Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: O5dEy2+6KZFD7HTwfSzaKyM3mgl+p6TRMFtUEu+iGvc=
Subject key identifier: 6C:B9:DE:D3:1C:54:DA:44:81:24:B2:49:58:0D:62:C7:EB:D4:D8:D4
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 019892C7D311E1C1ED565F773EF860454555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 0273
Signing time: Sun 10 Aug 2025 07:00:25 +0000
Manifest this update: Sun 10 Aug 2025 07:00:25 +0000
Manifest next update: Mon 11 Aug 2025 07:00:25 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: fbn7fwju93M+mVZVt7MnAT1RfR2ClyMbR9bVRQaPFl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:d3:11:e1:c1:ed:56:5f:77:3e:f8:60:45:45:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Aug 10 07:00:25 2025 GMT
Not After : Aug 11 07:00:25 2025 GMT
Subject: CN=6cb9ded31c54da448124b249580d62c7ebd4d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:bc:85:3f:56:bf:41:39:af:e6:08:88:e9:
28:9c:24:d7:d0:c3:55:8d:dc:e0:53:68:97:2d:96:
2a:4a:84:4b:1f:f9:3a:fe:d7:5a:34:7f:48:2d:3b:
a8:31:b9:67:45:df:89:6d:8a:37:0c:34:27:bc:c9:
b1:de:e0:03:2a:2b:b9:60:c8:e3:26:cb:bc:76:7c:
5d:9d:35:2a:c5:06:00:be:94:31:c7:e6:2a:f5:2f:
db:56:24:56:e1:7e:e5:46:91:7a:d1:04:cc:08:56:
46:91:af:40:e1:50:19:5a:e5:87:05:da:9e:67:32:
47:ff:9a:a3:8e:07:80:cc:3e:02:76:a2:f6:cc:4e:
fa:87:55:2f:2d:3a:dd:f6:71:ab:61:68:89:c4:14:
9e:e5:06:6e:0d:e0:39:7c:cc:ab:31:67:88:6a:0a:
9e:cd:4b:89:a6:af:4c:c6:f8:d2:97:ee:4b:53:da:
41:30:43:c9:06:02:30:19:1c:c5:72:ee:15:7d:da:
02:57:9e:3d:7b:db:7b:5b:b6:35:76:16:97:3d:c2:
57:8b:e6:9d:6e:32:ab:20:fd:d6:99:7f:68:8f:1f:
35:62:ab:57:32:c5:6a:d9:cf:79:28:81:88:26:6d:
15:fd:57:8d:3a:4e:62:b2:0e:f9:bf:56:5b:94:90:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:DE:D3:1C:54:DA:44:81:24:B2:49:58:0D:62:C7:EB:D4:D8:D4
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3a:e0:e4:b6:d4:90:4d:8b:fc:54:ae:a1:a3:59:21:13:62:
09:f8:8e:0b:8b:1f:db:0c:54:13:81:1b:b1:83:83:37:29:c9:
95:f5:bd:1a:a1:dc:06:97:cc:43:31:2f:1e:03:5c:8e:ce:46:
02:04:fd:39:3f:74:7a:e8:21:e9:d9:17:00:92:dc:bc:ac:43:
81:13:ee:5e:ef:cc:99:8a:ac:fc:e8:38:36:17:cb:44:05:59:
ba:e4:f4:a2:48:90:80:1b:8e:b2:bc:f3:45:3a:2d:ac:d4:a2:
dd:be:eb:20:4d:fc:85:6b:10:55:41:2e:37:f6:9b:b2:b0:96:
c9:a6:45:c6:09:ef:a1:c5:7f:9e:f4:b3:ca:71:f1:bd:2c:bd:
d9:b1:1e:57:93:74:1b:69:c2:1d:a3:bd:b5:14:81:d3:4a:a5:
37:17:7b:88:41:e7:c9:68:23:cc:6c:71:e0:96:4b:b4:aa:06:
6b:ed:0f:0a:d2:5e:70:e1:8d:0b:ea:34:eb:1d:a4:ac:32:49:
87:1d:5f:92:1b:a8:7a:c9:37:16:39:00:07:97:2a:b0:08:ed:
d3:c6:18:06:54:50:5b:bc:6f:79:6d:5c:a9:08:bc:f7:7f:c7:
44:85:97:00:b8:32:9d:e1:2a:75:c2:34:37:d3:b3:8e:0a:25:
87:83:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:49 2025 by rpki-client