Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier: gamOG9x2N85cGqWIiSJ+bCzAsB2PfGmKwxzZapabDL8=
Subject key identifier: FA:B0:0E:B1:C0:D2:F9:F5:C2:D8:FA:80:D4:97:FA:92:7B:4F:BF:F1
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial: 01987418F56633EC353199C0B59C998BC7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 08:00:49 +0000
Manifest this update: Mon 04 Aug 2025 08:00:49 +0000
Manifest next update: Tue 05 Aug 2025 08:00:49 +0000
Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: IUJFkNgdUB44H8e4mMACaZaLdJmrk/CbnvBGtxa/Vvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f5:66:33:ec:35:31:99:c0:b5:9c:99:8b:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
Validity
Not Before: Aug 4 08:00:49 2025 GMT
Not After : Aug 5 08:00:49 2025 GMT
Subject: CN=fab00eb1c0d2f9f5c2d8fa80d497fa927b4fbff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:63:34:2a:e2:e2:c2:2b:10:76:4c:5d:d4:
72:5a:02:df:8f:1e:bd:3e:88:67:f8:74:07:52:43:
88:ba:4c:ea:a7:55:24:35:53:45:6f:17:57:3f:ea:
54:6e:ae:18:0e:6b:de:3c:fc:9f:0e:b7:cd:2c:8e:
68:fe:41:c4:27:6a:63:93:a7:43:80:cf:d1:4e:c4:
3e:54:ff:4a:94:0c:a1:1b:04:7b:c9:cf:2c:8e:67:
ca:13:8a:9e:48:c0:33:82:a7:90:5f:94:72:37:22:
43:e9:26:a9:89:93:9d:f5:3c:20:06:ce:40:02:35:
0f:10:58:b7:03:f1:05:38:86:a6:7e:f6:06:67:6a:
e2:c4:96:54:da:e4:45:31:05:97:46:9b:0e:db:6b:
57:c5:89:e7:c9:22:60:df:81:35:6a:5d:44:fc:f4:
1a:61:1a:ec:f6:5e:df:3b:3c:78:e5:f7:ec:74:af:
d6:64:91:e3:47:28:58:57:e1:8a:91:e9:71:75:fe:
e8:a9:d3:d6:69:c3:03:73:26:22:5d:60:cf:47:06:
07:e8:0b:d2:89:74:89:b3:8f:cb:93:04:af:96:ac:
f8:8d:ab:f3:ad:ad:61:17:95:09:8b:a8:72:71:a6:
64:16:3b:df:35:36:6d:1f:6e:d1:56:c0:b6:0f:f4:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:0E:B1:C0:D2:F9:F5:C2:D8:FA:80:D4:97:FA:92:7B:4F:BF:F1
X509v3 Authority Key Identifier:
keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a5:f6:b5:14:ef:56:75:44:eb:1b:08:33:85:03:31:76:e1:
2c:1e:95:52:69:b7:85:63:e0:f1:71:b5:40:8a:ad:74:ed:da:
a7:32:a5:2e:15:b7:58:92:b4:f1:1e:d2:f0:84:9b:b1:25:c8:
53:fa:c5:70:bd:87:17:85:54:30:3c:41:2d:ef:fa:4b:c5:60:
d5:75:7c:50:0a:fe:9e:b2:17:b3:4f:aa:97:6f:6a:e1:65:66:
b3:45:70:d1:61:34:66:aa:19:4f:b0:65:04:1b:5d:9e:c6:d0:
43:cc:a4:0f:54:65:e2:47:b9:6e:13:9a:c8:7c:94:1f:b9:86:
f3:72:b9:e5:0c:a1:ce:06:82:df:81:0b:50:1a:63:0a:87:9f:
ae:3b:e3:1a:cb:8a:94:ea:4f:db:8f:d1:1c:a7:65:01:94:11:
6e:85:65:f4:5e:08:9c:28:55:63:15:17:ec:3a:d0:b8:f8:23:
b8:d3:50:29:b9:3a:2d:43:ce:0b:b9:fc:a0:df:8e:4b:20:e2:
8f:2b:98:18:d0:eb:c8:fa:8c:d9:7b:47:b5:6e:47:a8:87:d2:
6a:b5:ef:35:bf:46:eb:a8:e8:16:d7:19:1a:e8:17:89:aa:0b:
e8:37:6e:8b:8c:05:f9:89:00:99:a5:fd:b5:f9:57:08:e4:f6:
ad:0b:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:36 2025 by rpki-client