Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier: oBVF026DMh0/TijTp2e921jOHi5zk0ZjSx6ZbaG+uPQ=
Subject key identifier: E3:78:CA:F2:D7:29:9A:96:0B:3F:BD:C1:14:DA:44:8F:68:5D:B8:EE
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial: 0198D5BBF326F0CF39C23857AC0003D56D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: M9d0MgRy478VXRsOICuLjwHzJPtW1Yo99Uw3rBXI5rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f3:26:f0:cf:39:c2:38:57:ac:00:03:d5:6d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=e378caf2d7299a960b3fbdc114da448f685db8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:f9:0a:5c:e6:39:c9:5a:02:3c:c2:a7:4d:
2c:6b:5c:d4:b8:d9:f3:d3:63:30:32:cc:f6:3d:5b:
2c:b9:98:9a:24:6a:d8:8d:09:55:62:c6:c1:94:94:
13:10:8a:63:62:c5:20:5e:19:ca:b8:aa:f6:60:b2:
ef:51:53:5f:c6:db:cc:69:19:b1:f3:a2:23:9d:ff:
43:a0:c0:50:75:25:b1:d1:0c:cf:f2:5d:bc:04:c6:
ba:a9:f1:f0:a8:f6:8c:a8:f4:77:53:2a:b9:94:10:
70:47:cf:81:88:89:65:6d:be:b8:14:da:08:94:87:
3c:9c:f9:c5:b4:57:cf:06:8c:b5:af:f0:89:14:e1:
53:28:4b:ff:d2:9b:93:f1:aa:9c:bd:ce:71:3c:8e:
d7:bb:81:5f:59:e0:19:4e:14:e1:f8:06:dd:bf:05:
73:0f:d6:ed:01:cc:fd:ff:b4:3f:d1:5f:29:6d:a9:
51:a0:45:97:07:8c:5a:5e:13:3d:0e:13:12:5e:51:
61:89:84:5c:4d:6d:00:80:d4:7e:82:94:ba:25:85:
ef:49:3b:52:1c:b8:e7:aa:40:e0:1c:aa:e8:e5:cb:
4d:90:66:24:30:ab:7d:bf:c3:b1:9a:a0:e5:df:6e:
9d:49:b6:50:ce:17:80:86:4f:48:2b:02:78:58:13:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:CA:F2:D7:29:9A:96:0B:3F:BD:C1:14:DA:44:8F:68:5D:B8:EE
X509v3 Authority Key Identifier:
keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ed:2c:69:22:f1:4e:be:0b:9a:0f:02:48:6e:3a:97:20:16:
f5:db:0a:12:0d:2d:ca:89:d7:fb:6a:e2:e7:e4:ea:b4:cd:ad:
47:14:29:29:1c:ad:f8:0d:77:ff:d5:45:3e:0e:0f:d8:d6:8d:
dd:80:21:0f:da:73:90:84:ab:60:6f:6e:65:5a:0e:b3:b5:cf:
be:3b:85:83:c6:c2:a9:4b:75:72:0d:31:3d:1c:86:fc:b4:e3:
c6:71:84:45:81:d6:79:35:98:94:11:ec:04:fe:da:62:5c:45:
56:9a:c6:5b:f0:bf:60:c4:8a:df:58:07:2e:73:f5:6c:67:73:
f7:35:54:ed:ef:41:4a:82:ee:7b:e1:bc:23:0d:dc:6f:74:10:
60:79:e5:d6:fe:d2:58:8e:13:f7:77:2b:5b:be:f5:28:b8:11:
27:b3:cb:1b:01:31:43:b9:33:16:d4:ca:56:92:89:c5:a3:28:
82:07:af:23:62:f3:4b:f1:41:cf:c5:ca:5c:cc:9e:4a:9f:57:
cc:4e:69:22:bf:e7:40:b2:21:05:56:fd:d0:8a:4e:92:a3:84:
ff:b6:16:9a:be:d9:87:04:35:05:58:64:2a:42:f3:3c:1e:7b:
d7:3d:b3:d0:2e:24:5a:cd:6a:5b:56:54:02:fd:a9:a9:49:5a:
bf:4c:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:55 2025 by rpki-client