Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
File: wq8ZpG9azIz4_QNiSmG3koqBjNA.mft (raw, json)
Hash identifier: X9iMKGOCpkh/In3icYOrHeBnm3N9ie5d/x/1DLXfRxE=
Subject key identifier: DD:E4:D4:50:F7:92:8A:48:24:D6:B1:79:9F:AC:83:DB:C2:AE:08:5D
Authority key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Certificate issuer: /CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Certificate serial: 0198D473F7AE5DA72FC4B21AF98A4B7ECF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:03:46 +0000
Manifest this update: Sat 23 Aug 2025 01:03:46 +0000
Manifest next update: Sun 24 Aug 2025 01:03:46 +0000
Files and hashes: 1: wq8ZpG9azIz4_QNiSmG3koqBjNA.crl (hash: fkELgymfoNiYgC/w5zhqdi3k49/pQpYJSs9z9vFSw5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f7:ae:5d:a7:2f:c4:b2:1a:f9:8a:4b:7e:cf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Validity
Not Before: Aug 23 01:03:46 2025 GMT
Not After : Aug 24 01:03:46 2025 GMT
Subject: CN=dde4d450f7928a4824d6b1799fac83dbc2ae085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:30:35:37:c6:6e:f9:87:e1:eb:6b:2d:d8:
ab:fa:05:e6:e7:f6:01:52:64:28:8e:b6:b8:7c:1f:
de:ba:eb:78:b0:19:8b:4a:a9:11:fb:3d:02:c5:eb:
2f:cb:35:f0:d0:26:56:fd:bf:d9:44:dc:a9:2d:69:
3e:4f:af:e0:18:0a:8c:4e:50:bd:ed:0d:52:fb:44:
4d:04:9c:a2:49:61:dd:3f:5d:f6:b8:18:82:cc:4d:
28:0f:2c:7d:26:ea:b3:82:50:3b:ab:14:0b:b1:df:
0f:60:8b:78:81:7a:3f:f9:85:90:c0:af:eb:0e:05:
29:6e:1d:96:0c:27:63:53:de:95:40:ea:74:99:f5:
45:a8:75:78:00:40:b3:b9:51:38:f1:c4:a8:92:12:
97:a0:42:6f:10:3c:3f:6d:ef:e6:d5:38:cf:51:42:
0c:56:ca:36:ea:44:1e:bb:ef:73:4f:37:44:75:89:
33:90:be:3c:41:8d:40:21:81:02:8d:40:53:63:5a:
6e:70:07:3c:a1:3e:da:15:28:7d:6b:c1:26:be:f9:
bb:f9:b2:c3:ed:3a:b7:88:5d:24:af:25:20:27:23:
ca:ea:3d:91:bf:69:49:af:04:ad:16:0e:ed:9f:a5:
48:66:b6:27:37:6c:bc:9b:ad:62:ae:ea:ec:02:f4:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:D4:50:F7:92:8A:48:24:D6:B1:79:9F:AC:83:DB:C2:AE:08:5D
X509v3 Authority Key Identifier:
keyid:C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:50:97:11:87:db:df:eb:1b:5a:d8:39:08:c4:eb:ca:b6:b3:
03:d2:d2:af:bd:13:e6:84:6d:a7:fb:c2:7b:a5:3b:0c:d7:82:
34:4b:92:02:fa:28:36:66:96:59:49:05:29:f7:ea:18:24:ff:
90:49:4b:95:26:07:3e:10:51:04:78:61:ca:fd:25:60:39:31:
0f:75:7a:54:7d:d5:df:35:02:f6:fb:a0:3e:3a:6f:e8:ba:4f:
6f:1b:d3:4b:07:27:ff:f1:7a:f8:3a:23:ad:c5:c3:3a:54:4a:
78:be:e2:c5:21:44:87:9f:0b:98:66:6c:5f:f0:a8:ec:58:0f:
45:f1:da:b7:5d:44:5f:2e:5d:a2:46:24:1f:80:01:94:ef:72:
ad:5d:17:bc:05:f4:6a:6e:0b:03:c9:fd:92:3d:e2:8d:79:b3:
5e:30:50:93:64:d5:d9:88:82:b8:84:8f:58:ab:ef:e8:9b:e8:
ed:af:20:65:64:51:d6:be:a5:fe:ba:6e:cb:68:11:bb:1d:42:
85:cd:d7:ab:90:06:61:60:41:0b:10:4a:29:8b:fb:83:1c:a8:
aa:de:5d:9f:d9:75:d1:fa:56:ab:ef:8e:1e:46:9d:f5:4b:7d:
be:7e:8b:26:16:66:75:00:9f:24:cf:2b:eb:5c:7e:99:17:07:
da:a1:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:57 2025 by rpki-client