Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: KvEoh0H5XYy3s+zTyH2p8nHpmkCraHG2fGS2Nrkgjg4=
Subject key identifier: 3E:60:3F:04:67:6F:FB:7F:75:39:C0:5F:9C:B9:54:6A:F4:50:08:15
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 01988E46CBAB532D4876047FECD65BE55BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0C51
Signing time: Sat 09 Aug 2025 10:01:01 +0000
Manifest this update: Sat 09 Aug 2025 10:01:01 +0000
Manifest next update: Sun 10 Aug 2025 10:01:01 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: nV8lWgBwzKkApx8OjibsjfY4k9BBvxpNDpo2EzMG0eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:cb:ab:53:2d:48:76:04:7f:ec:d6:5b:e5:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Aug 9 10:01:01 2025 GMT
Not After : Aug 10 10:01:01 2025 GMT
Subject: CN=3e603f04676ffb7f7539c05f9cb9546af4500815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:11:cc:34:2b:16:59:f0:63:19:63:c8:86:
70:7f:c0:fe:d7:2a:fb:b0:bd:8d:ed:48:f4:f1:49:
de:a9:e8:3a:b3:04:14:0f:4f:d9:7f:b4:14:d2:46:
fb:44:3c:cc:92:3b:28:33:2a:89:34:e4:64:73:52:
32:16:82:ba:1f:5b:5e:c1:df:a6:71:94:bc:df:4d:
91:65:74:c8:f0:91:df:49:50:f0:8c:2b:cb:a8:1f:
49:94:54:52:cd:26:90:35:40:90:3e:b9:96:62:61:
89:38:a9:d2:95:45:d9:85:8e:77:78:c8:17:18:ec:
30:c3:84:f1:9b:71:37:66:82:f4:bd:4d:38:04:2d:
56:37:c7:0e:05:5b:31:ca:35:9d:ef:16:5e:e6:5a:
52:49:09:9a:3a:13:47:9b:5e:2d:a8:1e:bc:b7:9e:
41:5a:97:49:42:c0:e3:f4:b8:e2:58:c8:9c:69:02:
3b:30:49:3c:15:13:f9:a0:7f:99:dc:f0:ff:0c:6a:
7e:11:e2:f5:46:fb:74:c7:ed:e6:71:01:06:18:5c:
ec:72:4b:be:54:97:22:34:0b:36:58:bf:21:ea:dd:
32:91:e9:35:38:9d:33:09:70:81:5e:ed:36:39:94:
09:f1:7a:db:df:a7:ab:33:21:e2:ab:4e:30:12:be:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:3F:04:67:6F:FB:7F:75:39:C0:5F:9C:B9:54:6A:F4:50:08:15
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b0:5b:e3:4b:c2:0c:9f:6b:98:0d:53:ad:74:6d:ff:b3:5e:
c3:54:45:ea:a2:82:64:7e:a6:6a:29:36:3d:58:88:54:8d:c7:
c2:77:83:14:0c:46:92:59:20:bc:e0:18:73:7e:11:62:5e:c5:
bf:52:a1:0b:af:41:ad:5c:ec:e1:5c:70:c1:50:d0:89:72:45:
a3:a0:85:b3:db:59:cc:ae:ad:67:2e:c4:6f:4d:fe:d5:88:a3:
fd:8c:25:92:d7:89:44:50:a6:be:b9:2c:79:7c:ae:06:a9:04:
63:76:ea:66:ee:80:eb:e4:34:64:46:9d:ac:4e:2b:4f:78:ee:
46:4c:d8:a9:d8:42:8f:1d:89:0d:03:d6:70:07:d1:91:8d:ff:
7f:b0:90:7c:72:88:24:fb:e2:aa:bf:50:2b:54:72:64:c2:7f:
d0:6a:42:ec:4b:f4:d4:2f:0b:d8:85:25:ba:62:e2:85:76:b2:
f3:d6:65:7c:61:77:1b:d1:69:51:b7:d3:1a:5e:9b:dd:8a:fd:
df:17:d0:ad:43:d2:5b:f2:ad:ad:98:f6:88:c6:83:3b:2a:da:
79:4d:6f:66:54:02:30:70:37:7d:2c:cf:c2:33:c2:60:24:4b:
3c:81:17:2b:07:ca:56:b9:1a:4d:7b:05:7f:6e:99:ce:e9:b0:
39:5d:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:02 2025 by rpki-client