Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier: gMCzDP5Ch7g6rPVvV6hwr5HcxEVW4aVFBDISOllNc2k=
Subject key identifier: 95:7C:22:AB:30:13:5F:9E:24:FF:DD:08:0E:45:13:16:35:4C:C8:15
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial: 0198D4A7D2D86D40DAF0CCB5B7BD46C560F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 02:00:24 +0000
Manifest this update: Sat 23 Aug 2025 02:00:24 +0000
Manifest next update: Sun 24 Aug 2025 02:00:24 +0000
Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: MOQu7vJ2kiCkN59LOdHfNNwLsvLSMBXGV9GsEqQoEjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d2:d8:6d:40:da:f0:cc:b5:b7:bd:46:c5:60:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
Validity
Not Before: Aug 23 02:00:24 2025 GMT
Not After : Aug 24 02:00:24 2025 GMT
Subject: CN=957c22ab30135f9e24ffdd080e451316354cc815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:60:e7:aa:c9:2c:0e:ef:84:b2:73:e2:e5:
cf:e2:77:8e:98:38:53:da:48:3a:6e:2d:c7:97:69:
2a:cb:1e:e8:f0:53:8a:e4:0f:79:eb:53:65:69:90:
7e:58:81:3f:c0:1a:cd:9c:57:b8:67:09:95:eb:8d:
0b:c9:70:87:fa:10:45:43:56:65:2b:ef:bf:f8:ef:
bf:cf:cf:ec:66:b7:a7:70:32:ca:d5:18:70:c0:0a:
73:4c:59:2f:32:df:43:cc:8f:a5:69:8a:9a:f5:d3:
42:85:d4:79:2b:e5:37:dd:f9:e6:f3:62:46:8c:68:
fe:eb:b9:92:62:7a:b8:1e:a2:9f:a8:3f:e3:fc:97:
a2:69:f3:d0:62:47:bb:ed:31:b5:e2:69:b0:1e:5d:
68:ff:a1:ee:66:0d:15:54:28:84:83:a5:41:e1:77:
b4:b4:9e:be:c8:51:f3:b7:71:e1:dc:bd:e6:5d:21:
0b:b0:49:b6:bb:8c:49:31:7d:d0:f9:95:ea:19:70:
c5:a5:e7:4a:18:a5:8a:b6:5b:dc:b2:37:75:04:c7:
a7:d9:07:02:a1:e0:88:23:5a:c3:98:f2:69:99:bc:
2e:14:89:98:ff:4b:79:cd:21:05:ad:75:b1:25:f1:
33:e6:02:db:97:6f:37:65:32:eb:9b:e0:21:ea:66:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7C:22:AB:30:13:5F:9E:24:FF:DD:08:0E:45:13:16:35:4C:C8:15
X509v3 Authority Key Identifier:
keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:be:31:a2:12:f4:00:0c:ec:ce:2d:2a:7d:e7:93:e4:5b:70:
64:8b:16:be:3f:fa:98:f7:04:b3:84:3c:98:cf:2a:26:d4:a2:
b2:4d:89:52:92:4e:63:57:29:7d:47:48:d1:29:e9:25:f7:82:
cc:52:16:c9:d2:47:cf:e3:64:94:4f:3f:2c:91:0a:a8:8d:a0:
f8:17:05:38:0a:8d:1a:24:aa:72:23:97:31:4c:c6:e1:92:82:
df:ba:8d:8f:87:85:4e:26:cd:81:47:a4:9e:76:8b:4b:ed:66:
15:4d:31:33:d7:17:de:01:e2:81:7f:85:6c:6d:a6:32:cb:70:
b7:c4:89:ef:ad:55:3f:f1:52:f6:f0:35:2d:69:2b:b6:2f:4f:
7e:10:80:76:9b:69:7c:bb:7d:f5:e1:6b:71:06:04:83:9e:16:
2d:7e:93:97:83:03:d2:51:8d:47:9b:9b:87:87:6f:06:83:98:
d5:0d:ea:f1:49:1e:4f:a4:d2:27:ff:5d:9d:69:ff:45:0b:c1:
7d:22:16:ec:72:59:37:ca:1d:30:34:08:2d:2e:c6:e8:bd:e0:
e5:83:d2:29:a4:79:bd:5a:6f:2e:02:13:69:06:24:27:70:05:
da:5c:ed:dc:3f:b9:83:1a:52:08:97:d8:d2:da:34:46:fe:88:
29:54:50:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:14 2025 by rpki-client