Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: +a1e3CaUnCutaC2O/Rop88Cc/QWRz8EDQp5KH9cbk6A=
Subject key identifier: 1A:FF:3B:DC:A1:49:BF:71:CE:C1:1E:5C:A0:97:06:FE:33:32:0B:A9
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 0198D65FD06221D133BD2D00ACE390A510EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 10CF
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: TQhfBaPP+2igdzb12F503mbiC7wZzX7bhMvewzcVzjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d0:62:21:d1:33:bd:2d:00:ac:e3:90:a5:10:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=1aff3bdca149bf71cec11e5ca09706fe33320ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:d1:9f:60:36:33:2f:a5:f6:da:57:13:86:
1d:28:2c:82:98:cd:ad:0e:4d:bf:54:d6:20:63:65:
8e:71:2c:b4:ca:e7:32:6b:ee:1b:d1:be:a0:e4:cf:
b7:14:5f:7c:ed:d7:68:83:54:6e:41:6d:77:43:a9:
fe:77:64:1d:6d:bf:b0:44:ad:03:72:9f:22:f3:7d:
68:de:33:eb:c0:ff:a9:2d:bc:f9:47:46:5f:8f:9e:
0b:5e:ae:89:8b:9a:21:df:c1:be:ff:d8:c6:ec:94:
18:29:90:25:1e:98:bf:01:05:73:32:ee:9e:e0:9d:
f4:60:24:0b:7e:90:b2:6d:85:14:9d:43:1d:6c:4e:
74:36:3c:33:ad:d0:29:43:30:fe:31:99:cf:bd:8c:
d1:95:4a:c1:b8:46:30:50:f5:9e:79:9f:c7:76:62:
17:53:0a:cf:0c:9d:cb:c9:45:9f:bf:d7:c1:3b:ab:
1d:c3:28:a9:dc:26:2a:43:50:cb:9a:ea:7f:17:46:
2d:60:fd:ef:59:73:87:bc:be:c8:97:aa:79:ea:c3:
c8:f7:bb:27:63:f3:72:c9:64:17:f0:b8:37:c0:d2:
af:27:65:8f:28:18:3a:33:05:32:1a:f2:aa:69:22:
fd:c5:91:17:b5:3b:11:29:41:ca:34:d3:fb:47:bb:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:3B:DC:A1:49:BF:71:CE:C1:1E:5C:A0:97:06:FE:33:32:0B:A9
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e0:df:4b:95:f7:6e:0a:90:0c:2d:ef:21:56:17:34:f3:5d:
7c:80:b1:84:dd:80:d5:ae:dc:8e:74:3c:66:52:b8:86:3b:e0:
18:aa:7b:67:7a:9d:a8:97:2f:14:55:58:4a:61:1b:a2:fd:32:
e4:68:f0:22:b0:b4:18:35:cf:77:bf:c5:c8:20:84:e5:3d:b8:
0e:12:f8:2e:a1:a2:c7:ba:30:51:47:c1:b5:a1:46:63:7c:6e:
54:0c:06:9f:a0:58:a0:39:2d:0c:6c:18:ac:23:6a:28:2d:9c:
91:d7:78:bc:66:da:6c:3e:94:b9:84:60:d4:d5:f4:a0:61:36:
12:11:4b:af:46:6b:30:0c:a7:3e:4e:d1:8d:99:0e:49:aa:0a:
43:d7:ab:0c:93:94:dc:a3:b8:91:ae:e8:17:85:48:e6:ca:eb:
dd:94:33:36:1d:2c:3a:cf:5b:79:5b:aa:b3:c3:81:95:34:bd:
5e:4c:81:8f:c0:6a:3e:eb:4b:15:30:b9:ff:b0:e3:b3:77:b4:
37:a6:68:73:29:7e:1e:51:a5:5f:1b:d7:ea:8a:d6:ac:9b:80:
69:f8:82:55:cc:56:77:e6:86:b8:32:39:e6:8e:8e:6f:7f:25:
46:71:a2:51:e0:dc:54:9d:b8:59:a6:91:a8:42:e3:c4:c1:39:
07:9c:d9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:56 2025 by rpki-client