Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier: ms9VTaGQz5tI7VVomsdmU00m/qk4OLEKiD0H0QqTKf8=
Subject key identifier: A6:2D:99:7C:25:D1:54:45:2F:53:A8:1F:8C:0A:A0:D0:53:D8:57:FE
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial: 0198974A314A67B2D14FD4BEC4A404C124B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number: 1379
Signing time: Mon 11 Aug 2025 04:01:18 +0000
Manifest this update: Mon 11 Aug 2025 04:01:18 +0000
Manifest next update: Tue 12 Aug 2025 04:01:18 +0000
Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: eAbALthCiaRtKbL2b+CaurEVq+HDtEEGfanrz8B/l4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:31:4a:67:b2:d1:4f:d4:be:c4:a4:04:c1:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Validity
Not Before: Aug 11 04:01:18 2025 GMT
Not After : Aug 12 04:01:18 2025 GMT
Subject: CN=a62d997c25d154452f53a81f8c0aa0d053d857fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:bd:cb:89:93:fb:e2:5e:65:fb:81:9e:bc:
ba:1e:bb:a2:3e:58:13:d8:db:a9:9b:3a:08:ba:e8:
cf:ca:fe:03:da:8d:12:a4:f7:74:07:50:b4:0f:1a:
4b:8e:e0:e5:4c:e4:9d:7e:da:b7:85:d7:31:ae:44:
c9:f0:c1:9c:0c:c7:de:19:24:7c:32:68:11:af:ac:
be:de:d2:28:22:5f:87:22:3b:c9:6e:e2:ba:94:df:
3a:56:ea:0e:d2:35:24:2b:51:ca:85:21:7b:2a:6c:
d6:cd:37:27:a8:a4:40:bb:5f:6e:08:1a:83:f9:62:
6e:29:1a:b8:9b:36:2c:35:72:1e:3d:fa:d7:60:80:
90:f9:0d:a0:ab:79:c1:4b:7d:6e:d6:8e:3e:00:d3:
8e:d4:64:52:75:20:a9:38:18:1e:f6:b1:92:98:f3:
43:81:f2:5c:75:40:8d:b4:b6:75:2b:16:de:d8:e3:
cb:45:83:e2:ce:0a:77:8f:d9:a9:be:dd:01:38:4d:
a0:f6:7a:09:63:65:e5:a4:d7:f5:79:7c:a6:82:1c:
5a:02:86:ed:1f:27:e2:3d:cd:ce:5a:c5:98:7f:83:
2f:a2:e5:d7:22:a9:5e:05:2d:7c:10:b8:2d:33:46:
e1:9d:0b:18:ff:cd:81:1e:0d:ac:d3:db:f0:f2:52:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:99:7C:25:D1:54:45:2F:53:A8:1F:8C:0A:A0:D0:53:D8:57:FE
X509v3 Authority Key Identifier:
keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:72:3f:07:c4:5f:a7:ee:4e:d4:8d:ba:94:0d:b4:b4:39:bf:
93:a9:da:5d:46:a9:cd:94:67:b9:b0:60:4c:8a:b0:2c:92:67:
14:ce:3c:77:35:f9:f9:e2:88:ce:f8:51:bc:a9:9a:12:2e:8e:
84:00:36:02:df:1a:b9:d4:84:13:1f:09:25:dd:27:b1:b0:a0:
35:f8:eb:f7:ff:32:3f:dc:3d:b6:32:07:c1:c3:30:5d:5d:09:
e5:55:d8:d5:53:6e:73:b1:99:30:fc:0f:4b:52:9a:90:8d:aa:
3e:17:cc:a4:88:1a:b4:0b:1e:5d:eb:42:2f:00:94:48:76:77:
ac:bc:01:d3:24:1a:37:c1:3d:7d:82:98:6a:30:d3:49:73:54:
3f:b1:cb:5e:cf:85:17:d1:60:c7:3d:65:d2:b7:d0:08:81:94:
5d:53:43:a5:5d:fc:4f:a9:8b:03:28:35:42:5e:51:09:0f:65:
46:a5:73:69:5b:3f:06:bd:b4:23:d5:17:3a:e2:5d:af:e8:4d:
45:32:49:85:70:fa:63:22:67:79:1b:dd:4a:32:a5:d2:4c:15:
6a:74:bf:f1:48:9b:12:2a:9f:c7:c1:03:08:45:a2:be:f5:50:
ca:eb:9c:69:28:3e:df:55:05:bf:3c:40:7e:2e:51:67:8d:b6:
dd:67:8f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:00:50 2025 by rpki-client