:a4:11:ab:0c:9f:d4:a5:1b:df:13:31:c7:09:23:
30:0c:71:36:fa:70:a1:eb:e5:0c:8b:20:39:9c:f1:
58:1e:52:47:1d:31:68:0b:6e:1a:5d:9b:25:6d:3a:
77:f8:85:c6:01:05:bf:07:4c:01:9a:f1:4c:33:c6:
cf:8d:40:b1:20:2e:a2:dd:03:60:e5:76:06:42:98:
cd:61:bf:d1:e8:28:d4:7d:d4:7d:5d:ee:7d:00:68:
d9:fe:66:ce:04:b0:53:ab:0d:72:8b:14:dd:ea:1d:
7c:0f:22:f6:99:36:28:23:2d:3f:72:73:f5:3e:81:
43:dc:40:d4:d0:fe:c9:d3:df:88:a7:c2:1c:3f:4b:
72:98:3a:33:cb:f2:4f:49:e0:2d:75:87:ec:05:a9:
53:fd:cc:44:51:62:30:99:26:52:7e:60:c1:96:c8:
10:c0:2c:e4:9a:65:3b:18:0d:ba:d7:d1:2a:ce:71:
71:82:08:36:00:8e:5e:ce:75:9e:e7:75:63:ae:25:
cf:a2:83:da:22:08:97:24:78:d9:72:61:d1:fa:e9:
65:d2:22:00:e0:9a:b1:df:e6:4a:a8:d6:b3:55:ad:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:5C:CF:23:00:4D:C4:E6:CD:75:BC:FF:9C:CB:74:DD:E3:98:19
X509v3 Authority Key Identifier:
keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:05:80:cb:a3:54:c6:f5:b5:0e:6f:f7:6a:51:92:16:31:09:
2a:d7:48:bb:86:df:aa:59:02:1a:a8:0b:26:32:ca:ef:e2:78:
c7:5a:14:0f:42:29:8f:06:d5:5a:0f:93:b7:4a:f5:a0:2b:7d:
0b:0b:e5:6a:46:8b:da:7e:9b:cc:14:55:2c:20:7e:ba:5c:0f:
a2:00:08:59:64:13:4e:d2:25:0f:90:ed:f6:44:6e:86:57:d7:
18:7e:0b:9d:b5:bf:73:c4:b0:6d:fd:fd:2c:7c:ec:f8:f5:bf:
52:f0:cf:f6:34:2e:ad:95:fb:4e:e9:cb:33:a5:3b:65:f2:ab:
30:09:d2:62:56:24:9b:3c:59:52:b2:2f:eb:2f:dd:f1:17:cd:
4a:c3:6c:ed:b0:ad:69:52:23:99:df:68:fe:35:64:3a:3c:4b:
b9:3f:69:39:f1:8c:ad:c9:d7:e1:4b:ba:f2:9d:c6:14:ff:58:
12:3d:60:c5:e4:b8:f4:5c:e8:15:7c:03:9a:e2:0b:2b:6d:d8:
97:86:98:10:0a:c2:6c:fe:74:7d:10:1a:d0:6c:02:ca:80:c5:
77:da:19:a0:ad:45:c9:c9:6b:97:f0:96:a5:dd:ac:68:b7:52:
62:ab:1e:7b:9e:9d:45:12:e3:55:fd:04:4b:83:fc:b3:79:0c:
a7:09:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:41 2025 by rpki-client