Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: hQk0MLkTeL70BmNevU98v19D/2eDcI8FQwxk0j5CQd4=
Subject key identifier: 2B:4F:AF:5A:E6:3C:82:66:26:43:7E:E4:73:94:95:6C:B9:00:1F:8E
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 019845889962A6E1000FCF3B18587093BAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 06F7
Signing time: Sat 26 Jul 2025 07:00:36 +0000
Manifest this update: Sat 26 Jul 2025 07:00:36 +0000
Manifest next update: Sun 27 Jul 2025 07:00:36 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: cjuVbZ/UULkQfyqY0cag5uEakDvRON8AhnHgrH6zdOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:99:62:a6:e1:00:0f:cf:3b:18:58:70:93:ba:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Jul 26 07:00:36 2025 GMT
Not After : Jul 27 07:00:36 2025 GMT
Subject: CN=2b4faf5ae63c826626437ee47394956cb9001f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:7a:11:e9:9e:0c:bd:b3:54:2e:71:40:2b:
b9:7f:b6:d6:d6:fb:79:da:02:55:af:71:aa:42:60:
cf:ec:62:43:a6:3b:fe:9c:02:41:89:27:4f:b7:f2:
0e:de:56:27:f1:05:dc:f4:94:31:dc:4a:8f:ff:76:
71:5c:e3:3d:a3:59:fd:70:39:76:ce:b3:95:7f:f0:
ce:6b:8d:b8:04:aa:2a:85:6c:2f:0b:1e:0e:b6:33:
23:39:1f:b7:18:40:2a:a6:c9:24:7e:8d:a7:ec:3e:
38:ba:9c:bb:a8:f6:42:fe:01:ba:ac:ff:8b:9d:14:
c3:25:c2:aa:d9:d3:e5:f5:c5:e9:24:25:ae:98:e2:
17:c2:81:16:ad:16:2a:15:39:eb:c5:4c:dc:c5:e0:
9f:75:ef:76:c1:a6:98:3c:b1:d7:39:92:24:16:fe:
a6:85:0b:5d:f0:5b:11:cb:1f:2f:44:f9:ce:31:9c:
78:40:1e:ae:89:25:c8:9e:04:45:1d:b0:39:2b:f3:
fd:e5:71:6e:f9:90:cd:35:a8:81:95:87:0b:cb:23:
d2:dc:70:ff:24:02:e3:47:43:64:f8:30:be:54:46:
d4:2d:8b:82:c0:80:3a:59:4a:d1:cc:f3:c8:6b:44:
a1:cd:cf:a1:d8:21:45:b5:fd:8a:7f:4e:db:c1:2a:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:AF:5A:E6:3C:82:66:26:43:7E:E4:73:94:95:6C:B9:00:1F:8E
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ef:ca:47:78:d8:b0:41:cc:30:44:11:35:2f:c0:a2:98:69:
79:8a:8f:36:34:80:c1:c9:e9:30:3d:f6:ac:d5:a2:d1:24:c9:
52:da:b6:de:09:5f:bf:df:f7:51:d9:f0:52:dd:33:e9:6c:33:
bb:ec:e9:36:46:71:be:dc:8e:bd:19:21:95:f7:33:e9:f0:fb:
d7:47:28:67:19:51:4c:91:72:15:aa:83:de:ab:df:9d:49:43:
5e:63:fd:72:fe:03:4b:33:eb:31:91:76:f2:d3:f9:ef:32:17:
1d:fa:69:07:6b:6c:e7:80:1a:0d:32:8a:81:ab:35:97:ed:eb:
72:29:1c:c9:94:d7:de:ab:bf:c5:5a:b5:67:e1:ca:5c:65:2a:
b3:89:23:4e:41:d7:a2:d4:d9:7b:ba:e1:f3:1b:68:14:39:f7:
53:53:eb:c3:a4:86:a9:2d:bf:d1:a3:bd:46:ce:0c:c9:26:78:
2e:07:bd:f6:93:d5:7b:02:8e:74:b4:9a:de:18:f8:10:05:0f:
40:13:4b:90:4c:b2:68:15:3a:f7:2e:eb:3d:90:24:e9:46:c9:
1d:b5:b9:75:bc:b9:43:b1:8a:6a:01:6a:97:0d:fb:38:31:89:
c1:c0:c7:e7:99:08:96:e8:2a:a6:80:a3:2a:32:73:34:27:d8:
77:8c:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:39 2025 by rpki-client