Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier: UqIGSrPrGt4lwmp5GfijCPipQ4sbWWDyWJcxUaHBd4k=
Subject key identifier: 19:AF:EE:0F:93:48:B1:15:C6:44:BE:D4:9D:F6:E5:A3:87:2E:05:3A
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial: 0198D66075C1351E7A80100250C6BAC632AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number: 10F3
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: CCbd7R/QStRrufa+7YT5I6wKFzMvWF7KnO1RdT0U5nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:75:c1:35:1e:7a:80:10:02:50:c6:ba:c6:32:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=19afee0f9348b115c644bed49df6e5a3872e053a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:c1:6f:15:9d:76:48:1f:16:b5:b0:5b:53:
de:ab:72:60:31:40:7f:a0:fc:0a:a3:b2:81:15:d1:
8a:8a:36:41:bc:f9:4d:26:de:09:b9:fb:ba:18:0a:
cb:fc:16:e5:d7:e3:2e:88:a0:f2:da:ac:fc:ee:c6:
92:04:4f:e1:5e:97:4d:c0:fb:dd:74:77:5d:f9:1f:
8f:ed:7e:3a:8a:c9:12:c9:b6:b4:75:9c:8c:81:6a:
6b:4b:47:05:d1:27:60:6e:7b:a4:5c:5a:5a:42:30:
ff:e8:a5:cd:25:15:4e:28:5f:53:9e:f4:ce:f2:84:
05:7c:57:60:2c:8e:fc:f9:b9:f3:e9:56:3a:4b:a7:
e4:66:96:8e:45:74:87:6c:77:7c:ac:38:09:7f:c8:
2d:08:51:42:1a:91:68:8d:8e:3c:e2:6e:5b:d6:62:
ff:cb:11:71:9b:d8:fb:95:c6:a0:70:1e:20:33:b1:
73:55:50:6c:9c:c2:00:a9:e0:d0:3b:1b:80:20:46:
11:06:49:31:10:da:d4:dc:1d:4b:ae:5a:99:c9:eb:
fb:50:4a:f6:47:dd:9e:fa:bc:26:1d:14:e2:fc:3a:
62:59:e1:4e:5c:05:7b:de:6b:b7:0a:ff:10:27:1a:
5d:68:d9:f1:22:05:7f:4b:24:7a:6c:d0:6f:f4:a0:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:EE:0F:93:48:B1:15:C6:44:BE:D4:9D:F6:E5:A3:87:2E:05:3A
X509v3 Authority Key Identifier:
keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8f:7a:5c:5f:ce:12:07:5a:73:dd:1c:df:a7:3f:c2:11:5d:
c6:63:ac:ec:5b:db:d9:98:95:30:7a:3e:d8:51:85:21:ae:af:
e8:0f:61:c7:68:3d:47:03:25:c8:a1:85:73:ba:a7:91:d5:2e:
b9:08:b9:2d:e5:be:ad:0e:35:91:26:60:c3:fc:bd:3e:52:21:
8a:77:55:4e:a0:32:bf:59:fa:94:e8:86:b9:a4:e9:b0:7b:75:
ec:4a:8d:90:80:fc:29:98:18:97:13:7c:47:be:b2:7e:d6:f9:
77:52:67:22:b7:6f:9b:dd:ed:5d:01:a4:01:df:98:9f:98:eb:
84:15:91:93:36:5e:01:59:db:ae:ab:64:39:e2:b4:ef:b7:97:
6e:17:ec:aa:88:75:88:39:99:6e:21:85:3f:f5:fb:10:6e:4e:
79:ff:7d:05:8a:1f:2b:fc:32:09:c1:82:5f:96:97:16:e7:ed:
78:92:8f:4b:07:5f:09:82:60:82:0f:71:b9:2c:f2:21:d9:84:
3d:05:11:96:00:4d:45:42:7c:45:c0:29:4c:e0:dd:92:dc:75:
b8:e6:39:39:cc:0a:e8:40:e1:1a:2b:6f:e2:5b:eb:18:a3:c9:
d0:70:bf:5c:62:6f:51:b8:23:f3:e0:1a:0e:70:03:1d:cc:33:
a5:9c:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:21 2025 by rpki-client