Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: 7Tv/afiIBD5H+hrfyE+Th7mgOZONP2GyDV6Dk9MBdgI=
Subject key identifier: 60:74:C6:88:CC:C0:7E:88:31:7C:FA:A8:D4:B2:95:9C:A6:A6:9D:00
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 0198D4E06F282F319A83EB6C0AF91F2FDF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0CD4
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: Y6z/Wj4zkaS/mHOZjphZfpvuA08RigyXWGFcaj7I1Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6f:28:2f:31:9a:83:eb:6c:0a:f9:1f:2f:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=6074c688ccc07e88317cfaa8d4b2959ca6a69d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:5a:09:b2:d9:e6:64:56:aa:68:ce:1a:c2:
01:2c:7d:4e:d9:6c:12:50:18:f7:d8:4d:f3:fb:dd:
af:ba:78:ec:56:fb:bc:f5:cd:91:06:e3:6f:b0:94:
db:82:1e:63:04:8e:ce:4d:d1:b2:aa:31:49:d8:f7:
68:38:b1:65:46:08:89:32:e0:df:30:94:92:d5:61:
36:8f:9d:99:e5:1a:c5:9e:54:74:88:dc:78:fd:9a:
a4:43:8b:04:09:e5:56:58:16:4c:ea:dc:5d:ec:89:
76:23:89:08:9b:c5:f2:3f:af:83:36:c7:1d:14:41:
94:2c:9c:d2:ff:25:67:f0:b2:38:3a:b3:d5:c6:20:
d6:47:97:ab:32:b5:39:0a:c6:13:27:c5:31:2e:9d:
f7:ce:9d:4a:eb:d0:37:21:aa:4b:6a:d2:53:38:30:
13:1c:5a:30:57:b3:ce:66:78:38:50:75:a7:2a:5a:
ef:ed:d8:6b:e1:21:cd:5a:3c:15:46:19:95:ed:92:
78:fd:bd:e9:46:7e:0b:f0:c4:e4:84:54:65:24:af:
d1:9d:67:1f:84:94:3f:00:0d:84:0b:d9:6e:d1:0f:
eb:76:09:a9:85:db:db:79:c1:6a:f9:c6:47:1a:45:
3f:62:e2:11:67:f5:76:d1:5a:0f:45:99:75:47:f1:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:C6:88:CC:C0:7E:88:31:7C:FA:A8:D4:B2:95:9C:A6:A6:9D:00
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:20:d3:63:e0:bc:3c:28:92:f1:1e:18:bc:95:56:d1:c9:dc:
1d:53:1b:17:72:8f:70:c1:d6:a7:61:87:ba:b9:71:7d:2f:e7:
f4:97:32:a6:c0:3a:fc:b3:30:be:09:a4:27:dd:34:33:09:6f:
38:97:21:a7:46:30:04:72:4d:53:7b:c9:2d:bb:62:3b:97:3f:
e4:c9:4d:69:33:90:a2:e7:b0:59:d6:5e:5e:a3:a9:96:80:18:
5a:43:27:f6:d7:dc:95:ad:a8:d3:bc:bc:14:ff:12:26:35:19:
6d:79:5a:b1:7e:9d:29:14:5f:b8:09:96:36:95:3f:1d:5d:84:
aa:1b:69:d1:d9:8c:41:b8:93:fd:b7:96:51:be:80:30:9c:9c:
2b:77:7c:51:e4:9b:2b:fe:f6:06:0f:1f:eb:2e:00:67:13:e1:
47:b8:7c:06:19:45:5a:36:66:4c:26:f2:f5:be:41:54:eb:76:
dd:6e:5a:e4:06:0d:ed:87:d3:aa:48:59:30:82:39:5b:c8:1e:
c2:cc:c5:33:84:a7:2d:53:b6:a1:b0:0d:06:6b:59:14:51:66:
e4:5d:d7:0c:0e:a8:51:34:b7:47:bc:d6:75:37:9b:d1:b3:74:
de:93:93:fa:c8:1e:5d:39:8d:15:3e:e5:46:79:53:63:4f:f9:
97:2e:c3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:04 2025 by rpki-client