Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier: rHd5Qr+Lxim62JRWzCGOIRdi/RzKpgmlJd+UL9v3rjg=
Subject key identifier: 06:6B:EB:D1:CE:19:B4:7D:25:CB:37:0E:F4:E2:4F:95:CF:E2:40:FA
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial: 01989524B34190585EDEC334CA1CC669939D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number: 0984
Signing time: Sun 10 Aug 2025 18:01:07 +0000
Manifest this update: Sun 10 Aug 2025 18:01:07 +0000
Manifest next update: Mon 11 Aug 2025 18:01:07 +0000
Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: kCauMrcwawED/oTSzyeo/r7HO0UgGcHw81Jz641dE1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:b3:41:90:58:5e:de:c3:34:ca:1c:c6:69:93:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Validity
Not Before: Aug 10 18:01:07 2025 GMT
Not After : Aug 11 18:01:07 2025 GMT
Subject: CN=066bebd1ce19b47d25cb370ef4e24f95cfe240fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:da:0c:ba:89:25:c0:77:32:2d:d4:d5:c5:
ac:43:01:42:a5:06:67:ad:19:f7:14:fb:16:65:92:
36:ba:80:a2:81:27:47:e2:b5:bc:a6:27:83:b2:46:
96:60:5f:c0:1d:bd:0a:79:37:70:71:d2:21:0c:d9:
7e:88:e9:66:62:c5:66:55:8d:5a:23:09:02:42:eb:
76:05:08:5c:7e:9b:9a:95:5f:66:3e:86:15:1c:20:
05:b8:48:e3:4b:e2:01:8e:63:82:88:55:88:ee:7c:
73:bb:a8:9a:4d:d3:57:01:a7:99:d6:1e:5b:c3:0e:
f1:43:28:fb:1d:4b:92:b9:a3:99:55:67:b1:9a:93:
7e:7c:f6:21:c9:99:44:df:6f:1a:ec:37:b1:c3:67:
a6:18:19:97:2b:02:d7:a9:ff:00:26:57:ea:23:35:
83:1d:37:64:68:d9:59:d9:29:a0:18:54:e8:b2:27:
cd:72:48:49:f1:29:cd:07:26:fd:d6:e9:e5:d0:d7:
27:fe:c4:49:ef:a6:1e:0c:5b:d7:6a:c7:74:5c:c3:
1b:36:3c:11:47:aa:93:00:dd:d2:57:51:c6:2f:e4:
30:64:d1:a9:66:83:55:91:2e:82:dc:78:ac:a6:ee:
0f:15:f2:b0:b9:1c:cf:56:d2:ed:be:33:64:09:7a:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6B:EB:D1:CE:19:B4:7D:25:CB:37:0E:F4:E2:4F:95:CF:E2:40:FA
X509v3 Authority Key Identifier:
keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c7:0b:47:35:03:90:ee:99:45:f9:67:54:6d:5c:93:23:6e:
c6:eb:3b:cd:73:1f:57:a5:17:90:88:13:07:58:69:dd:5e:2d:
f2:6e:eb:e0:c9:0c:24:38:07:fb:a5:41:43:fc:23:bd:fa:a3:
b3:11:60:ac:c1:e1:ae:be:cd:81:a0:46:71:e2:7c:07:5d:af:
2b:ca:af:15:23:43:37:c4:23:99:90:d5:59:57:9e:f4:76:ff:
83:6b:56:67:43:a7:af:22:dd:7e:b2:51:e0:fc:12:6b:66:42:
72:0a:4d:1f:3d:5c:26:76:5c:4c:3f:97:1e:ee:d5:34:4f:a1:
ca:64:ac:ab:44:54:bf:0f:bd:77:eb:2b:eb:57:8b:e8:d3:ce:
a6:0d:00:51:99:e8:97:93:c7:c3:2e:66:ec:75:df:f5:cc:01:
09:10:d4:07:a5:1a:7a:00:44:b1:50:c4:82:19:be:39:fd:9c:
99:f5:09:74:c3:e3:6b:9c:f6:c9:f1:9e:01:25:e8:cf:80:c2:
1c:1d:24:d0:35:47:e3:03:51:07:35:fe:b5:43:92:02:5b:db:
ae:1a:96:d8:99:1e:31:78:07:44:fb:cd:9e:e4:88:68:eb:f3:
3e:3a:6f:db:73:df:f0:d4:a7:85:61:6c:b1:16:e2:5d:e9:9a:
06:db:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:15 2025 by rpki-client