
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File: wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier: IrfpA0IpsChWqVTASTTp+27qj2z+mhziIkfjE2mA8i8=
Subject key identifier: 18:D9:50:42:5D:7E:38:7F:CB:B2:A6:05:3F:53:CF:7B:D3:37:1D:D1
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer: /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial: 0198D5F1AE5EB57861AD5872BC9D2698769B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number: 01DC
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: 6gTQWZzbqK+pD9rvNBV2ZcZwjDVVZY5sUBLrG5SXHHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ae:5e:b5:78:61:ad:58:72:bc:9d:26:98:76:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=18d950425d7e387fcbb2a6053f53cf7bd3371dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:29:a3:a1:3d:1b:c8:64:bf:a9:73:84:72:
bf:a3:36:5c:9a:20:28:4c:bd:04:d9:6d:01:66:20:
61:d3:7e:59:dd:bf:ac:fe:2e:e9:7c:c9:8e:9b:5c:
73:6e:ff:e1:e1:24:3c:28:ec:3f:f4:ff:51:7f:87:
a6:56:dd:43:dd:a9:03:c7:92:c5:60:47:0a:e1:6f:
b7:76:89:b9:c6:d3:d9:53:37:27:5e:53:9e:50:b3:
21:70:8a:db:4a:44:6f:02:b4:e4:cf:bd:0e:c0:4c:
36:99:65:0d:e2:3d:68:b5:af:9a:ec:df:2a:9a:6d:
37:17:fa:1d:f7:e9:f5:fe:41:34:1c:28:f5:b7:0a:
42:43:9f:43:b0:b4:34:ff:10:53:ac:80:7e:d5:21:
fa:88:af:54:8c:3e:00:e9:22:5b:b2:0d:60:07:48:
e6:56:88:92:f5:ab:db:89:15:3d:11:de:49:6b:84:
89:6a:4e:41:cf:c9:7e:69:63:87:f5:10:da:08:9d:
89:83:1f:bd:75:10:09:9b:72:06:a7:10:07:8e:76:
0b:0d:cd:ed:fc:80:52:60:cb:1f:e6:4c:d6:af:dd:
c1:c8:a4:52:08:3e:36:9c:4d:1d:fe:46:f2:e1:a9:
f7:9b:49:19:02:8d:d5:39:92:fd:d2:41:a5:ea:2a:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:50:42:5D:7E:38:7F:CB:B2:A6:05:3F:53:CF:7B:D3:37:1D:D1
X509v3 Authority Key Identifier:
keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2c:95:f4:5b:5a:54:c2:90:cf:c4:be:71:3c:d2:13:ee:75:
39:93:2d:e7:7e:4c:bd:05:66:cb:35:49:aa:79:6a:1a:82:0f:
59:58:26:c4:d1:b3:c0:04:87:11:82:34:a1:26:fd:33:d5:fd:
47:de:f4:41:2e:b3:88:17:3c:7f:51:6a:85:54:e3:6c:c3:9e:
69:f8:75:b3:4f:5e:d4:fe:b3:67:db:93:b0:fc:bc:b8:e9:50:
6f:93:b1:b5:ae:63:5a:4e:84:5a:c0:7d:a3:1a:86:ac:2b:99:
83:16:04:55:4e:4d:f8:0b:a1:89:74:5d:0c:16:1a:2d:92:f2:
e6:f6:60:16:ac:ba:d5:58:96:42:a2:8a:81:25:32:71:21:18:
14:c2:b0:9e:bc:7b:09:e4:12:83:28:cf:f2:0b:e1:d9:e9:9f:
99:61:02:4d:c9:3e:45:7b:4a:6e:f2:68:91:9f:80:b2:25:76:
7d:14:36:5d:d4:72:a1:23:8b:d6:24:c0:04:68:f8:cf:0e:aa:
90:a1:fd:f0:d9:14:40:79:88:73:a0:7f:dd:e9:d3:87:ca:db:
52:1f:53:a0:7f:37:fb:a9:93:d8:3b:5d:72:35:ef:1d:d9:65:
13:52:66:07:88:1c:61:f5:dd:d6:2c:93:1a:9c:80:eb:63:18:
94:82:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:29 2025 by rpki-client