Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: iLLxfuU2IA7o02OyIK7IahGIvB9zO0X24xfF3VdF9Bg=
Subject key identifier: E6:4E:15:97:56:26:95:60:AD:56:CF:19:B8:10:88:78:AD:10:A7:2F
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 0198D5BC223F0EECE432CCC477040D4B4D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 0C6A
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: WJCxtpEa9ZD44Gm2adliyZqenhm/qJMIAvSbFozu45c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:22:3f:0e:ec:e4:32:cc:c4:77:04:0d:4b:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=e64e159756269560ad56cf19b8108878ad10a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:01:09:af:8a:6e:4e:0a:69:6b:8b:da:b4:
d6:bf:5a:30:83:a2:72:94:1e:9d:be:43:82:c4:02:
79:88:08:fa:d1:f0:40:be:a9:f5:47:37:e0:d6:dd:
0b:4b:d6:ac:6a:68:cc:a0:de:67:7a:50:76:f1:af:
55:ff:da:79:ea:e2:fd:22:46:38:4f:12:00:f0:49:
68:9b:d7:2e:78:9d:6a:10:b4:64:15:06:90:74:30:
08:5b:26:d0:fd:b4:b3:e5:10:03:06:5c:36:59:ed:
74:48:16:e2:af:26:cf:43:d8:fa:0c:6e:b9:80:83:
d1:15:a0:cd:9a:0c:f8:c7:dc:0e:50:bf:eb:77:ab:
07:15:d9:36:59:a5:4a:15:98:e9:d0:63:40:26:d4:
db:54:92:3d:bc:f9:67:eb:e4:3e:2f:2f:36:68:50:
2e:52:cb:25:e4:0b:5d:0e:39:ea:20:f7:1f:b3:cb:
9b:5b:ab:ec:06:cc:3b:c1:2c:b9:66:fd:59:d4:f3:
a9:26:c5:9e:03:ee:d5:5c:82:0e:f1:8a:a0:e2:23:
9e:de:f8:3f:a2:4f:cd:ba:43:95:4f:2a:eb:55:a3:
b2:7e:ab:ab:ff:8b:01:1c:30:cc:9a:ee:ae:08:4b:
a8:df:5b:aa:a0:6e:86:7b:3a:25:50:72:d6:b6:22:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4E:15:97:56:26:95:60:AD:56:CF:19:B8:10:88:78:AD:10:A7:2F
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:50:74:67:ba:87:46:a4:bc:c6:92:14:b6:73:cf:31:16:8d:
e4:ed:39:b5:9b:db:ef:22:23:3a:3d:14:77:1b:f6:63:50:1d:
b5:f8:c2:82:11:d3:8c:62:a1:b2:e6:8d:8c:bf:be:d0:5d:10:
28:46:2e:e4:a0:c6:7d:3d:ac:cd:8c:fd:57:e3:a3:05:7e:21:
a8:51:0a:25:fe:84:aa:8a:84:63:bb:7b:49:24:c8:74:50:88:
3a:8f:97:8e:05:aa:fd:ed:5d:d7:41:f7:a2:b2:18:89:c0:56:
fa:28:6a:0c:7d:4b:b6:2d:89:68:ea:0d:90:05:c9:98:d1:63:
32:cd:c4:1f:ad:eb:c5:cd:0d:88:55:31:05:cf:35:af:ab:54:
02:6d:d1:1b:03:f5:27:e1:fa:76:4c:ea:f0:15:0e:f5:30:fd:
ec:94:61:f2:62:7a:29:19:64:39:dd:7f:49:86:c0:6d:77:da:
87:14:73:35:57:7c:01:b5:18:7c:69:68:00:ae:54:be:dc:33:
ae:e1:21:20:b6:73:a5:f9:fc:74:11:ec:3a:a8:c4:5f:8c:25:
1c:e7:c5:f0:46:d3:04:83:d1:14:18:95:46:02:2a:45:69:ff:
29:2a:28:bd:0e:f7:ac:f9:1a:68:98:ff:2b:a2:a4:eb:a6:66:
d8:20:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:46 2025 by rpki-client