Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File: wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier: 210/JxHKsAS28CdFWVL+DvZik23hN1Vy+zeH+ZLu1cM=
Subject key identifier: 71:4E:99:45:DF:AF:0C:70:45:3D:CB:48:73:80:4A:8A:FC:20:69:D0
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer: /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial: 0198D65FF42B68623318CAADDDD54893539E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number: 0D3E
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: EFy2JKNMgNo6qOP6CR/2rwTlMSvcDkx3tI3OdLfT5i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f4:2b:68:62:33:18:ca:ad:dd:d5:48:93:53:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=714e9945dfaf0c70453dcb4873804a8afc2069d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:69:88:95:a4:a2:27:8a:b0:69:eb:6f:f9:
7a:ee:a8:a9:a7:aa:23:9e:8a:97:8e:3f:b2:de:dd:
60:19:55:fb:7e:7e:76:26:71:d0:62:63:78:d9:34:
69:83:c1:9a:bd:25:ef:a1:5e:1a:21:12:13:dc:81:
65:c0:a5:0c:b3:36:bf:eb:bd:3c:82:bc:15:d3:04:
65:0f:10:1a:50:30:c9:82:6b:34:b9:05:bb:f1:de:
f5:d0:16:bf:30:ab:47:94:aa:39:28:40:44:75:a8:
01:b1:6a:ec:2d:31:ab:32:01:08:16:e8:b2:94:98:
da:f8:f0:93:db:f2:73:a5:93:4c:ac:6f:25:37:1f:
00:49:fc:95:59:b6:5b:a4:47:cf:1b:10:85:38:07:
8b:06:64:d5:b4:65:b6:d2:34:35:50:d3:bc:13:6e:
48:5d:dc:3e:94:93:bb:7a:00:6d:89:aa:8b:6c:5e:
d7:da:7b:a1:49:38:3d:e7:d1:1a:b6:e2:bd:ad:76:
57:99:4c:f5:d5:d6:43:a2:2e:df:0c:70:d5:11:a2:
3a:ad:d7:f4:23:5c:b3:80:55:74:c2:47:5a:fe:fb:
3f:f0:ff:ba:cf:98:7e:24:86:df:79:ee:75:8e:70:
08:1e:7d:f0:af:de:ac:40:9b:9d:93:55:e4:69:b9:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:99:45:DF:AF:0C:70:45:3D:CB:48:73:80:4A:8A:FC:20:69:D0
X509v3 Authority Key Identifier:
keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5f:73:0c:3c:56:1f:17:81:2c:b7:67:8b:c4:18:40:27:62:
1f:f8:77:2b:d9:e4:ae:90:a2:ac:17:51:e3:d1:43:44:76:86:
57:39:20:50:20:d8:76:e0:c9:55:80:c7:a3:12:33:76:33:24:
e1:23:fd:aa:ff:95:e3:36:66:f9:df:49:3e:f4:f7:e7:f3:32:
9f:64:ef:40:81:17:e5:23:cd:b8:e4:87:1a:d3:f4:97:9d:56:
a5:2c:65:b8:ef:2f:50:59:72:80:dc:74:a5:d4:89:d1:0d:3d:
56:eb:6e:d6:83:8d:7f:55:56:8a:0f:2b:e9:b7:65:ae:fd:55:
5d:b7:7c:47:b7:6b:21:9f:da:ad:c0:50:85:9e:88:f9:0d:dc:
d8:00:ee:55:d5:b5:e0:4b:b5:ad:03:86:af:e2:cf:f0:51:ff:
ae:06:0e:d3:1e:aa:fd:51:73:7e:3e:ad:90:a0:1c:5e:8e:48:
d8:1d:b0:b6:e2:ad:24:39:8e:8e:f5:a0:18:d0:89:75:fb:dc:
ad:23:9d:31:cb:03:35:87:d3:04:91:34:ad:04:af:47:28:d5:
8d:ad:9f:9c:aa:47:36:53:e1:05:ed:70:36:b4:f9:fb:ef:26:
c4:a4:e5:f0:89:13:32:5b:21:ed:5a:1d:1d:2a:59:17:24:ae:
4b:54:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:46 2025 by rpki-client