Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File: wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier: ZuOh/AqgjVI5wqU5boouESaLPDYSYdiugTl8Lr7s7u4=
Subject key identifier: CD:BE:79:F2:2F:E3:41:2B:88:B6:59:C3:91:76:10:EE:D7:26:1D:87
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer: /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial: 0198D5BBD25EC677227801A58AC05917959E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number: 03A2
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: pqbBWEukaVq3Lj6vHwN9NTaLxQQ7LCmIK3IbWHTwkFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d2:5e:c6:77:22:78:01:a5:8a:c0:59:17:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=cdbe79f22fe3412b88b659c3917610eed7261d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:f0:53:6d:7b:5b:f7:22:f7:0b:b2:ef:9a:
c9:56:94:d8:ce:ed:b0:90:06:d0:8a:09:29:46:c7:
4e:43:96:8d:cd:37:21:d5:eb:8c:54:ec:3b:63:21:
72:52:0b:95:56:43:b7:2d:65:34:93:df:a9:a1:1b:
54:85:61:66:3d:de:43:85:9c:2e:57:f9:de:e5:02:
2b:e6:2a:ff:e1:36:1d:8e:80:ce:22:50:0f:8b:79:
24:1d:d2:05:ba:2d:c1:6d:19:d2:22:f2:77:48:77:
b6:10:e0:49:35:04:54:db:68:76:fe:f5:7c:5d:59:
98:08:dc:b1:43:42:9c:73:c0:d3:22:86:f2:7b:d6:
07:e2:c2:ad:aa:0d:d7:77:40:87:57:7c:a2:ce:3d:
da:06:76:57:29:01:2b:ad:f9:a0:4c:b8:dd:9b:5b:
87:83:97:cd:10:6c:ba:b7:ed:44:8b:b7:22:9e:6e:
47:4c:34:c0:5d:1c:c0:2f:65:75:0b:3f:a3:a4:09:
57:60:7c:b0:37:e8:46:29:dc:de:66:1d:63:92:86:
34:06:c8:bb:b0:9e:b7:77:c7:c8:f3:f2:3e:17:7a:
f4:9b:ca:44:69:a7:29:cc:77:19:51:97:3d:c5:ad:
fa:dc:9b:08:42:1a:fc:4b:fd:e7:ab:41:dc:ee:72:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BE:79:F2:2F:E3:41:2B:88:B6:59:C3:91:76:10:EE:D7:26:1D:87
X509v3 Authority Key Identifier:
keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:20:51:91:02:1b:be:22:4a:91:68:21:de:02:b4:27:4f:d9:
a9:a4:9f:af:d5:bc:4a:b9:d7:f4:cf:21:4f:6b:9c:c3:85:7b:
fd:de:61:b6:1d:95:68:bb:c0:10:4b:8b:5d:dc:e1:c2:79:21:
e1:90:0f:f8:f2:f9:50:87:78:b9:1b:6c:27:0b:f0:1a:b8:2b:
11:bf:05:e8:d3:19:f2:6d:da:1f:2e:0e:f7:dd:16:44:96:e6:
66:44:49:0c:e7:91:97:db:fb:af:72:4a:b3:bd:7b:4c:38:50:
f0:55:40:1d:61:9c:30:f2:89:2b:b3:d7:e8:0f:84:7f:e1:9b:
da:8d:f0:37:05:77:21:d5:0f:dc:cc:e7:ff:b0:a7:b3:1e:b4:
10:ea:f7:43:5b:15:2b:21:57:8d:df:a6:13:09:82:bc:11:25:
45:3d:af:f0:24:24:7c:44:e5:88:a6:bf:16:c3:d7:1c:a0:6a:
6e:7f:a9:6b:1c:74:b0:3f:4e:50:ef:5e:fa:ea:7b:6c:3e:c6:
df:41:54:a3:e6:31:40:61:58:7f:2b:20:cc:ec:a5:1e:35:80:
dd:ca:d3:8d:b7:12:7e:4f:25:be:c5:1f:f2:6c:bf:5e:db:03:
de:e1:2b:35:7e:75:82:ee:94:fc:8b:c6:f2:67:92:9c:91:d5:
09:85:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:48 2025 by rpki-client