Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json)
Hash identifier: 2o4nacgij8ADW6tATTAxZzFWe7dgSUQD/xizrXuwCas=
Subject key identifier: 4C:CD:02:87:6D:DE:54:BB:32:FD:54:DF:69:2E:B7:73:6C:E1:47:9E
Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c
Certificate serial: 01988E0FCB174B82D52C4C36F5AE65CD2F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
Manifest number: 0144
Signing time: Sat 09 Aug 2025 09:00:56 +0000
Manifest this update: Sat 09 Aug 2025 09:00:56 +0000
Manifest next update: Sun 10 Aug 2025 09:00:56 +0000
Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: J0cFiLAmVGlf8dvDyiageu+wqpns7byV0rx9L26AEjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:cb:17:4b:82:d5:2c:4c:36:f5:ae:65:cd:2f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c
Validity
Not Before: Aug 9 09:00:56 2025 GMT
Not After : Aug 10 09:00:56 2025 GMT
Subject: CN=4ccd02876dde54bb32fd54df692eb7736ce1479e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:48:61:f8:c4:fa:d1:10:00:f5:3f:e4:3a:
43:f5:60:d8:19:fa:83:99:53:1b:fb:bc:4d:f2:d7:
f3:50:4f:ca:02:27:08:70:1f:b3:c0:e1:53:a8:88:
1b:d0:9c:e9:4b:f7:20:05:5a:54:fe:93:93:d2:0e:
f0:ce:92:39:ee:1a:4c:c2:98:06:a0:fd:1a:70:22:
87:ed:09:3f:e9:44:1f:84:bf:1a:78:6d:e0:3f:4a:
61:18:00:80:95:6d:1f:23:4c:c7:25:5b:be:62:a9:
43:c8:71:0f:82:f9:03:d9:b7:ea:4a:15:bc:e0:31:
15:5f:15:da:f5:04:c8:b7:3e:3e:b3:cd:c8:9f:6a:
4e:79:7e:46:53:72:ea:18:ce:64:09:5e:88:56:d6:
d0:86:ae:20:17:c1:36:09:c0:33:4e:22:39:94:6c:
5a:8c:4f:bd:65:e9:23:7f:c7:04:b5:5e:ce:4c:d9:
48:78:14:25:5b:8d:e9:28:6c:5b:65:39:bd:d7:3b:
4e:05:84:3c:d3:8a:fc:cc:93:cd:ac:35:9a:3b:58:
16:d8:14:b9:d5:ff:b6:90:34:5f:a3:10:24:e5:50:
5e:33:46:65:87:6c:97:38:33:a6:13:04:3c:b9:25:
f3:d0:00:95:9f:a6:f1:87:83:37:48:55:04:05:e0:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:02:87:6D:DE:54:BB:32:FD:54:DF:69:2E:B7:73:6C:E1:47:9E
X509v3 Authority Key Identifier:
keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:b6:1d:f1:bc:8b:64:a6:dd:d7:2f:3f:26:f3:7c:86:d6:
f7:23:b0:e7:2c:59:17:8b:16:d4:81:52:3d:e3:56:ac:71:70:
96:22:63:c0:3c:e0:0d:65:f6:06:80:5b:21:3b:d3:20:15:4c:
b0:03:91:4f:b0:2e:30:87:20:a6:ea:bc:73:40:3d:ce:d1:e2:
d4:0c:06:27:86:d5:e5:bf:8e:5d:b7:70:0f:8d:df:b6:47:76:
7b:a9:08:ec:79:3c:c4:78:e0:a4:3b:fb:b9:a9:31:5e:4c:e8:
ca:45:48:2d:a7:b9:af:11:19:93:7d:20:de:88:9a:8b:df:fb:
46:8c:ab:3b:46:c4:78:00:b9:59:d4:ed:b5:33:b8:e2:19:4d:
50:58:96:67:80:68:4b:d0:59:13:65:05:9e:5f:a4:a7:ec:79:
f8:d2:f6:2d:cf:f9:87:06:2a:98:b9:a3:79:2e:8a:46:4a:b7:
1f:c0:00:f1:6f:64:65:19:bb:2e:a7:0d:ef:a4:0e:61:65:04:
6d:d2:69:29:d8:af:b4:66:de:7d:6b:1a:d6:e6:bc:ff:5b:7d:
40:fe:2d:20:61:9c:86:d6:3b:2a:27:0d:89:0c:ae:b4:23:88:
63:eb:48:19:c9:e4:db:10:e5:9b:6c:c2:9c:11:8f:ce:1d:76:
e2:a6:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:31 2025 by rpki-client