Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json)
Hash identifier: TXaKeJq0haNJ7Jxi9aPompKFXD//A/J0x46qbStWuFo=
Subject key identifier: 88:2E:16:AF:DD:85:0E:D3:FC:9A:6D:DF:66:45:B0:4E:43:CD:1B:15
Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Certificate serial: 0198D4726AA3A5669A121FB003B04C826EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
Manifest number: 0583
Signing time: Sat 23 Aug 2025 01:02:04 +0000
Manifest this update: Sat 23 Aug 2025 01:02:04 +0000
Manifest next update: Sun 24 Aug 2025 01:02:04 +0000
Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: 0xvPSSXzoiuGHLBkXsk8PZ+ZkhOE27Qs1EipJFZvtD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6a:a3:a5:66:9a:12:1f:b0:03:b0:4c:82:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17
Validity
Not Before: Aug 23 01:02:04 2025 GMT
Not After : Aug 24 01:02:04 2025 GMT
Subject: CN=882e16afdd850ed3fc9a6ddf6645b04e43cd1b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:91:b2:c3:62:d7:3d:54:59:32:dc:80:fd:
31:60:28:2c:ba:8a:76:b7:c9:bd:ff:df:27:be:74:
49:0d:a9:06:95:4b:e0:c0:71:ad:76:d9:1b:5b:61:
42:32:82:14:8e:49:df:be:e8:8e:1b:ef:36:7e:c2:
c2:60:66:8d:ad:93:ac:5a:3e:ef:c9:3e:76:8b:c9:
6e:00:a8:aa:51:8c:f0:ad:e5:e0:ad:2e:83:b7:8c:
88:c3:94:ab:0f:f2:c3:08:2d:e7:c3:f8:4c:35:1e:
66:db:48:ff:47:d5:c5:af:7b:07:f7:cd:b8:15:e4:
d0:97:9f:07:02:8d:04:fc:f5:cd:03:19:50:c1:df:
fd:d3:ba:18:29:4f:b0:01:f6:4b:d2:13:b9:01:66:
10:91:96:3b:ce:b2:9c:c5:93:23:68:b9:9c:c0:ee:
64:3f:ad:cd:58:57:52:6b:1a:26:df:8e:1a:bf:92:
0e:d5:46:81:f6:fe:39:d1:fa:33:5d:c2:7c:41:99:
13:83:c2:b4:99:4a:79:10:be:b5:0d:b3:f9:07:5f:
0d:d4:65:cd:a7:c7:3d:40:cd:9a:8f:52:06:6c:36:
5d:18:18:3f:66:e8:0e:52:c1:68:cc:4c:05:17:a2:
c5:b2:e1:c2:e5:8f:7e:53:72:4a:47:e2:67:e3:65:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:16:AF:DD:85:0E:D3:FC:9A:6D:DF:66:45:B0:4E:43:CD:1B:15
X509v3 Authority Key Identifier:
keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c0:68:59:fa:df:1e:5a:38:b7:66:3e:76:8d:e0:1a:c1:bb:
b2:77:7a:c3:a9:0b:08:9c:41:be:eb:d0:8c:21:ed:59:6d:f7:
87:a7:89:04:1f:d4:e9:9c:d0:50:1c:8f:21:f1:5a:14:81:96:
28:af:e3:a5:ff:44:ce:c6:23:70:09:9f:57:26:55:7b:85:4a:
c8:ad:bf:75:c7:52:a1:bc:d1:0d:c0:3b:55:ec:04:2b:83:4a:
7b:05:6b:a7:6f:fe:35:c0:25:d1:e3:16:40:c7:83:7e:2b:9e:
82:8e:c6:3c:ce:a0:fa:bf:71:f6:16:44:58:f7:55:4b:53:ac:
0d:40:77:8f:29:d9:ba:3b:1e:ae:4d:32:8d:84:04:df:e8:b5:
95:19:f7:1e:b0:b9:96:39:2b:1c:60:7a:75:1e:1d:1d:09:d0:
ad:89:5e:fc:b3:6c:65:75:59:a0:b6:6c:64:58:f0:b7:23:e8:
bc:c1:8c:81:5f:fa:71:7d:f9:1b:84:5c:6d:e0:22:03:7d:e1:
10:37:31:ca:88:e3:83:22:78:50:cc:09:8c:1b:76:c9:6f:0c:
55:6e:01:a0:ba:7b:f3:b0:d5:fc:75:08:c0:17:1e:77:a6:18:
d6:06:c3:2f:e1:7e:61:b2:f6:1e:f8:a9:7a:59:5b:a3:ff:99:
bd:30:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:02 2025 by rpki-client