Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File: wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier: U9l8DzaNP76CAVpsuTIjVe7rioHlK2Wo14nrgCL0nZ4=
Subject key identifier: 22:01:A1:A9:66:EF:E3:78:D4:48:D4:9B:FA:4B:CE:54:6E:47:90:22
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer: /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial: 0198D6603C51823EDF92C7FB2BD8924C1024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number: 0A9B
Signing time: Sat 23 Aug 2025 10:01:27 +0000
Manifest this update: Sat 23 Aug 2025 10:01:27 +0000
Manifest next update: Sun 24 Aug 2025 10:01:27 +0000
Files and hashes: 1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: mTyDx7r8E2PLAz0mS5XUgpVAOBqacX1pBxRleH6i+RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3c:51:82:3e:df:92:c7:fb:2b:d8:92:4c:10:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Validity
Not Before: Aug 23 10:01:27 2025 GMT
Not After : Aug 24 10:01:27 2025 GMT
Subject: CN=2201a1a966efe378d448d49bfa4bce546e479022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:c9:e5:fb:79:35:a7:a6:5a:e1:6e:c1:ef:
a6:41:6b:73:dd:c0:9b:34:72:2b:77:69:8f:6c:15:
7f:b1:13:66:fc:d9:13:1c:d0:a6:9f:c5:84:d6:dc:
dd:8c:a2:b3:a2:6d:68:21:89:3e:76:89:69:96:d4:
fd:45:b1:14:b9:59:7e:3e:ee:82:93:52:66:91:00:
ba:56:09:a1:62:0c:92:90:a8:28:8b:8d:36:0e:e2:
4f:e0:cc:e2:80:d5:79:09:b4:ed:74:4b:6d:eb:ee:
c9:ca:4b:b9:da:05:60:ce:0f:a1:0d:a5:b0:cf:25:
c4:c7:d9:82:a1:1d:32:77:6c:a0:97:02:20:ff:87:
91:cf:a9:da:7b:74:17:00:d1:4b:bb:0f:33:53:7f:
1d:7e:53:70:50:08:f4:e4:f2:d4:4f:bb:f3:cf:9e:
08:a9:89:97:3d:5a:ee:34:ab:8c:59:9a:76:c6:fb:
6b:f3:11:d0:d4:f9:cd:9e:2a:8b:09:ef:78:62:a3:
f4:6f:16:92:3e:de:51:24:f4:5b:df:6b:b9:10:25:
74:9d:be:ed:58:37:3c:ba:63:19:11:a8:53:17:26:
a5:4c:18:42:94:92:b5:96:e4:05:f5:5d:7c:37:75:
d3:ee:68:ce:ba:74:03:e1:ad:02:1a:60:4b:92:9f:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:A1:A9:66:EF:E3:78:D4:48:D4:9B:FA:4B:CE:54:6E:47:90:22
X509v3 Authority Key Identifier:
keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:97:df:2c:0c:ba:2d:6f:6a:76:a7:b5:49:da:ca:f9:f3:37:
aa:45:b1:05:99:14:6f:37:01:72:16:ce:2f:6e:d6:4a:2e:aa:
8f:ed:7b:64:18:19:53:b3:f4:db:cf:ca:68:7c:ce:b2:7d:97:
7d:3e:a0:ab:a9:d5:98:ff:85:94:8b:d8:dd:0f:9e:61:24:e9:
48:f6:59:dc:4a:04:c8:bb:cd:a3:12:67:dd:6a:8f:7b:c4:75:
d3:9b:7d:2b:95:ff:4f:36:23:11:cc:a7:3e:fa:bc:a6:53:ce:
52:f8:f3:82:73:58:cd:ed:66:f8:c3:4a:08:f9:aa:b2:b0:cd:
17:88:a2:d1:d0:8e:45:97:2b:8d:9e:d0:34:0d:ae:bc:48:07:
e2:4b:31:75:b6:78:94:21:80:09:4e:f7:f2:d9:c5:f4:08:74:
d2:a4:f5:42:bb:39:32:9b:a6:6f:1b:82:fb:06:87:f9:30:d4:
c5:1c:a4:0b:9e:07:9d:bf:f6:07:fe:2f:78:e1:70:34:58:e1:
47:e2:81:52:a3:8e:17:fc:1e:7f:84:0d:91:ff:6d:c8:45:b7:
f3:3b:7f:dd:b8:8d:3b:e2:de:b8:1b:18:1f:05:8f:c9:22:6b:
e7:d1:29:40:26:ce:6f:65:13:09:65:a6:42:89:1c:fe:48:4f:
25:9b:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:07 2025 by rpki-client