Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json)
Hash identifier: Fz2goLV6aFZfSV8Qz2nrJt8+8jTjk3SLQpOwSjnndVA=
Subject key identifier: 89:A0:CF:F6:82:12:F2:01:71:EA:1D:7E:C3:9D:A9:4E:9F:7C:C1:73
Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Certificate serial: 019847780075CFD727C1E02EF0F1FDFE62A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
Manifest number: 0879
Signing time: Sat 26 Jul 2025 16:01:43 +0000
Manifest this update: Sat 26 Jul 2025 16:01:43 +0000
Manifest next update: Sun 27 Jul 2025 16:01:43 +0000
Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: ilI+2CqwOIGqJGmZhSg5+3gX/nKgoiP+OLFGBf7J40s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:00:75:cf:d7:27:c1:e0:2e:f0:f1:fd:fe:62:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54
Validity
Not Before: Jul 26 16:01:43 2025 GMT
Not After : Jul 27 16:01:43 2025 GMT
Subject: CN=89a0cff68212f20171ea1d7ec39da94e9f7cc173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:40:f7:90:58:54:57:56:1c:58:e8:d6:b7:
70:2d:b0:fc:1a:34:7a:a9:8f:cd:f0:83:5b:6f:c7:
88:41:4c:cb:da:11:da:35:21:99:b5:23:60:f5:d0:
e2:44:90:2b:86:14:78:b4:97:60:cb:1f:14:71:5b:
f2:97:87:0d:a7:91:6b:9f:ab:b8:4a:e9:1a:6a:90:
12:02:52:04:3c:f3:9f:03:cf:9c:09:0f:2c:e8:c6:
99:39:d4:75:ba:ca:f4:c4:ae:bc:2b:ca:4b:bc:e7:
88:a3:8b:ea:d4:53:c3:cb:e6:17:b7:ae:77:37:1d:
e9:e2:66:da:75:29:bb:08:1a:62:ee:6c:14:38:fe:
ee:43:17:90:58:37:6e:39:17:d6:71:6c:f7:df:4b:
a8:10:77:6c:f1:e1:d8:41:a2:ad:9b:2b:92:87:9c:
00:b5:aa:92:7e:52:c3:6c:c5:89:00:14:1f:87:69:
5b:85:c3:dc:14:48:a2:59:97:e9:d1:54:13:c4:cd:
56:bf:10:ab:65:22:e5:40:f1:c6:d5:1b:b4:4d:89:
dc:22:9d:82:5c:ca:39:b9:42:c9:4d:e6:99:23:65:
db:77:a7:f7:60:5e:cb:d0:85:2f:50:5b:16:c5:4d:
ba:ae:20:8b:53:03:92:91:83:71:b6:34:ed:6e:25:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:CF:F6:82:12:F2:01:71:EA:1D:7E:C3:9D:A9:4E:9F:7C:C1:73
X509v3 Authority Key Identifier:
keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f7:75:34:ff:47:83:30:6e:82:d5:d9:6c:76:8c:ca:40:e2:
8d:13:7b:bf:90:f1:97:01:36:47:af:d8:74:0e:10:7b:2c:8d:
bb:10:73:1e:c9:31:38:2c:74:bc:31:71:b1:cb:34:fe:14:2c:
b6:f1:e5:23:88:4a:62:87:92:37:3b:90:f1:f3:eb:f9:b3:7d:
0f:eb:52:68:04:ca:98:8e:24:f9:9c:b3:09:3b:73:f8:ac:63:
ff:06:71:9c:31:b1:45:77:d1:25:b1:e6:68:e0:b3:cc:39:c3:
e8:29:0e:c4:fb:a5:d8:10:c9:29:2e:56:ff:3f:21:bc:a3:b8:
30:ed:82:02:56:be:73:3d:ba:32:9e:15:8a:9a:0f:23:6b:68:
d5:7d:c0:0e:af:de:02:8c:2b:bb:33:d4:54:c2:d4:28:88:bd:
5d:03:a7:94:eb:65:77:b9:ba:e4:75:3a:f6:f6:d9:95:08:a6:
ae:95:b0:17:ae:cb:d7:22:39:68:30:ab:01:d1:a7:e1:62:f5:
52:d3:7f:5e:ce:a0:a3:f0:2e:e6:09:48:bd:72:c8:cd:49:01:
37:03:8f:a5:ad:01:1d:de:c1:93:45:97:2f:84:75:88:7b:ac:
70:63:7c:c6:0a:89:25:55:e0:50:2a:4c:29:74:8d:72:16:4b:
b7:84:c7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:41:25 2025 by rpki-client