Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier: W5xblkeaTqbuAs1nwegSme+8zF88tqagTlNnaZa8OYE=
Subject key identifier: 2D:1A:72:4F:E8:19:2B:51:F6:60:50:9B:40:9D:17:1C:0B:32:3D:0C
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial: 0198499C0D4E5D7077BC9C46B5D2076866D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 02:00:20 +0000
Manifest this update: Sun 27 Jul 2025 02:00:20 +0000
Manifest next update: Mon 28 Jul 2025 02:00:20 +0000
Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: I7+GYrmoq2KISiBDT1vbsIENTTgyjRLGOrk+vQtoEc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:0d:4e:5d:70:77:bc:9c:46:b5:d2:07:68:66:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
Validity
Not Before: Jul 27 02:00:20 2025 GMT
Not After : Jul 28 02:00:20 2025 GMT
Subject: CN=2d1a724fe8192b51f660509b409d171c0b323d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:a1:e8:55:9b:36:ee:d7:7f:01:cf:ba:8a:
a8:ca:2b:db:15:a8:d9:7f:c7:e3:27:d8:9c:8a:35:
24:c8:52:41:cc:3f:4d:c5:a4:67:33:6d:4e:2c:97:
b9:34:d9:19:3a:60:ce:d9:28:fd:a5:2e:e6:fa:77:
bc:78:e8:0d:a9:24:6f:89:89:cb:91:d0:97:6c:07:
ef:a9:71:01:a9:71:e5:6e:40:14:e4:51:3c:7c:d1:
e3:1c:99:a1:93:48:52:39:c8:33:1e:34:de:3d:92:
f5:15:fe:2e:a3:64:57:05:65:a0:aa:63:f2:f6:9a:
f2:e4:ce:1d:c3:b0:11:fa:29:77:72:d7:3d:68:00:
b4:ae:72:a4:4d:be:0f:0e:f9:2b:4a:3a:26:36:f5:
9e:02:8a:b8:30:16:88:c5:a7:20:f6:81:a0:4d:ee:
a8:fc:fe:66:f2:35:33:b1:74:bf:b7:89:55:c7:00:
2a:2d:df:f3:d7:4d:3d:01:66:d6:ab:25:27:27:e1:
a1:66:2c:14:8b:bc:8c:bc:42:b6:8f:5a:1a:c7:37:
6d:c8:80:72:ae:6e:c8:82:fa:b6:2e:d4:47:a5:08:
50:d7:12:16:89:aa:d9:b5:f7:13:34:38:c7:f2:20:
6c:2f:d6:43:80:b9:58:f7:e7:24:0d:ca:e9:b7:0a:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:72:4F:E8:19:2B:51:F6:60:50:9B:40:9D:17:1C:0B:32:3D:0C
X509v3 Authority Key Identifier:
keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:48:82:4d:4e:05:19:e7:6a:0d:df:db:2d:aa:8f:ba:7c:fb:
0e:ce:e2:86:5e:0b:a9:21:9c:f2:7e:a4:d7:b3:68:63:25:31:
27:ed:70:76:a1:af:ba:e8:c1:da:17:80:1b:fb:1f:7f:ff:f2:
d4:02:f8:29:6d:16:fd:fb:54:62:14:2c:b0:10:c8:46:7b:96:
cf:73:a2:12:c6:9a:30:52:dc:11:16:68:1d:94:1a:90:f6:1d:
52:fe:1d:ec:65:f5:de:27:c7:bd:89:5b:db:d2:30:d6:a7:05:
c9:65:cc:10:72:63:48:73:bd:69:13:cd:43:bb:65:b6:0b:c9:
9f:cb:88:55:20:5d:bc:64:25:cf:69:97:cc:36:f1:aa:5c:ad:
ae:ed:e6:c5:4b:84:f7:61:0a:09:bf:bc:b3:4b:da:45:c9:25:
3e:50:b2:7b:eb:6d:74:d4:1c:23:6c:41:ca:3e:a2:00:c0:0c:
b3:77:f9:4b:e9:de:b5:4a:d0:03:55:d5:81:f1:8a:5c:8f:3f:
b2:d5:57:4b:f0:b6:27:fb:55:d8:30:5e:9d:38:50:b9:f8:a5:
4a:a4:3d:92:49:76:6e:6b:0e:b5:ce:1a:8b:c1:b1:34:d7:38:
bf:0d:00:96:59:19:37:3e:86:36:bd:00:41:80:4a:71:6a:e9:
0e:27:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:18 2025 by rpki-client