Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: A1FpX+f0L2V1xfElf3yB6oT+KhjtvJk6qxAE3OAkXLA=
Subject key identifier: 9D:8B:AE:6A:84:26:01:43:D6:B6:BB:01:C9:82:7D:DB:66:D6:80:61
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 0198D73B13D45D57449103AC1786DBB49CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 0CB5
Signing time: Sat 23 Aug 2025 14:00:29 +0000
Manifest this update: Sat 23 Aug 2025 14:00:29 +0000
Manifest next update: Sun 24 Aug 2025 14:00:29 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: lBu5WQU3jABijDTE/qtwloZwxLslCFeD8iNCrUTvOCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:13:d4:5d:57:44:91:03:ac:17:86:db:b4:9c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Aug 23 14:00:29 2025 GMT
Not After : Aug 24 14:00:29 2025 GMT
Subject: CN=9d8bae6a84260143d6b6bb01c9827ddb66d68061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:b5:91:c7:a1:ae:52:ba:cc:e2:9d:a9:18:
a2:3d:d0:c8:52:7d:b7:e9:27:52:7b:48:b2:c9:62:
17:28:f1:d6:5d:08:1e:00:af:9a:e4:42:16:c2:75:
0f:36:ca:0d:b5:66:7b:15:b0:a9:94:4f:bb:e9:a3:
f8:a0:31:e0:0e:4b:10:38:13:08:ee:53:ec:35:3d:
f8:41:85:ca:ec:9f:e7:6e:4a:53:4e:1c:25:91:a4:
3e:ef:82:b4:ca:e0:32:a3:c1:8a:98:e9:1f:fa:7a:
38:4e:20:13:64:d1:9a:09:93:e2:18:07:ed:34:b1:
c4:8d:a5:97:13:ab:c6:21:01:b3:54:c7:8b:fc:09:
1b:0a:b8:b0:6c:3a:11:b9:df:e7:c4:46:0f:c0:cb:
d6:54:47:0c:69:f4:a2:66:a3:01:53:f1:68:c2:c4:
15:9d:76:82:0f:a2:42:b1:89:fb:4d:04:b1:86:47:
38:6d:0d:01:e9:3b:a3:09:7c:aa:2c:b9:51:31:b8:
99:65:d9:90:a9:b2:b7:65:4e:02:25:0a:4c:fd:22:
2b:05:63:ca:92:85:39:23:68:68:d4:ec:e5:6a:b3:
41:af:61:80:95:7b:6f:a7:f1:94:eb:02:45:03:64:
71:08:bc:3c:2a:ba:0e:d8:fc:2b:6e:49:d9:ef:e6:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:AE:6A:84:26:01:43:D6:B6:BB:01:C9:82:7D:DB:66:D6:80:61
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:84:69:12:e2:52:62:8e:da:c7:0a:6e:76:c6:34:46:f8:20:
81:c0:cd:76:56:57:92:50:62:46:dd:08:11:8a:e4:1b:18:3e:
e9:e5:89:3a:70:a8:6e:95:15:fe:50:a9:8b:0c:53:63:10:b0:
7e:45:5d:b6:a0:7e:04:81:a2:a6:c2:88:b5:38:f1:48:57:d6:
86:d7:12:75:3e:ad:18:29:0d:42:80:11:0b:b1:55:73:76:68:
10:b8:c2:d1:34:e9:de:50:c6:d7:1d:d0:c9:f1:ce:5b:32:e1:
42:8b:ca:03:91:2f:e5:77:c8:cb:29:36:bf:5e:64:13:c6:ff:
59:51:83:97:62:87:7a:07:99:6f:4d:e1:f3:4e:71:1d:f3:40:
4d:c7:e3:b2:16:43:d8:1d:59:4b:ad:77:eb:b7:c1:cc:85:2c:
e5:b9:ea:dd:d2:5a:07:b7:07:02:f2:34:ac:94:9d:1f:cc:c5:
3d:21:f1:b6:05:6e:ce:e4:9c:6e:bb:c3:0d:48:34:d0:1d:20:
90:1c:f8:f3:f0:8b:ee:99:72:f9:1d:c0:9b:02:74:52:2f:16:
73:1e:18:1c:c5:a6:38:ec:75:8a:e9:e6:28:40:8e:c7:0a:44:
1a:ca:bf:63:94:db:ee:1a:84:cb:94:f4:30:4e:d6:48:97:c8:
96:b8:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:13 2025 by rpki-client