Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: tfvmIS5uJG5oipaM9iW05ij8KvThDZYeOTdjO3CoWFg=
Subject key identifier: 71:35:E8:8E:9F:DA:2A:40:60:B8:58:9B:CC:19:D7:4B:D4:38:F3:0C
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 0198974A5097C69E0840E23F42F9B86E1E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 0F80
Signing time: Mon 11 Aug 2025 04:01:26 +0000
Manifest this update: Mon 11 Aug 2025 04:01:26 +0000
Manifest next update: Tue 12 Aug 2025 04:01:26 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: H0srEnnHSl/Qo0McyVIErbm7IuLcg0m7je3roMbw1BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:50:97:c6:9e:08:40:e2:3f:42:f9:b8:6e:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Aug 11 04:01:26 2025 GMT
Not After : Aug 12 04:01:26 2025 GMT
Subject: CN=7135e88e9fda2a4060b8589bcc19d74bd438f30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:46:4d:f9:d8:13:ca:45:18:84:79:fb:54:
15:96:96:34:b6:31:cb:21:d1:c7:da:80:bb:13:03:
e1:e7:f5:3a:df:a1:0c:1a:01:b7:24:b2:f4:6b:b8:
6b:e7:72:9e:6c:49:8d:21:2b:1b:f4:09:06:2c:25:
e4:0a:dc:d0:2b:c8:72:79:96:24:4a:99:60:cf:7a:
25:1a:89:11:c9:b2:c2:80:49:53:c4:a1:2f:0b:69:
cd:11:55:bd:25:86:d7:25:dd:72:a2:fe:ea:b7:c7:
76:5e:a2:79:4e:d4:37:5e:8d:7d:36:c7:93:c9:72:
6b:85:7f:5f:ee:2b:51:09:aa:9c:ac:ff:f8:ee:6c:
1e:66:35:9b:60:af:46:60:35:37:a0:fd:96:c1:98:
b1:26:e8:d7:d3:dd:6f:f0:7b:ad:a4:c6:62:eb:21:
8f:2f:11:2d:e9:7d:7e:08:b7:53:b8:1c:5c:95:e8:
51:87:d1:85:e6:fc:da:94:61:69:6e:e1:4f:a2:07:
6e:0b:e5:a7:cf:69:f1:54:c0:51:ff:a1:7c:8e:cb:
90:b6:1e:44:52:ac:29:ad:39:02:66:96:3d:9e:d0:
46:67:b6:9c:aa:90:8e:37:0d:ec:fa:6f:13:34:9f:
10:fb:31:d7:73:f2:2e:0e:98:55:54:d7:5d:79:aa:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:35:E8:8E:9F:DA:2A:40:60:B8:58:9B:CC:19:D7:4B:D4:38:F3:0C
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ce:27:d3:77:6e:3d:62:ff:c9:97:e4:07:b1:8e:40:b6:44:
40:05:da:a6:07:a8:4d:9d:c4:68:02:b1:8f:54:cf:d2:2c:c9:
a5:b6:88:e7:d8:92:32:25:40:1d:49:28:68:85:1f:d1:e0:15:
5f:a5:ba:f7:b9:06:f3:18:1e:3b:0c:d7:0b:6f:37:1c:64:1a:
51:05:03:22:cf:f8:8e:73:67:8c:81:df:44:b9:27:67:eb:03:
b5:5e:e3:a1:f3:1c:c5:4c:45:2a:62:36:70:74:86:f2:4f:c3:
b8:30:5c:fd:70:fc:2a:b5:c6:bc:4d:07:a0:5c:30:a2:23:f2:
13:42:dc:30:b6:90:e2:2f:51:b5:11:16:ef:8d:0c:52:26:0c:
f5:2f:05:3b:6c:13:08:c9:6f:7e:3f:6b:bc:38:aa:bb:b9:6d:
32:a4:76:ae:5d:fc:9f:22:71:0b:53:1c:70:89:6a:5e:46:6f:
64:5b:f9:9a:ac:30:86:b8:4f:9f:0c:1a:11:83:f5:3b:12:fc:
9d:45:14:e2:64:d4:39:82:49:8c:7a:1a:6e:d3:0d:51:79:7d:
49:02:c8:98:1e:bd:1c:da:1c:55:41:04:28:67:e2:20:88:b3:
18:6c:7c:a1:b9:26:df:29:b1:5a:a7:9a:55:47:7d:c2:73:a4:
07:eb:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:13 2025 by rpki-client