Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: wE902L/1rPi6nTSVKVEUK/iWccnMR9lx9ndbqEZVLVE=
Subject key identifier: 5F:AF:77:23:F1:D3:0B:4D:7D:F9:1F:4B:76:84:25:5D:25:3C:5A:E6
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 019881D511CA971864B9BE0952CE87A24FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0CA9
Signing time: Thu 07 Aug 2025 00:01:20 +0000
Manifest this update: Thu 07 Aug 2025 00:01:20 +0000
Manifest next update: Fri 08 Aug 2025 00:01:20 +0000
Files and hashes: 1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: 9qoXvlMkYbVsfGN2uLH7M84HQbjgn253KIfpfFkIY+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:11:ca:97:18:64:b9:be:09:52:ce:87:a2:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Aug 7 00:01:20 2025 GMT
Not After : Aug 8 00:01:20 2025 GMT
Subject: CN=5faf7723f1d30b4d7df91f4b7684255d253c5ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:88:46:30:d9:ea:6a:5e:3d:71:54:31:9a:
aa:60:fe:a7:db:d4:a4:9f:6b:df:3b:ce:92:35:6b:
21:35:f3:ae:1f:89:cb:1b:05:f3:e8:36:45:eb:57:
ad:fc:70:f2:83:df:61:a7:dd:5f:7d:f6:45:03:63:
7d:4b:21:14:43:90:89:74:8b:15:12:70:a6:a5:18:
b4:bd:e4:2a:a4:8f:93:be:50:4a:77:a8:12:2e:30:
04:a4:d9:66:63:00:58:e1:db:88:d1:75:93:c0:b8:
3e:12:69:eb:ad:4f:d6:77:55:64:1f:4c:77:1b:a5:
62:85:e2:47:95:34:7b:5f:bf:c8:93:53:4d:ca:c2:
d9:3f:d1:89:17:b5:45:e2:33:5c:c0:4e:25:19:3b:
a9:4b:0a:77:aa:74:6d:a4:11:bb:dd:6e:f8:8c:61:
07:96:0b:b2:73:ef:5c:8a:5f:79:e6:1b:07:0e:79:
53:bf:9d:3e:f7:2f:17:b5:a7:c5:81:b7:bc:a3:1d:
31:20:ec:31:a0:11:cc:51:aa:f7:cd:b9:de:89:9a:
e5:ed:c6:24:2e:ce:c5:57:8f:fd:6b:74:62:d5:df:
6f:f6:36:cf:23:c5:a6:e3:f0:1f:a7:c2:9b:20:68:
64:d1:25:5d:11:15:53:c4:43:5c:9a:a9:1c:b5:d7:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:77:23:F1:D3:0B:4D:7D:F9:1F:4B:76:84:25:5D:25:3C:5A:E6
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0c:72:96:d5:a6:71:6e:a2:1c:28:64:3f:4d:7a:6f:91:6d:
7d:4a:1a:f5:dc:d0:6a:ef:7e:64:5c:2b:59:5f:f6:3b:c7:0a:
a5:5d:17:74:08:db:75:ee:05:8b:77:3f:b3:92:d9:e4:76:2d:
f6:53:25:c2:b3:9d:2f:1e:ee:3c:f4:56:1a:30:74:5c:74:73:
7d:f9:56:d8:20:62:98:54:42:f7:21:5e:b9:31:5c:68:72:fe:
6d:37:a6:e5:7c:36:cb:73:b0:c4:c8:c6:f4:7f:b9:6c:74:98:
c5:d1:89:e9:58:7e:1c:90:5e:0b:cb:82:3b:3b:99:ad:d2:db:
d9:d8:ea:92:c8:f4:50:f5:32:7c:7e:c0:a2:4a:8d:31:04:d5:
fa:bb:7a:5c:49:da:f0:71:7e:59:cc:5c:9f:41:b4:46:99:8d:
49:30:da:0c:c6:2b:37:fa:8b:cf:11:c3:24:7e:ed:ae:93:55:
41:02:3a:5a:05:fe:a4:de:c3:e2:a8:c1:64:a6:43:d9:bc:96:
ec:09:a6:aa:28:7c:4e:ea:5d:ab:d4:32:32:b9:ea:19:99:3b:
f1:64:3f:23:a8:0c:1c:d9:8a:8c:f6:b2:a9:20:8c:f0:46:d6:
c9:ea:2d:ad:83:56:90:02:3e:32:49:6a:41:ad:0e:64:d9:13:
69:0b:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:08 2025 by rpki-client