Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File: wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier: NeeSa6a3+MM7A6CqeRaPtgwmmwktAEvY+dnxlFAWhJc=
Subject key identifier: 38:EE:65:E0:E8:3D:6D:2A:8F:0E:74:C1:70:BD:A0:0D:DF:25:33:B3
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer: /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial: 019892C8E3E4FE986203A22ED22825CDAC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number: 0D1B
Signing time: Sun 10 Aug 2025 07:01:35 +0000
Manifest this update: Sun 10 Aug 2025 07:01:35 +0000
Manifest next update: Mon 11 Aug 2025 07:01:35 +0000
Files and hashes: 1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: 0VFTX33d19MsK1sQBbCqs4DEP+IXi7KFblryXVMZBEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:e3:e4:fe:98:62:03:a2:2e:d2:28:25:cd:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Validity
Not Before: Aug 10 07:01:35 2025 GMT
Not After : Aug 11 07:01:35 2025 GMT
Subject: CN=38ee65e0e83d6d2a8f0e74c170bda00ddf2533b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:f9:43:56:83:a0:f4:32:57:0a:b2:d9:5a:
f3:dd:cc:49:4b:c6:c1:97:b3:e6:4b:cd:c5:cf:04:
f1:b1:25:0a:f6:6f:24:a4:04:f6:cb:25:63:27:9d:
ae:48:7b:34:28:ac:1f:9f:8a:c5:a9:d2:75:49:52:
34:26:a9:da:95:78:55:ce:57:f1:ea:aa:09:09:90:
97:5f:c2:21:01:89:4b:a2:36:4c:2c:97:75:cf:29:
5d:9b:ae:20:5a:4a:44:f5:67:8d:53:22:31:ae:ff:
9e:e4:f3:ae:b1:9e:70:86:10:a6:89:d0:1d:b1:96:
88:a3:13:bc:9e:cf:a7:52:33:24:d5:38:9e:ca:db:
34:98:bd:59:6a:42:71:8d:f4:f9:95:63:97:9d:fc:
b4:25:83:88:81:00:99:26:38:7a:a3:22:d8:1d:c1:
d1:42:d3:16:c5:87:9c:bd:d9:55:8c:e1:c5:ce:70:
aa:8e:17:77:b8:f7:8f:4e:85:17:72:d5:76:e7:d5:
7d:46:50:e8:ed:97:88:9f:54:ce:a8:4d:c2:c4:8f:
56:9a:75:72:33:88:58:14:5e:40:b5:a8:09:92:f2:
06:ca:95:a8:d5:eb:76:db:09:0a:88:3a:31:48:8e:
22:c1:95:a9:10:a9:c3:0f:c7:c9:ad:88:ca:36:cd:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:65:E0:E8:3D:6D:2A:8F:0E:74:C1:70:BD:A0:0D:DF:25:33:B3
X509v3 Authority Key Identifier:
keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:05:6d:7b:14:21:e4:45:59:1f:e1:fc:81:6c:d0:2b:21:87:
19:07:45:7b:a5:8d:6c:41:f7:4a:68:79:e4:04:b9:68:12:aa:
3a:1f:65:7a:61:76:13:32:cb:86:49:a2:74:1d:9e:fb:bb:e2:
a7:8b:19:1f:01:96:bc:0f:9f:88:b9:01:b8:b2:e4:e8:01:70:
94:92:e7:5f:6d:a5:b4:e4:a6:f3:fe:c3:23:18:d0:e8:67:4f:
6d:b4:5d:9b:31:17:18:98:6b:5e:b2:3a:1c:49:2c:23:25:b3:
b6:92:27:a4:e5:e0:be:91:35:b6:bb:f3:e3:a7:a1:a9:20:60:
51:65:83:b5:3a:86:dc:d9:b2:e4:5b:8f:fb:b9:99:72:69:7c:
21:ae:11:f4:ca:cb:9e:ac:e4:63:76:19:5e:e4:e4:ae:b7:ae:
55:db:1f:95:cb:c1:dd:f2:ba:38:3e:c8:e1:d0:4c:a2:c1:3b:
f8:31:ce:f8:d4:64:6e:0a:d9:c5:1b:f5:a5:4c:7a:81:9b:1f:
e6:d6:21:89:77:4e:ac:07:29:e7:40:77:fa:73:9f:2d:34:b3:
a8:75:1b:cb:c6:5c:98:38:95:73:67:b7:2b:11:e0:02:70:36:
2e:38:56:57:ce:e9:21:a5:a1:cd:9e:aa:60:8d:15:ce:19:4f:
9e:59:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:26 2025 by rpki-client