
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
File: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft (raw, json)
Hash identifier: p7ikeb82JB2zsKvwIXr5W1J2ES5rk0FkTQ9KE8mzmL4=
Subject key identifier: D9:F8:EC:4E:53:1C:9E:6C:9E:D0:CE:53:7F:3D:B5:34:72:53:63:27
Authority key identifier: C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
Certificate issuer: /CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Certificate serial: 019872CF1B63EAD0646B39B9AD11D898BB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 02:00:32 +0000
Manifest this update: Mon 04 Aug 2025 02:00:32 +0000
Manifest next update: Tue 05 Aug 2025 02:00:32 +0000
Files and hashes: 1: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl (hash: bB9EzE51nZRsPC0dTyiOLsSYM12ZTYvs/aQElYvkAR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:1b:63:ea:d0:64:6b:39:b9:ad:11:d8:98:bb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Validity
Not Before: Aug 4 02:00:32 2025 GMT
Not After : Aug 5 02:00:32 2025 GMT
Subject: CN=d9f8ec4e531c9e6c9ed0ce537f3db53472536327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:6d:6c:e5:4b:3c:22:ab:9a:d3:d6:f9:2e:
66:bb:88:ba:99:d8:3d:a2:e2:8e:a9:3a:e5:40:13:
89:a8:f9:11:39:6c:e7:9f:c1:99:93:86:b8:92:d5:
c6:6b:c8:7e:e9:a2:e3:40:e5:31:2b:29:ee:84:4a:
fa:5a:55:af:63:58:e8:92:ff:0b:e7:bf:f8:d5:38:
55:32:29:04:49:65:93:9c:0a:35:bb:3f:50:c4:e1:
03:84:e9:71:64:7f:db:01:77:f2:52:08:d4:8a:85:
6f:97:c9:1f:57:d9:3e:7b:6a:a8:d5:f5:f5:ed:3f:
a5:84:9d:2d:e4:18:f8:07:68:b2:80:b1:b2:51:ca:
b4:71:dd:d8:ec:30:13:35:fd:b9:25:3b:a8:15:43:
97:11:d1:4b:9a:f0:60:19:e7:2b:58:e1:48:de:5d:
23:29:fa:34:e1:46:3a:67:97:09:35:4d:04:21:c1:
43:83:71:15:97:90:df:f8:8e:b5:bf:3e:d0:5b:6b:
89:00:2b:81:7f:4d:b4:53:04:66:f0:26:81:6a:2c:
de:b3:bc:35:c9:82:0b:2f:bc:e5:c3:20:e1:86:ef:
45:9d:76:b8:d8:8f:f4:fa:55:84:f6:b4:5a:e7:a8:
8a:14:f2:20:c4:5d:6d:4c:9e:cc:7a:48:86:b7:2d:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:EC:4E:53:1C:9E:6C:9E:D0:CE:53:7F:3D:B5:34:72:53:63:27
X509v3 Authority Key Identifier:
keyid:C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:de:fd:17:3b:e1:de:2c:76:95:a6:c8:ec:90:3d:a9:b8:
ae:c6:60:ca:28:1d:19:e7:df:fe:e5:77:3d:ca:65:af:1d:b9:
1b:59:a9:ec:3d:f0:b6:7e:28:e6:cc:69:8e:50:c7:c5:fa:15:
ec:6b:71:07:d9:f3:d1:73:6b:8c:52:d6:4f:8f:f3:29:6d:3e:
67:59:d8:53:ec:78:a1:a1:35:15:29:8b:ca:4f:3d:2e:b7:dc:
82:b6:4a:68:73:1a:95:08:e9:53:33:96:53:9c:d2:99:ac:cb:
64:a4:0b:44:d8:14:81:80:f6:a9:30:6e:ac:56:0b:46:d2:7f:
59:23:4a:da:1e:60:21:37:e3:63:6d:a2:ac:3f:86:1e:d0:59:
28:fa:8b:20:5d:52:b5:8a:7d:99:29:aa:8d:d0:9a:d1:cd:00:
bd:d1:b4:57:a4:71:db:a1:59:74:ab:89:2e:aa:ea:99:87:06:
cf:c9:f5:60:88:fa:68:e2:e1:38:a5:88:b4:cc:63:06:3e:8d:
0c:0a:2a:1a:25:57:68:5f:0a:4c:88:8f:6a:63:76:41:a0:a0:
d8:c1:3f:54:f4:7c:00:1b:28:aa:c1:ca:0a:25:3f:30:65:b0:
5d:7d:dd:97:31:8d:71:a7:af:07:5f:57:40:cf:fa:bd:b7:81:
f8:8c:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:14 2025 by rpki-client