Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: nry2bzXDJQqp6egsBFKIv516xs9sEXyH1MrAB97NuGY=
Subject key identifier: D8:3E:1A:AA:9B:6B:58:DE:1B:B1:5C:EF:D1:70:14:26:FB:25:71:F6
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 019896A5FA3E756E553BC391B4F927171F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 0643
Signing time: Mon 11 Aug 2025 01:01:56 +0000
Manifest this update: Mon 11 Aug 2025 01:01:56 +0000
Manifest next update: Tue 12 Aug 2025 01:01:56 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: wRqYzd1i5bl2YXB1PBD5QaNtAPs4XDJfNNiDkorrv9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:fa:3e:75:6e:55:3b:c3:91:b4:f9:27:17:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Aug 11 01:01:56 2025 GMT
Not After : Aug 12 01:01:56 2025 GMT
Subject: CN=d83e1aaa9b6b58de1bb15cefd1701426fb2571f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:15:70:c7:a6:b4:70:88:66:d0:19:97:a5:
5d:56:e2:24:08:00:85:06:99:e7:74:c4:32:f8:60:
af:a0:38:ca:fe:26:56:00:7d:e8:06:ec:95:12:b5:
84:78:5d:a5:d0:8a:46:49:b8:5c:12:ea:65:59:09:
42:17:96:ec:be:72:60:91:25:ee:01:0b:9e:a4:37:
c0:33:df:63:aa:75:94:d3:51:c8:8c:4a:06:3f:f0:
f8:c1:c3:25:dc:ea:d5:08:63:b4:9b:d8:6f:a5:1e:
a4:cc:8a:31:80:05:8b:83:7d:c4:08:a5:79:d9:76:
7e:ca:04:1e:98:8e:46:5f:83:e4:31:11:08:40:45:
c3:89:dc:6c:70:7d:0a:8b:7f:a9:cb:48:1c:dc:43:
99:24:01:09:e3:c9:bb:4e:64:cb:6b:2c:66:e9:10:
61:3d:96:16:75:af:af:b7:e3:7d:e8:4e:c9:40:73:
ca:5c:22:12:ae:f0:44:19:2f:c3:4a:3a:bb:2d:4e:
00:26:89:38:75:7c:b3:9d:96:dd:cb:c0:57:20:3b:
12:d3:d8:de:69:6c:d6:5a:85:a3:0c:84:16:8f:93:
db:98:56:2c:f8:53:71:23:49:a4:5f:af:45:69:fb:
cb:30:1b:00:f3:04:69:90:8d:7e:c8:d4:a6:0e:18:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:1A:AA:9B:6B:58:DE:1B:B1:5C:EF:D1:70:14:26:FB:25:71:F6
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:16:d8:e6:e9:61:f7:7c:25:a3:96:eb:55:92:63:96:32:35:
23:4d:39:56:7d:f8:79:5e:c9:fd:af:d2:78:40:67:6d:68:60:
b8:53:79:9e:f6:02:ed:59:3a:12:6e:10:10:16:7f:e7:c0:99:
f2:69:73:9d:4e:56:09:3b:7e:8c:5e:0a:6d:06:9c:35:01:8a:
ed:34:ea:1e:f2:18:0c:0c:16:d5:b5:aa:d5:e5:c9:62:d6:0b:
b7:e0:5d:be:59:bc:25:a9:25:cb:33:87:27:d0:61:d9:30:2d:
ff:d5:cb:c4:5d:57:63:11:6e:a4:40:fe:99:b9:3d:17:c4:ca:
be:3d:8f:7b:57:3e:62:ba:00:3c:4c:ed:ee:04:ff:49:68:44:
b3:b2:2c:2d:77:f7:1d:a7:74:bc:5a:25:ec:db:91:6c:dd:98:
bf:5e:f6:82:3c:cb:11:8b:ff:4b:79:e8:e9:d9:e4:86:84:0e:
13:8f:68:9c:4d:67:e6:71:2a:9d:1e:82:70:80:c5:85:88:9a:
1d:3c:5a:c8:77:37:9f:bc:98:0b:bf:db:13:49:93:1d:97:5b:
16:17:56:d3:5c:f7:49:89:84:be:b1:65:c5:74:bd:af:5b:30:
65:fa:ca:cf:83:33:b2:8d:16:da:75:f9:e9:f2:27:6f:a0:46:
de:44:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:31 2025 by rpki-client