Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: CXXe0JszyFb5iLaBhwm/BswOx1PjMvritMsHGgky0tM=
Subject key identifier: D9:78:3B:D6:D1:3C:54:98:41:7D:17:8B:CB:EC:01:E5:2A:1E:C1:30
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 0198D473AE4422844AFB6D6AE45D283D9C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 0741
Signing time: Sat 23 Aug 2025 01:03:27 +0000
Manifest this update: Sat 23 Aug 2025 01:03:27 +0000
Manifest next update: Sun 24 Aug 2025 01:03:27 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: JBF7UVQbCP8nS5JwgKkCZ/ZhySFnN6EhnH5qWBcgrMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ae:44:22:84:4a:fb:6d:6a:e4:5d:28:3d:9c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Aug 23 01:03:27 2025 GMT
Not After : Aug 24 01:03:27 2025 GMT
Subject: CN=d9783bd6d13c5498417d178bcbec01e52a1ec130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:79:39:90:3f:02:92:c9:9e:2a:7b:b7:6c:
16:c7:9f:d7:83:30:9e:7c:2b:3e:33:35:e2:9d:5b:
12:cd:9e:56:8f:c4:60:f5:cd:4d:d8:da:4d:83:59:
3c:e8:55:27:f9:74:23:88:c9:8a:23:8d:d4:83:26:
a2:60:fc:22:5f:dd:05:69:22:57:ac:66:ee:20:9a:
18:2f:96:f9:ed:cb:cb:a8:fb:45:7e:12:e1:b0:1c:
99:9f:b5:3f:35:8a:ca:90:69:64:8b:a5:3c:e0:f1:
5a:34:58:92:ed:e7:52:42:29:97:27:50:56:dd:76:
db:55:0f:4b:07:7a:22:80:41:f1:1a:9c:56:af:66:
52:59:ab:f0:1b:6d:03:e4:70:a9:52:5f:1a:28:ee:
55:be:9c:eb:df:ec:58:0a:05:2e:c8:fe:5e:af:c6:
d1:45:74:db:ca:35:df:ef:76:93:5c:f1:cb:87:eb:
ec:34:fe:45:27:b0:12:55:9c:8b:94:63:f5:4e:5e:
83:17:e7:af:6f:3b:1f:90:0d:c8:24:2b:68:4b:90:
19:1d:9f:30:9e:5b:ee:ce:99:39:c7:0a:43:75:38:
80:d8:42:b6:36:d6:bd:ab:88:02:4f:f2:4f:55:af:
81:d6:ef:ab:c6:fe:04:8c:8a:28:f2:a0:df:71:bf:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:78:3B:D6:D1:3C:54:98:41:7D:17:8B:CB:EC:01:E5:2A:1E:C1:30
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:29:74:67:3d:df:2a:b3:ad:ec:78:a5:15:45:31:1c:55:ce:
c1:dd:51:dd:cb:26:87:7a:63:b1:db:3c:d9:10:f9:29:3d:b3:
8e:4c:ca:72:48:50:1c:1a:b7:fd:6d:63:de:22:9c:c5:1a:d4:
75:54:fc:35:04:a5:ed:5c:45:3c:26:bf:7c:79:79:c8:33:39:
79:63:1e:ed:b8:a1:2e:16:88:dc:fb:ce:d1:40:79:93:25:57:
f3:28:95:96:ee:b8:0e:74:2f:a1:b9:18:a0:9e:c6:ad:03:ff:
15:c7:af:14:d8:b2:9f:31:2f:c1:d9:7b:fd:08:c0:b7:0a:c5:
34:3b:47:27:7e:93:e7:3a:7c:e3:55:99:0d:ad:34:30:da:60:
80:b0:ed:fb:2e:fc:20:73:64:b5:9c:c9:60:2a:f5:36:7c:bc:
02:d4:55:70:5e:88:ec:5a:1a:40:31:63:44:7a:ee:61:f3:96:
8c:d2:a6:b0:36:43:db:83:3c:df:54:c6:be:35:27:e6:20:b5:
19:ba:e3:be:f6:0b:a1:3f:5d:f9:d4:70:a7:4c:43:01:c8:6b:
0d:7a:37:e0:b9:35:b0:01:9c:c9:e7:f8:ac:31:bf:40:00:c2:
5a:d5:80:f2:21:16:8b:de:87:d3:36:93:9a:45:f7:9d:f4:36:
5e:03:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:22 2025 by rpki-client