Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json)
Hash identifier: ueJBjcxo84W2dG8nDr5fEhXya2AaMkmlq3VaI5ekKqI=
Subject key identifier: 96:D0:3D:85:C0:F4:2B:F4:78:9E:74:25:0C:C2:CB:79:68:03:7D:A2
Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736
Certificate serial: 0198D4734AEF584BF75DE9A77DB6DE2B2BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: eJ6miIQEygmSWs3cUCZMIxWIcOI6+lkw1YEwjLSYL+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4a:ef:58:4b:f7:5d:e9:a7:7d:b6:de:2b:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=96d03d85c0f42bf4789e74250cc2cb7968037da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:e9:79:a1:db:9b:ed:59:40:c4:5d:29:9e:
20:f5:06:f0:42:a1:38:de:df:fc:f7:1f:88:67:92:
19:3b:9a:03:fe:e9:ef:9b:d7:f2:6a:6d:96:f3:2b:
c0:34:60:f6:1c:1e:0b:21:b9:6d:5b:ad:2d:4c:cb:
9f:14:0d:f1:73:7b:9a:6a:5e:2f:1a:19:26:8a:71:
61:80:3a:7b:80:ab:04:14:a5:f3:ef:1e:ae:f9:de:
d2:66:e1:83:dd:97:39:75:99:4f:81:e9:d6:1e:fd:
86:41:52:c6:59:a3:58:0b:52:78:a7:e9:f7:09:76:
7e:92:de:2f:1f:e1:57:1a:7f:c2:38:53:ba:19:47:
3a:a6:e2:fd:65:27:89:2c:39:8d:f9:5c:2a:1e:ab:
8d:0a:ee:91:f4:e4:47:66:b4:19:ab:48:c4:1e:77:
6c:f0:7a:75:93:59:e1:ed:62:00:fa:77:e7:58:3b:
3f:aa:08:c3:72:55:2d:37:cb:7a:1e:86:0d:31:08:
58:60:a3:aa:ab:7f:26:b8:89:18:9b:ec:eb:59:60:
ed:26:77:20:f1:70:da:6a:5a:1d:de:47:2f:5c:1c:
b9:86:22:95:c9:cc:59:93:71:16:ae:b3:74:e4:2d:
95:6c:67:dd:b7:09:8b:ca:37:6a:24:ac:3c:b1:c8:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:3D:85:C0:F4:2B:F4:78:9E:74:25:0C:C2:CB:79:68:03:7D:A2
X509v3 Authority Key Identifier:
keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:31:b1:09:da:ee:28:a9:31:64:21:54:90:32:72:28:19:18:
12:ba:6e:4a:49:93:5a:91:71:d4:75:65:6c:e2:e9:b7:da:99:
63:8f:d8:62:26:69:87:e9:b8:40:5a:84:9a:ae:c0:db:17:3a:
e9:f9:57:b3:a5:94:9d:81:7c:7b:1a:85:54:5e:51:76:bb:df:
31:be:4d:99:ab:db:df:45:59:21:8c:70:e5:97:44:9e:95:69:
1a:27:02:28:ff:5c:2b:37:93:ac:c3:09:da:17:12:21:c6:b3:
e6:c7:63:80:a1:90:e9:ec:29:0b:11:fd:4c:66:26:ac:5e:8c:
21:88:c3:af:ad:6c:3f:38:24:29:a6:f7:4c:00:83:43:20:b4:
fd:21:e6:70:6c:86:e8:c7:f8:7d:9d:01:e1:c0:f6:dc:b9:fb:
46:8a:9d:20:f3:33:55:e6:4b:db:07:4f:f0:76:f1:8d:e0:72:
9e:4c:2f:96:04:01:32:62:54:6c:0b:25:4f:e8:62:cf:7e:6f:
95:a6:43:cf:43:97:93:af:37:b9:df:8c:c1:47:cd:38:e2:be:
32:52:c8:5e:c8:78:2a:fa:25:69:3d:95:35:97:63:8e:44:e8:
7c:b1:46:08:03:f1:0a:89:96:22:a0:ca:90:00:a8:80:b2:40:
ed:98:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:20 2025 by rpki-client