Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File: w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier: lRu+9ZStbzbxk+XDuaPBoatlFnBbbo7o87CMVhzyxg0=
Subject key identifier: 7A:F5:6C:2C:91:CB:63:CB:3C:BE:C7:A6:73:AD:BC:ED:56:2E:B9:F4
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer: /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial: 0198D5BC150E92BA7D811C72572F2E6CB22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number: 14CB
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: 3GmadrEveT/Txgn4Kihl3BvL1+LlypJBU7glaULQ/YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:15:0e:92:ba:7d:81:1c:72:57:2f:2e:6c:b2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=7af56c2c91cb63cb3cbec7a673adbced562eb9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:e0:50:18:d2:81:6b:08:18:d2:1c:4b:d0:
ca:81:91:49:e6:2d:d3:eb:40:2a:fa:74:73:e5:b6:
75:a0:c9:9b:0e:22:49:ca:06:30:66:81:4c:cd:8f:
bd:7a:b8:68:5a:d9:5f:50:d4:10:7d:f0:94:ed:9f:
3f:4d:3f:bb:f0:8a:21:1e:10:68:52:d7:2c:40:64:
59:fb:c1:7d:1f:de:96:ac:36:a1:e3:d0:00:66:b1:
80:81:5b:5e:56:07:b1:ad:f1:6d:44:c8:94:7b:ea:
83:a5:68:8b:d5:da:52:80:9f:e9:d8:ff:f9:b3:d7:
6a:9d:ab:56:5c:e3:97:4b:70:c8:48:cd:8b:a4:26:
da:c9:85:81:ae:03:db:c0:37:a7:48:6f:8c:c8:16:
1d:d9:cb:43:67:4e:02:fd:ba:86:83:36:c1:1b:06:
5c:33:a6:23:14:19:69:e4:e3:4a:e7:30:63:a8:d6:
77:4e:c6:a6:aa:d7:50:15:fa:29:bd:a0:ce:07:18:
c1:1a:89:09:16:b4:6c:45:f4:b2:53:92:16:b6:bd:
be:61:34:6a:c0:a0:ee:b5:89:6e:0e:f9:5e:75:32:
ef:c9:79:c1:7b:c5:57:ea:45:84:34:78:30:f7:cb:
71:01:d8:5a:f1:eb:96:2b:ac:79:63:e9:be:3d:57:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:6C:2C:91:CB:63:CB:3C:BE:C7:A6:73:AD:BC:ED:56:2E:B9:F4
X509v3 Authority Key Identifier:
keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:57:66:fc:8c:87:a5:bd:00:51:c1:ed:7a:41:c0:c7:b5:75:
c3:91:5f:e9:57:e8:13:29:d8:e4:4b:46:1d:f2:26:bd:c1:90:
22:4b:33:72:16:b2:16:c8:8d:30:b3:a2:cd:6d:0f:06:7c:33:
f2:3c:27:8a:21:66:83:c7:e8:c1:59:eb:65:8b:45:6f:04:85:
ea:13:9f:5c:1d:03:f3:1e:f0:ad:a1:5b:a0:62:4a:f8:8c:a4:
1b:38:c8:ff:71:3e:7e:a4:99:af:8e:57:99:41:c5:85:df:bd:
ab:1c:15:d0:96:6e:2a:47:b7:41:43:52:11:61:e0:50:ed:01:
4f:83:f8:59:c1:c0:75:7f:3a:3c:c4:82:6b:2e:bc:ab:d8:dd:
32:10:c3:b4:ce:4d:20:cf:48:49:78:34:77:9a:2d:c4:db:fb:
3f:a5:20:32:aa:90:40:0a:77:86:0c:98:84:30:2f:d2:06:54:
6c:91:de:66:5b:ba:e0:62:d7:76:48:8c:ff:93:36:74:8e:cc:
d0:38:93:67:65:f2:b2:3b:df:a3:6c:fd:e1:a1:64:54:34:ba:
03:29:56:a9:88:05:5f:2c:99:1c:78:7f:8e:69:1b:a1:0c:5e:
81:ff:62:67:2c:d7:49:9e:9a:91:99:3a:e3:c8:e3:5f:7a:38:
e0:ee:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:22 2025 by rpki-client