Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: dGrGkzkBqpZxJMWFKnnfsS8+fGZAg0x7P3P+CaaaCcE=
Subject key identifier: 12:07:8F:C8:EC:A9:72:C0:A4:0F:27:B0:C8:D6:3B:DF:A9:19:36:72
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 0198D5BBC5E1F8DE61E68CED2E11766E60DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 111A
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: BzFQlekJ6+eVxkr7e6w7Zcy4spo4sBUVRCk67BrClBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c5:e1:f8:de:61:e6:8c:ed:2e:11:76:6e:60:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=12078fc8eca972c0a40f27b0c8d63bdfa9193672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:8e:c7:63:68:90:5d:68:f9:1e:7e:02:9a:
90:57:bb:58:2c:d7:93:30:98:8f:0d:13:9a:c6:ab:
4b:76:87:c4:2a:64:f8:5e:a7:af:76:d2:ec:0f:d0:
75:95:bd:c6:07:d1:99:38:70:42:a6:38:36:e7:de:
cb:ec:43:1a:cf:c1:48:71:93:8c:3c:2f:e3:b1:f9:
83:0b:03:20:e6:62:1e:f8:75:0c:cf:4e:b0:73:6e:
47:39:49:f7:d6:ae:be:a8:52:76:61:f8:74:e4:50:
b7:45:5d:09:59:fe:f4:f4:83:46:1b:e6:2d:5d:3f:
1f:92:c3:ca:6a:70:fb:39:a3:4b:15:3f:16:e2:a9:
9f:06:35:0b:43:45:6d:ec:23:c2:7e:3a:c4:96:bb:
be:47:a2:a5:5d:1f:39:c0:73:a4:f5:a1:85:6a:bd:
65:42:f0:78:7e:4e:9d:97:a5:70:00:bf:85:d4:f0:
11:f2:2a:98:9b:ab:88:09:42:ec:6d:5e:da:f0:7a:
6d:af:2c:9c:92:43:39:3b:51:41:27:42:d7:10:0a:
43:5d:ea:53:91:f0:83:7e:73:4c:07:00:03:66:05:
fd:c7:a9:25:00:f5:33:01:97:bf:e4:d2:6f:e4:a3:
b3:96:da:6a:41:8a:c7:20:b1:65:db:f8:7f:12:63:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:8F:C8:EC:A9:72:C0:A4:0F:27:B0:C8:D6:3B:DF:A9:19:36:72
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:d7:39:cd:9d:11:ff:83:3f:ee:da:f2:58:25:45:dd:b7:
e3:7b:7e:ba:28:bb:e6:c6:3a:6c:db:42:bc:86:14:5f:b3:e4:
ba:75:98:7a:83:ad:f4:6f:c6:00:7b:e2:43:d8:ee:02:86:4e:
16:72:98:31:fb:32:86:59:46:38:3b:a4:e2:77:77:b6:60:3f:
68:99:ed:2f:8f:e1:99:42:47:fb:6f:cf:34:53:ef:d1:f8:e5:
63:f1:3d:a9:bc:09:9d:a1:71:b5:25:b8:15:dc:f6:c3:26:a8:
fa:6a:99:69:b6:81:93:78:07:1f:df:2c:60:f3:2e:95:09:9e:
d8:e1:7d:d2:fa:92:b1:5a:e4:d0:83:fa:1e:8c:dc:da:f1:f5:
7e:d6:b4:e9:0b:3b:6d:4d:83:33:2d:ea:dd:56:3e:1c:80:c2:
4a:3b:7d:ea:67:bd:0d:0b:43:99:87:2a:b3:04:3a:66:3f:1c:
21:68:59:5f:81:58:74:07:81:8a:8c:f3:38:05:99:87:cb:d0:
32:d0:3d:2b:85:9b:62:4e:bd:9e:01:38:da:9f:03:7b:dd:9d:
45:73:7a:9e:0c:8e:ed:0f:ac:be:16:69:d6:ac:9c:8e:ab:5e:
82:90:db:ea:cd:23:0c:61:35:9c:39:28:12:81:03:b3:eb:fd:
19:60:d3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:23 2025 by rpki-client