Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: C6CUYnogDs0zb7mZAyRQHHQllXdRjdhK+U0BAW6MrBQ=
Subject key identifier: C5:AE:95:52:02:DC:61:90:3E:EE:19:CA:D8:BF:A1:54:63:17:C6:12
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 0198D4E0493748F9FE698CF0049C207B6375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 09A5
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: OVm6tdRVl8sK0c+BBziD8GbXxMfHsWcQIiPgHCpQ5aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:49:37:48:f9:fe:69:8c:f0:04:9c:20:7b:63:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=c5ae955202dc61903eee19cad8bfa1546317c612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:52:9e:8e:b2:2f:29:5e:1f:8c:84:57:7b:
90:47:93:de:6c:e2:d0:6d:fb:3d:0d:9e:9d:bc:c9:
49:df:c1:9a:7f:1a:3c:b1:40:35:c8:0b:92:1c:0c:
8a:14:d3:6b:3e:3e:75:31:90:76:5e:3d:e4:79:c9:
80:b8:0b:0c:98:83:ae:6e:2e:06:a5:de:6b:f9:2f:
83:54:97:a0:fd:5d:32:d5:3f:79:68:80:aa:20:eb:
71:2a:eb:0a:bd:bd:af:2a:70:4a:23:7c:8c:83:97:
03:87:fc:5b:50:b9:ee:f5:27:13:5e:4d:b7:f6:7d:
da:bd:53:04:c9:8f:7b:9a:05:bd:64:a8:03:bd:45:
6e:e0:71:1e:71:05:d3:40:fc:12:64:64:6c:da:b9:
a4:a7:e9:9b:22:e9:63:93:8e:8b:15:ef:a3:49:7f:
50:95:67:00:18:72:6c:8f:89:80:d7:e9:77:a3:eb:
86:46:5b:8e:cb:34:16:cc:5d:90:7d:22:d5:04:65:
a9:33:34:93:a8:ac:23:88:a6:79:a1:fd:00:ad:61:
1b:b5:96:53:d8:08:f6:b6:98:82:a5:66:5a:6f:25:
9d:5f:c2:b5:34:64:2a:e7:5b:02:22:9e:e0:f3:38:
5c:42:47:87:3e:22:9c:05:34:48:15:51:40:a6:d1:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AE:95:52:02:DC:61:90:3E:EE:19:CA:D8:BF:A1:54:63:17:C6:12
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:b8:6e:9f:52:56:f5:58:43:09:ff:a3:99:d8:11:c7:1d:
d4:a2:db:fc:c6:f8:21:60:f0:00:c1:97:77:44:77:b8:65:25:
92:21:9c:bd:29:3e:04:d8:99:3a:3c:93:a4:6e:0b:95:8f:f9:
6e:01:a6:42:8c:ed:b3:91:7d:af:d4:a4:03:f2:a8:5e:e0:7e:
b8:68:a0:99:97:d9:ce:5e:84:2c:bd:83:ed:a2:21:67:aa:4a:
e8:24:50:90:15:ec:d5:aa:8f:d1:79:4d:6a:c9:1e:4f:dc:ad:
79:81:22:0a:55:63:a4:77:05:ce:63:96:69:05:ee:e7:ac:49:
38:e1:2c:56:6e:d8:4d:47:79:1a:d2:3e:fe:1c:e3:89:6f:87:
be:48:7b:94:14:70:7f:1c:9e:0c:65:b3:d2:39:40:fe:0a:22:
2f:74:6d:11:d7:ed:fa:83:51:48:89:3f:d4:7a:f2:67:f8:8f:
da:07:e3:2b:36:2a:c8:75:3c:3d:48:6c:e3:a8:09:73:c9:13:
f5:71:2f:1d:0c:5e:b1:70:f7:e3:82:d8:5f:10:36:d3:07:a7:
d4:8d:56:d1:b8:49:56:61:92:ea:c3:62:7f:2f:35:bc:a9:11:
5e:ab:b9:a8:fb:69:b5:6e:a8:c1:e9:94:f8:87:57:fd:3d:8b:
b8:13:b7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:11 2025 by rpki-client