Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier: 3uWb9Ntd8iIYqUWk/fnS681579zUFy+eMosgQc9ij6M=
Subject key identifier: A2:68:EF:8F:03:E8:D9:7B:2A:7B:49:16:1C:F6:B0:B9:4C:B6:D6:6D
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial: 01988EED172D7FC41C286CC98290E41E5385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number: 10CE
Signing time: Sat 09 Aug 2025 13:02:39 +0000
Manifest this update: Sat 09 Aug 2025 13:02:39 +0000
Manifest next update: Sun 10 Aug 2025 13:02:39 +0000
Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: uAngSYfi8cu9xQkGRI65iEfelJrqoGq6Ot07kca1g4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:17:2d:7f:c4:1c:28:6c:c9:82:90:e4:1e:53:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Validity
Not Before: Aug 9 13:02:39 2025 GMT
Not After : Aug 10 13:02:39 2025 GMT
Subject: CN=a268ef8f03e8d97b2a7b49161cf6b0b94cb6d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:0b:ed:a7:c3:56:fe:fb:03:61:1c:b3:ea:
ad:c7:0a:da:5d:1a:4f:d3:b3:d3:33:87:1f:a2:a5:
fd:a2:50:6e:6d:04:2c:f8:54:85:cc:75:95:ae:16:
06:39:01:3a:a9:d7:66:52:6c:0a:f1:0d:fc:ac:84:
6c:d1:56:de:29:9d:a2:00:e9:91:31:fd:fb:92:d9:
8f:fc:71:7b:53:48:58:ed:d5:72:cd:7a:27:46:d4:
3b:ad:12:18:a8:ae:72:1a:4c:2b:00:dc:9e:cc:08:
1a:55:8d:60:73:a7:f7:d5:a3:80:1b:0e:ec:8a:44:
ad:e6:d8:28:8c:14:53:ed:71:ce:61:38:75:ac:44:
8f:fd:cc:1a:ce:b1:9c:f2:0c:0a:92:0e:3a:01:0d:
db:e2:ae:5a:cb:d7:9b:f9:1c:46:36:77:24:33:12:
59:13:ed:3a:9f:44:c1:4e:a6:1e:e5:43:c3:ef:0c:
ee:44:a8:7b:0b:bc:c5:d0:85:29:92:23:e1:eb:5d:
1a:c6:63:39:89:ff:7e:a9:1b:a2:e1:92:ce:b4:f8:
df:c0:e2:a1:52:d4:38:cf:7c:03:63:7a:5a:c1:97:
ec:11:4d:0f:a1:60:48:b2:64:0c:e5:28:4f:83:18:
bf:30:c4:e1:63:b0:14:30:a7:aa:60:cb:a5:19:cf:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:EF:8F:03:E8:D9:7B:2A:7B:49:16:1C:F6:B0:B9:4C:B6:D6:6D
X509v3 Authority Key Identifier:
keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f7:cd:07:e9:ba:06:9d:50:c7:3d:1a:2d:cb:94:00:25:21:
3c:bf:cb:09:b0:aa:ff:ff:09:94:11:a6:e3:97:8b:9f:2b:13:
fe:8c:46:4b:36:a2:ef:90:3a:58:b6:de:82:f5:d7:33:55:eb:
e7:16:e0:70:1c:48:a9:93:ff:06:93:01:9d:85:62:71:3f:8c:
7b:71:90:2a:d7:eb:45:85:53:6c:c2:1e:11:ac:65:3d:75:4c:
df:bd:b7:dd:6a:1c:cc:5c:c8:a9:f8:8a:2c:f7:1a:13:e6:bb:
2c:b4:47:42:3a:90:c1:eb:a4:2b:2a:59:65:19:e0:c8:0d:a4:
32:2e:49:7e:75:71:2b:11:2a:0e:b7:d6:32:26:8b:c1:b9:44:
84:3f:9c:9e:af:ac:88:24:64:eb:b4:37:4c:f5:b8:50:fd:7b:
5b:32:35:42:88:e7:28:a1:9b:1f:35:6c:2a:cf:a8:32:96:9c:
a5:56:ab:27:ac:8b:5a:d7:8e:70:2d:d0:a5:1a:90:05:c7:8f:
d5:4f:4b:98:00:4d:36:a9:ba:9b:ea:32:c2:85:f5:30:56:39:
7c:44:de:63:c6:66:68:29:9f:a7:20:c6:47:72:f7:01:31:0b:
12:ad:4a:d8:b3:83:4a:84:8b:85:0c:56:62:10:eb:b7:88:28:
89:30:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:54 2025 by rpki-client