Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
File: wlZYX2ctCeHXfOXq9OPhUfhgroY.mft (raw, json)
Hash identifier: nKDzLKuEeBeWt8BAtQ3wcKw2FrVyvO4NIlwEi6wCIlc=
Subject key identifier: CD:4C:34:5D:A6:B8:26:7A:80:AB:68:EC:D9:C5:2F:91:A3:4B:6E:8F
Authority key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
Certificate issuer: /CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Certificate serial: 019887D6F5A98D7FF754112A9CE0769B00FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
Manifest number: 1534
Signing time: Fri 08 Aug 2025 04:01:08 +0000
Manifest this update: Fri 08 Aug 2025 04:01:08 +0000
Manifest next update: Sat 09 Aug 2025 04:01:08 +0000
Files and hashes: 1: wlZYX2ctCeHXfOXq9OPhUfhgroY.crl (hash: AD2jykA8cp5bDqTNVBRVvdOi1KZTBliyxk+1Mw03YSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:f5:a9:8d:7f:f7:54:11:2a:9c:e0:76:9b:00:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Validity
Not Before: Aug 8 04:01:08 2025 GMT
Not After : Aug 9 04:01:08 2025 GMT
Subject: CN=cd4c345da6b8267a80ab68ecd9c52f91a34b6e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:39:e0:d1:2e:bc:fe:dc:35:97:3e:7d:74:
3e:e2:2f:d1:17:c0:aa:c6:69:ad:b5:98:72:69:c7:
f5:fe:71:21:47:d1:ee:26:29:c9:2c:84:18:c7:b0:
c2:33:e1:5c:be:af:e2:6b:aa:d8:ef:fd:5d:9d:64:
ac:2b:cb:7d:d9:0a:11:89:89:ae:dd:f9:a5:fb:94:
6d:b8:21:dd:04:ae:67:e0:12:4f:60:ce:ef:d3:b6:
a3:fa:b1:f5:34:69:5c:54:31:fa:e3:49:53:42:af:
8c:1d:fe:e8:93:8f:04:c4:d0:17:cd:33:65:b9:1a:
86:64:4d:db:33:15:62:13:95:1a:d6:50:5a:b1:c2:
df:c7:42:06:fd:90:91:10:94:d9:5a:83:7e:68:e7:
00:69:37:f7:8d:c8:87:ba:3e:6e:8c:86:be:c5:1b:
ea:7c:f2:4e:ba:2e:42:c3:74:1d:b0:03:9c:d8:36:
fd:bf:41:1a:9d:58:bb:56:1b:3e:a8:38:1d:47:55:
14:2e:c0:fe:f3:c5:40:7c:4c:90:83:04:53:42:c6:
f2:e0:b7:96:87:f0:2d:b0:de:52:bf:e7:6e:77:8c:
b5:86:7e:09:d0:dc:db:fa:61:bb:7e:e9:cf:03:aa:
94:ee:27:7d:53:df:ab:ce:e4:d4:51:4e:8c:22:9d:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:34:5D:A6:B8:26:7A:80:AB:68:EC:D9:C5:2F:91:A3:4B:6E:8F
X509v3 Authority Key Identifier:
keyid:C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:9e:2d:5b:27:a3:a4:dd:2a:cb:8c:cf:a2:c2:c6:ae:ed:
24:27:37:33:77:34:2e:17:76:e2:86:c3:84:87:77:6a:d6:2b:
ef:ee:ab:eb:90:a7:2b:27:75:0e:d6:86:79:09:1b:27:c6:42:
e3:34:d7:3c:cb:bf:c8:f8:d1:12:81:db:3b:f6:72:21:52:35:
71:0c:80:69:b1:94:ae:04:d3:b5:9f:11:bd:04:5d:69:5e:56:
1a:ac:f8:5b:e5:07:04:dc:bc:f1:56:24:2d:fc:07:8b:5f:26:
c7:dd:7d:7b:d3:7d:5e:ed:11:0e:35:61:69:41:19:bf:66:69:
20:c4:7e:82:36:4a:3b:aa:64:64:58:69:54:8b:66:09:68:98:
39:61:d5:3c:5b:e9:0a:b6:75:41:a5:74:31:47:9a:39:7e:28:
18:06:7d:c1:8b:01:dc:f7:77:67:e7:97:97:5f:9e:e1:a2:e1:
bc:57:5c:14:d9:f0:16:f7:6a:ae:c8:7b:6b:1e:2a:e2:e4:88:
6d:69:50:e3:e4:dd:a4:f3:a0:6b:34:3e:e5:a5:0b:5f:32:a3:
ba:ed:d1:55:42:54:b2:6b:c9:8f:d2:4e:a7:97:33:4e:d0:49:
67:66:fe:b9:50:27:af:d3:a1:a8:9c:a1:28:e6:1a:ef:7d:8d:
12:88:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:49:24 2025 by rpki-client