Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: kpRTw8Qk4uNIZoQXUPLOMgwpBcfC1WOjohS4O9ZCz8w=
Subject key identifier: F9:62:5A:16:1E:86:47:42:60:CF:80:19:5D:82:47:32:19:D4:89:2D
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 0198D6603EEDF1190832A996D6602D3E1138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: gQ07TiOJXsV2QuYf9dgxsdiQ7S/nSlZ0SyoyGFRkHCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3e:ed:f1:19:08:32:a9:96:d6:60:2d:3e:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=f9625a161e86474260cf80195d82473219d4892d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:d9:77:c8:15:db:06:6a:3a:a1:0c:3c:32:
3f:92:df:39:6a:21:f5:c5:9c:54:e7:a9:08:a9:9b:
52:aa:e2:af:4b:67:7c:ed:77:8c:7a:f4:8c:45:00:
9c:5e:42:31:e5:be:66:26:74:de:66:e6:4c:96:3a:
a1:ff:5f:25:9e:e3:43:2e:32:94:93:f7:ad:39:a3:
c2:b5:98:9f:82:35:f3:7a:25:af:34:35:16:14:1e:
79:e5:fe:18:f8:de:1e:2a:89:72:70:b1:4f:d9:d9:
90:f1:ae:50:a6:09:d5:9d:96:10:be:2f:39:69:43:
4e:ba:62:a6:9d:6c:fb:9e:36:bc:ec:cd:4a:ac:19:
71:a3:b1:dc:44:32:55:e8:0a:49:20:4b:51:42:9c:
d1:20:8f:b1:58:a8:c3:c5:80:9f:d6:49:98:bd:5f:
cf:36:95:1f:59:df:e4:44:28:1e:4b:f9:ed:3e:70:
62:20:20:55:a6:be:83:08:61:f5:68:d6:dd:51:28:
83:72:6c:d6:df:51:df:53:60:79:16:e4:b9:e9:ac:
bc:bb:5c:65:24:23:19:9c:bd:4d:23:3f:d2:72:c0:
d8:68:e9:c4:70:bd:27:69:0b:e2:f6:ef:4f:0b:30:
17:8e:5d:f1:28:68:c8:d6:5f:34:6a:37:aa:e8:61:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:5A:16:1E:86:47:42:60:CF:80:19:5D:82:47:32:19:D4:89:2D
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d9:52:fa:0e:fe:aa:4a:70:09:97:74:c7:05:0f:47:a7:41:
9c:cd:cb:5e:d2:66:f0:cf:cd:14:ca:e2:a3:01:e8:36:36:2c:
eb:96:10:3d:5f:39:2c:0f:5e:4b:4c:61:f7:d9:35:f3:b5:94:
37:ec:e8:0e:e7:45:c9:84:d6:8b:da:76:33:d4:a9:75:73:f7:
71:e3:a9:65:c7:6b:ab:e5:60:f6:84:af:ea:89:f8:6a:60:24:
ef:b7:2d:1b:8b:0b:6b:89:61:b7:af:74:92:30:c8:86:1d:32:
7a:3d:19:96:14:b0:9c:4d:2c:b0:be:e7:23:44:61:cd:ba:b5:
2f:64:03:8d:8c:32:5d:55:ad:bf:b0:9e:4b:68:c2:72:57:19:
cb:e2:f8:03:e1:55:4d:28:c7:f9:08:0b:7e:49:8c:a0:67:7c:
87:63:4e:9e:aa:14:db:9b:4b:05:06:c5:39:64:2f:41:55:11:
4d:3d:ea:53:b3:d8:6e:48:1b:10:ad:74:c1:bf:f5:6b:cd:5a:
70:eb:a9:69:cc:ad:21:82:2a:a8:15:8b:d3:fd:bf:4a:62:99:
7f:7c:20:17:4a:45:9e:dd:a0:fc:3e:2b:6c:19:97:a1:9e:10:
19:3d:b7:40:8b:45:24:2c:6a:48:7c:f1:c7:68:91:d7:69:f5:
94:62:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:29 2025 by rpki-client