Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: 9rmDgZm8tTwGTDCfxK4IpOiUzoYdh8oA4egHKeGmc+M=
Subject key identifier: 2B:2D:9D:88:C1:E3:28:6A:FB:8C:0F:74:63:3D:31:CD:C9:81:46:0F
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 01988FC764EB5D55B6C588AD54184DA909A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 11CA
Signing time: Sat 09 Aug 2025 17:01:06 +0000
Manifest this update: Sat 09 Aug 2025 17:01:06 +0000
Manifest next update: Sun 10 Aug 2025 17:01:06 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: F0bv6Z/eI5+PIJ4hnaDNPqEBYbEHquLWdqEMBlngOKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:64:eb:5d:55:b6:c5:88:ad:54:18:4d:a9:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Aug 9 17:01:06 2025 GMT
Not After : Aug 10 17:01:06 2025 GMT
Subject: CN=2b2d9d88c1e3286afb8c0f74633d31cdc981460f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:65:00:8c:48:11:ef:56:4d:44:12:3c:8e:
bd:db:1e:6e:cc:72:99:e5:f5:59:82:e4:94:b8:b5:
5d:b6:47:a7:03:73:a8:6c:69:07:56:ba:36:7f:ad:
0d:89:04:23:08:96:14:b6:9c:f1:f8:08:0f:dc:39:
13:2e:b9:0e:25:ee:2e:99:92:78:36:41:66:14:91:
a1:67:00:49:6b:9e:85:8a:ac:56:71:cd:38:74:6f:
55:9f:d6:20:12:1a:41:ce:15:36:66:e7:33:de:dc:
cc:4c:02:bb:ba:f5:c7:77:67:46:8f:eb:61:73:c7:
e8:31:85:2a:0f:3e:82:57:5a:e7:59:86:98:2a:72:
79:63:6f:cc:41:22:f4:d6:e5:82:ab:1a:06:7c:47:
9e:99:7c:78:b2:19:84:18:8d:55:6f:85:be:b1:f0:
c4:68:ee:b9:e3:74:22:1f:19:ca:31:bf:d1:1e:2d:
ab:53:b3:78:2b:20:6f:e0:aa:16:9e:b4:bd:30:a0:
a7:85:bc:43:46:f8:87:c1:f8:f7:eb:68:3d:cc:65:
c7:51:c0:97:73:de:c9:b2:8e:c5:ce:fc:5b:be:05:
34:66:20:6e:27:e8:5e:9d:2e:24:65:19:71:d8:ca:
4f:b5:5e:a7:7d:c8:1e:25:ff:14:c8:f4:c9:01:f3:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:9D:88:C1:E3:28:6A:FB:8C:0F:74:63:3D:31:CD:C9:81:46:0F
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fe:1f:44:4f:19:8b:03:00:9e:f7:89:be:30:3d:86:c1:a1:
75:e4:c5:62:59:b0:e3:03:52:ea:e3:f8:93:bf:1d:4f:97:9e:
14:d2:bc:56:d8:92:11:04:33:2e:fc:be:62:f3:5c:91:c8:0f:
64:c6:40:78:11:32:e7:bc:36:91:76:bc:0a:8d:13:3c:14:cb:
7c:a2:3c:84:f3:2a:fb:11:bc:62:70:95:d2:7c:b1:0b:aa:1c:
b9:10:8f:8a:20:a1:78:ae:b1:4b:77:51:4a:08:ac:3d:56:3c:
9d:0e:03:bf:b1:fd:46:19:50:bf:32:27:bd:17:1b:99:a7:e9:
5b:c6:74:e0:39:1e:d7:dd:78:6e:57:38:ea:f6:4b:6a:eb:b5:
af:8b:f1:fc:08:05:50:41:cd:e9:0b:e0:06:1b:72:c1:51:df:
ad:97:ce:52:16:6e:c3:7b:04:69:a1:6c:6d:fd:6b:18:85:01:
71:94:01:0d:83:d5:a0:a8:49:35:57:cc:d8:f2:65:69:2c:1f:
4c:74:fa:82:80:7f:96:d4:d2:dd:35:17:80:21:7b:d6:53:81:
42:e2:bf:63:34:1a:52:de:0e:3d:e3:d8:a4:72:cc:0d:d1:e6:
73:b3:15:bd:10:58:06:d5:a8:95:02:d3:bb:50:17:d1:f1:d8:
27:8b:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:34 2025 by rpki-client