Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: HCM4oTbqdxmGu0CFVgr4NwwujsO49BDtatA2UUMYrls=
Subject key identifier: 59:07:BE:3A:B2:49:E0:EB:93:E8:47:A6:77:52:B9:19:28:8A:3B:F8
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 0198D583ED96F9321E84EB11605B5FE3D138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 0608
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: jaOtbGnuKQAFJDZkhTnpbUc0BLeUwCajTSDk9dgYiXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ed:96:f9:32:1e:84:eb:11:60:5b:5f:e3:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=5907be3ab249e0eb93e847a67752b919288a3bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:35:b4:e1:f2:a7:b9:9d:5c:10:cb:e8:1e:6f:
03:20:c7:f0:0c:4c:89:0b:de:d2:68:84:19:78:e1:
0e:59:5e:36:b7:0b:3a:83:dd:ff:77:13:67:52:b1:
7b:69:ec:1a:30:20:0e:d5:a2:50:0d:b5:9e:ed:dc:
91:b8:db:c7:6e:3e:23:be:99:a3:27:ef:71:bb:fe:
23:63:f9:17:a6:10:11:8c:ea:76:eb:33:19:1b:4e:
96:b7:07:b6:79:63:ff:14:27:5c:55:c0:27:63:79:
d5:3d:d5:d1:97:f2:92:c6:5e:44:37:ac:3a:12:4b:
47:b1:80:9e:74:dd:98:aa:1f:76:24:f1:ad:e8:c2:
59:a0:33:7c:2c:a2:c9:b5:20:f6:9c:e5:1f:31:2e:
c2:fb:e1:71:47:f9:ec:dd:70:c2:32:06:b5:c0:b2:
19:30:c0:53:95:30:5d:8f:7d:42:01:86:96:be:84:
3d:a9:45:58:ed:05:24:bd:05:2c:50:ef:7a:f6:1f:
00:17:0c:2d:4e:93:65:51:0c:94:f3:86:80:3f:8c:
07:c8:7d:76:2c:13:ba:0a:8c:14:43:6b:9d:59:7e:
4e:04:b8:b2:23:3d:ba:25:43:17:4b:23:0d:57:99:
eb:4b:7a:df:43:49:21:be:42:66:cb:7c:d2:78:3a:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:07:BE:3A:B2:49:E0:EB:93:E8:47:A6:77:52:B9:19:28:8A:3B:F8
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:3d:9e:33:e3:c7:a1:99:f5:09:51:28:46:05:c5:06:43:
47:2b:e9:36:74:27:e1:a3:05:71:eb:03:0b:60:9b:ec:e5:c2:
fb:5c:6b:65:a6:c9:2d:45:ac:8a:12:4b:84:6f:7f:57:4b:7f:
a2:9c:84:96:1e:4b:ca:05:d2:e3:29:2e:07:cd:10:eb:68:90:
fe:ca:0c:9c:b7:6b:72:37:3d:79:38:e6:1e:01:e0:af:59:76:
4f:b2:06:d4:b0:06:be:88:20:e9:b9:1c:6a:b4:2c:de:98:14:
f7:d9:88:4f:5a:9a:bb:7d:f1:68:e5:d7:40:78:da:86:bb:cf:
56:85:7d:c5:d0:fd:c3:87:64:87:6c:36:12:02:9f:98:fa:93:
cf:be:9f:96:7f:ae:a9:2c:c6:38:7d:8b:7f:28:58:8b:27:8d:
b0:58:13:e7:f8:76:c6:3a:28:f1:8d:49:4c:a4:80:f7:24:f5:
f8:18:b9:63:fb:c5:4d:ca:ba:34:bd:fa:4b:fa:87:79:f0:2d:
1b:69:76:22:c5:c7:d4:ae:78:ef:ea:93:df:69:ac:c4:96:35:
65:fc:17:af:66:01:4d:95:6b:2e:15:c1:84:e8:55:2f:1d:cd:
ec:45:71:e4:c3:c2:48:d1:15:9e:26:59:29:16:ca:eb:b9:81:
b7:8f:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:52 2025 by rpki-client