Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json)
Hash identifier: SHJO/ZAv8W7vTFQd5m7V19fXhSJA/O/bbW7RkuK6byY=
Subject key identifier: F5:A7:AC:2C:6A:6C:9E:A9:7F:83:90:3D:81:7F:CC:38:79:9A:62:8B
Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Certificate serial: 019848C0636236364B39D06233CAF4FE9451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
Manifest number: 0C2D
Signing time: Sat 26 Jul 2025 22:00:24 +0000
Manifest this update: Sat 26 Jul 2025 22:00:24 +0000
Manifest next update: Sun 27 Jul 2025 22:00:24 +0000
Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: bKxh6JHA3Ej9YT3PEhUjTNZhB5TgA2rsgqKb2NUWmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:63:62:36:36:4b:39:d0:62:33:ca:f4:fe:94:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a
Validity
Not Before: Jul 26 22:00:24 2025 GMT
Not After : Jul 27 22:00:24 2025 GMT
Subject: CN=f5a7ac2c6a6c9ea97f83903d817fcc38799a628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:06:ed:72:e6:21:6e:0c:b0:3f:bd:d0:7f:
4d:78:26:44:15:ef:21:88:7e:87:0c:01:87:8c:6c:
9c:88:33:e4:bb:bc:29:a7:25:42:07:fa:c0:a9:82:
0e:5a:27:75:0c:20:44:58:35:22:38:e6:be:b3:47:
f8:61:53:31:39:97:1a:e5:19:7f:21:b7:49:ca:8f:
fe:10:81:d5:cf:cc:2e:2c:f9:3f:1d:81:33:69:f3:
8f:ac:90:cc:e7:c7:2b:68:81:97:8e:9f:54:ed:14:
18:5c:67:9c:50:8c:ac:38:68:08:24:aa:22:42:d0:
f1:39:2f:cf:97:1c:d2:59:8e:6d:94:72:a5:8f:44:
24:35:30:1d:d5:6b:06:4c:33:f2:f7:60:78:60:36:
1f:44:16:09:33:96:27:39:73:03:3f:ff:09:f2:63:
2b:f5:a9:1d:22:71:c3:25:d1:d7:ea:a4:7f:5d:1f:
3c:37:08:8c:0f:6c:5f:f5:00:3f:89:b8:a8:98:40:
71:91:55:0e:ab:15:d2:31:5f:e2:a6:71:01:34:d9:
ed:7e:c2:b3:f3:ba:fb:0a:92:c3:a4:0c:76:11:3e:
b3:50:e2:e4:8e:bb:cd:ec:22:4c:03:c4:d0:77:95:
58:a9:1a:9a:13:80:56:5f:1c:4b:c9:75:93:c8:c9:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:AC:2C:6A:6C:9E:A9:7F:83:90:3D:81:7F:CC:38:79:9A:62:8B
X509v3 Authority Key Identifier:
keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b8:38:6f:94:aa:c1:31:b9:2f:43:8a:da:4c:39:92:16:12:
d4:f3:c7:73:bb:30:ab:78:e4:0b:39:6e:2a:0d:f2:c4:3f:c3:
09:77:d3:86:93:91:f4:e7:2f:13:3f:11:20:1a:73:2a:a0:6b:
0b:23:fc:cc:76:1d:94:d6:9a:aa:fd:01:ec:bd:1c:f7:ba:9f:
4b:b0:ec:83:5a:d9:c4:c5:cc:80:23:f6:75:3d:2c:60:9f:8b:
32:8a:fd:f1:bd:55:15:f4:bd:cb:f8:d3:ea:15:9d:22:53:17:
ce:ab:83:d5:a3:9c:ed:9f:9d:a0:79:10:fc:d3:d1:da:d6:6e:
48:d5:db:69:5a:30:ce:ba:20:85:e8:32:c5:8d:be:a7:06:3f:
3c:cd:1b:64:95:2e:02:d9:2d:60:e9:d8:2b:4e:26:a3:e3:b9:
e3:d4:57:b4:b2:5c:91:a9:a2:20:b6:65:de:85:78:36:39:02:
1a:b2:ee:c3:6d:87:cf:45:44:36:7b:6e:34:40:0d:d3:dc:61:
b2:23:c9:20:39:76:cd:36:42:df:d9:22:f5:fc:8d:01:f8:ce:
3a:2f:e8:de:75:b2:be:fd:86:42:6a:c5:6b:a6:fe:16:23:b3:
54:5b:70:1d:27:51:54:93:c2:21:c3:96:8e:2b:0b:f3:a7:4c:
20:6c:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:01:03 2025 by rpki-client