Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File: wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier: YFdXS6Fe6DZBJH6M0xxzywDWYSyNZe5Hjo+U5/rcJyU=
Subject key identifier: 4F:06:26:D5:AD:91:8C:AA:9A:C1:F6:64:5C:11:A5:88:1E:B3:D5:65
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer: /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial: 0198906C3F6EC3D5C0AC34F92F669C4C9436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number: 0502
Signing time: Sat 09 Aug 2025 20:01:09 +0000
Manifest this update: Sat 09 Aug 2025 20:01:09 +0000
Manifest next update: Sun 10 Aug 2025 20:01:09 +0000
Files and hashes: 1: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: I7WIoarj1elwxODqufhbnsMN/s2fmKDD6GDNZ4LlToQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:3f:6e:c3:d5:c0:ac:34:f9:2f:66:9c:4c:94:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Validity
Not Before: Aug 9 20:01:09 2025 GMT
Not After : Aug 10 20:01:09 2025 GMT
Subject: CN=4f0626d5ad918caa9ac1f6645c11a5881eb3d565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:0f:df:4c:71:0a:a4:d3:43:74:42:1d:b9:
97:e8:d7:64:6d:86:76:ae:c7:57:0d:20:33:9c:41:
cd:cf:41:38:e0:30:b2:85:cf:b3:40:3f:bd:b2:dc:
5e:cf:23:db:95:a9:f6:c7:82:c1:ae:43:03:62:a2:
0e:b5:e0:5d:9f:f6:27:43:db:6e:4c:f5:93:dc:61:
13:68:2b:b5:e4:2e:6e:a5:77:95:cb:96:ff:59:4c:
84:4b:75:66:ce:9e:ae:f9:48:5b:80:d4:60:37:51:
e3:be:ff:d1:b6:a1:55:7e:43:18:14:04:0b:de:bb:
33:03:e9:c5:83:b3:86:37:be:94:ec:44:ea:40:91:
45:d8:ce:59:da:9f:4d:38:c1:0d:34:b8:68:3c:72:
f9:49:71:a1:1b:cc:06:ef:68:17:61:14:49:06:7f:
a6:1a:00:88:80:7c:46:c4:f9:16:f3:88:c6:a9:c1:
ad:be:76:fa:07:43:be:f8:1f:a5:2d:eb:0f:e2:ee:
2e:1b:c6:1a:58:6b:62:70:29:0b:c6:27:fb:fb:45:
d0:18:67:7a:44:54:e1:96:4b:e9:73:7c:6d:5c:85:
ee:b5:09:22:12:c6:22:8d:4f:f0:8c:b9:8a:b4:88:
62:9e:4e:61:70:25:a8:2d:36:db:40:80:39:96:c4:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:06:26:D5:AD:91:8C:AA:9A:C1:F6:64:5C:11:A5:88:1E:B3:D5:65
X509v3 Authority Key Identifier:
keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fb:c4:11:56:83:5e:ee:2d:50:2e:69:a7:3e:8b:36:93:65:
4f:86:75:3c:0a:a8:ca:80:63:ec:b8:19:3f:4f:df:c1:df:b7:
b3:db:aa:3c:c0:5b:9c:4f:b1:be:9f:39:b8:f3:1d:3a:59:25:
7e:7d:73:1e:ad:0a:0b:ab:f3:c7:ba:2f:16:26:26:63:db:fc:
5a:da:c6:bb:2d:fe:ab:a6:57:67:3b:cc:af:5a:28:99:80:63:
dc:52:93:c1:10:99:9f:d5:a1:55:82:a6:be:16:df:95:b3:49:
ba:a8:3f:64:52:c7:cf:4a:53:5a:87:94:45:f3:26:0e:c6:d6:
c4:70:36:4b:81:23:d0:03:8d:3b:28:d8:a7:e6:04:92:11:9c:
29:87:3f:5b:88:d8:2c:ee:c4:81:8a:82:f8:4f:a1:e6:6f:76:
0f:96:be:5c:e0:6e:69:02:e5:ce:9c:1f:ed:9f:8d:6d:52:b2:
f6:a7:cf:de:9a:5f:9f:ab:2e:d5:1d:b9:b6:a6:90:43:75:9c:
53:1a:a1:68:f1:66:cb:67:3e:98:b7:fa:ce:e5:eb:5c:ec:4b:
2a:59:83:71:29:25:41:84:b9:60:10:09:6f:11:46:4f:cd:f7:
8f:64:a6:a0:2f:30:78:ca:0f:f5:53:c8:47:18:6e:2e:ac:fb:
64:f2:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:15 2025 by rpki-client