
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: 0kqezHPTSk0lLxG4QRNxuQ3Hwi9OFf/Y/bNYgFogd4o=
Subject key identifier: 13:32:27:8D:04:47:3C:01:C6:0A:6C:DC:73:72:EC:3C:C5:E2:82:17
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019875D12F8A79530755FBF0293E67AC5AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0269
Signing time: Mon 04 Aug 2025 16:01:40 +0000
Manifest this update: Mon 04 Aug 2025 16:01:40 +0000
Manifest next update: Tue 05 Aug 2025 16:01:40 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: f7qZO8lZqTaYWWusN3uEhKRDkeqWUdyndaYUIa6kv/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:2f:8a:79:53:07:55:fb:f0:29:3e:67:ac:5a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Aug 4 16:01:40 2025 GMT
Not After : Aug 5 16:01:40 2025 GMT
Subject: CN=1332278d04473c01c60a6cdc7372ec3cc5e28217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:d2:63:73:9d:f4:7c:8f:d1:b4:6b:ea:15:
0a:3a:13:00:b5:78:e6:59:56:b8:38:a4:3b:ba:3b:
7f:26:66:88:7f:15:47:fa:9f:6c:20:c7:bc:9e:cb:
c4:df:ce:39:47:78:fc:11:5a:91:cb:ca:5a:55:ba:
2d:aa:dd:64:76:29:f5:e5:42:f3:9e:d3:e7:88:6e:
ce:78:b5:b3:44:25:07:62:bb:b9:6d:0d:c5:91:41:
f5:19:57:58:53:91:eb:7f:70:a2:30:0c:7a:60:cc:
51:33:5f:57:65:e6:76:bc:39:cb:12:d3:06:c9:89:
eb:e6:2b:3e:c4:4a:f3:90:9b:a5:50:5a:81:2e:b5:
49:d7:d3:80:e8:6a:b7:93:6f:8d:80:47:2e:ee:37:
3e:dd:ce:6c:b8:99:5f:57:4b:62:50:9c:6c:0a:6e:
99:bc:1e:ce:5f:98:4b:ca:9f:84:52:68:1a:41:48:
c0:b3:be:87:0a:2c:3d:77:fb:5e:6f:ed:61:1c:cf:
e7:10:be:0b:2c:3d:c7:41:65:93:05:6f:67:58:4d:
c7:b1:74:48:fc:27:0a:dd:0a:33:e3:ce:63:ce:de:
cf:f2:f5:9b:a7:7d:da:a4:41:a8:40:b5:3c:f1:94:
30:3e:23:4c:53:29:ba:1c:a5:83:e7:81:0d:09:e3:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:27:8D:04:47:3C:01:C6:0A:6C:DC:73:72:EC:3C:C5:E2:82:17
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c4:6f:7f:e5:e9:e8:29:b0:e6:49:52:16:59:35:8a:2f:6d:
0c:0a:c8:2f:2e:b0:42:cc:66:50:df:b0:0a:06:5d:41:55:f9:
ca:04:6b:df:4e:5f:34:f9:f5:d3:6b:1b:2b:ff:e8:58:ba:1b:
b1:de:95:b6:e1:6e:d5:30:4c:10:c7:c8:d5:f4:44:97:05:bd:
e6:63:da:54:0e:ac:da:b8:29:ed:95:db:45:af:07:76:39:2a:
a3:3e:8c:15:ff:ec:32:ec:32:4e:3f:c0:f0:10:a9:89:a0:d2:
c8:df:69:8e:24:18:76:41:d5:93:c4:63:e7:96:0f:c9:b4:1a:
4c:86:78:81:f9:85:ee:04:18:bb:74:17:ee:b4:59:46:e1:e6:
89:04:20:20:3a:be:a9:58:ee:81:df:4e:07:b8:79:ed:a1:9c:
9c:c5:90:0f:86:77:6c:29:6a:3c:cd:da:47:62:c8:29:38:cb:
b8:9d:ce:4c:a0:7f:b9:b1:dc:61:1d:20:9c:a5:58:19:cf:92:
e5:8d:12:80:11:73:d6:bb:2f:bf:6d:47:19:41:df:a6:3c:7a:
3d:f6:d1:88:c8:67:bd:63:0f:c9:22:6d:b1:70:c0:67:d5:43:
37:b6:95:68:8c:ae:6d:df:2f:56:ac:75:a1:8c:35:08:76:0f:
f4:a2:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:09:47 2025 by rpki-client