Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: mJnLwIltGfSqBfFiT8WM+kWogD6waqqq2vUlZI5GzJ0=
Subject key identifier: 45:44:03:44:24:46:7E:3D:2F:1D:72:CF:8B:DB:48:DE:D7:49:AD:C6
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 01988B0FBB8D8D53A9240A475503DEB25BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0C89
Signing time: Fri 08 Aug 2025 19:02:00 +0000
Manifest this update: Fri 08 Aug 2025 19:02:00 +0000
Manifest next update: Sat 09 Aug 2025 19:02:00 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: 9f8abUQX98p+LsRuUqBnMUvBFt95Ix/cxnrg2uvDEwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:bb:8d:8d:53:a9:24:0a:47:55:03:de:b2:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Aug 8 19:02:00 2025 GMT
Not After : Aug 9 19:02:00 2025 GMT
Subject: CN=4544034424467e3d2f1d72cf8bdb48ded749adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:ce:e0:e8:ef:e8:47:90:a3:82:6b:d7:27:
dd:05:e7:57:a2:78:b2:69:91:55:73:79:75:14:5c:
76:b2:9b:8d:38:97:41:8f:bb:e1:54:cb:8d:f6:63:
5a:f7:3a:3c:b4:90:5e:d0:8d:92:a6:ad:a1:5b:dd:
08:7a:bb:52:29:1a:bb:49:13:8c:d4:8c:e0:3c:02:
95:5a:a6:be:0e:6f:9e:fc:a2:2a:84:c5:02:49:2d:
72:a0:b2:7d:a5:95:60:26:e8:a8:b3:c6:4f:0f:a1:
9b:94:4b:aa:bd:c3:4b:ee:fe:c4:b2:9e:aa:97:93:
85:0e:4d:8b:11:69:ff:2a:be:4e:53:35:94:2b:2b:
7a:82:54:0a:83:fc:3a:be:4e:60:e5:d8:32:bb:c2:
64:e8:71:5e:6d:b1:0d:f3:6e:8c:07:50:1a:e7:bd:
ad:c6:e3:2d:4b:3f:37:30:63:98:40:78:db:6f:1e:
8a:ac:45:5a:c0:d4:e4:90:82:96:b8:d0:a3:a4:66:
f4:69:66:9e:0c:e7:ce:43:5d:c3:a6:4d:62:f2:24:
96:d6:d2:e8:68:c4:90:ea:e4:98:83:ee:84:b4:b8:
1f:d7:38:41:04:68:fc:bf:e3:64:c9:47:de:03:8f:
6b:5a:31:f5:89:6a:58:b0:3d:a0:6d:9d:b7:54:7b:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:03:44:24:46:7E:3D:2F:1D:72:CF:8B:DB:48:DE:D7:49:AD:C6
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:10:cd:da:32:3f:9f:36:01:cd:0d:46:45:85:92:9b:8e:1b:
80:73:c5:e3:93:90:14:b3:f5:d0:0f:c7:5f:01:3f:df:6b:db:
a7:a0:90:f7:04:86:a7:61:6f:ae:56:7a:75:49:67:8c:62:29:
9e:81:dc:e4:5c:d4:3e:07:04:d7:03:89:49:bf:c8:48:a5:8f:
3c:1e:52:07:7d:ba:ce:4c:f4:fe:b8:59:90:e8:81:18:90:e7:
44:c4:eb:94:03:8e:41:60:e5:3e:a0:97:1b:60:d5:d8:14:3e:
2e:ac:c3:cb:d4:06:87:95:79:53:80:ce:38:7f:6f:8c:d3:de:
b2:f6:b3:c6:b1:90:85:7a:8a:75:ad:f8:8e:55:cc:1a:50:46:
e9:fa:6f:ed:09:c0:d6:fd:05:f8:ff:52:13:58:61:36:c9:aa:
26:10:36:19:fb:5b:e3:a0:df:e0:51:77:e7:51:07:f0:68:9d:
0e:7a:09:3e:32:99:c1:b7:d1:c2:5a:9f:71:5d:62:62:92:89:
77:98:23:54:93:b8:86:af:6a:74:ab:2b:70:c9:bf:a7:0e:1d:
2a:1a:75:62:94:cb:fe:29:99:41:7e:52:56:b3:02:57:7c:bc:
2c:e5:77:88:e8:89:30:b5:3d:84:31:c2:cd:56:68:81:03:14:
a5:fb:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:53 2025 by rpki-client