Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier: rwUFfDCW2awW0MpdZsDzh+NpR9v9x1sJ6XK+6EorsEc=
Subject key identifier: 87:95:41:72:14:23:C2:F4:B0:8E:3A:A8:5C:36:3A:EC:B2:E1:E4:0C
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial: 01984AAEF32485C73B959C5A80CAF966FDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number: 13A6
Signing time: Sun 27 Jul 2025 07:00:36 +0000
Manifest this update: Sun 27 Jul 2025 07:00:36 +0000
Manifest next update: Mon 28 Jul 2025 07:00:36 +0000
Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: jC050F5pNQadTyahU8T+TqLHFsygx6gO8aOOKuR/KtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f3:24:85:c7:3b:95:9c:5a:80:ca:f9:66:fd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Validity
Not Before: Jul 27 07:00:36 2025 GMT
Not After : Jul 28 07:00:36 2025 GMT
Subject: CN=879541721423c2f4b08e3aa85c363aecb2e1e40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:c6:6a:47:f4:fa:53:26:46:63:01:0c:bf:
3e:9c:48:d1:7f:a5:98:25:6e:3b:ce:1f:6b:7b:59:
7e:6c:cd:f2:0c:45:53:1b:1c:59:a0:83:fd:44:16:
28:25:9b:9c:d2:fc:8f:12:5c:3b:95:e4:37:57:36:
1c:a2:a6:07:31:bc:03:cb:d9:e3:1f:ba:72:4a:f2:
0b:24:e9:1a:00:cb:8e:0f:f8:a7:97:17:1b:7c:d9:
9b:f5:a3:4d:d5:16:69:a4:c9:f1:a5:bf:78:ec:8e:
c0:53:b7:7f:1b:b9:de:9b:b8:89:be:ef:e0:b8:6a:
25:35:04:b1:63:45:e3:cf:3a:73:4d:96:d3:90:12:
b0:ec:9b:04:d0:5f:c3:c1:8d:a1:1e:90:15:ad:6c:
2c:b9:d9:c6:05:de:5f:33:74:19:d8:42:76:09:ed:
f0:cf:9e:0f:41:ff:17:67:4b:ef:18:a8:2e:53:b2:
b4:38:fe:93:4c:29:23:83:ff:82:91:6a:5c:60:42:
81:a8:12:d8:b6:46:64:57:80:fd:eb:03:ce:a4:74:
21:4d:ca:8c:01:07:c0:a4:4a:b0:2e:bc:72:57:92:
f0:4b:35:3a:23:cc:c0:2f:27:7d:df:0e:64:91:eb:
2a:3d:41:53:09:92:aa:47:c6:f6:0e:ac:61:9d:4c:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:41:72:14:23:C2:F4:B0:8E:3A:A8:5C:36:3A:EC:B2:E1:E4:0C
X509v3 Authority Key Identifier:
keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:10:4b:62:9b:d4:25:da:97:75:58:a7:03:23:3e:72:2d:17:
5b:df:dd:c4:dd:73:f8:1b:5c:2e:1d:1a:c3:0f:72:23:68:97:
6e:70:c8:09:d6:be:25:4f:e5:2a:c9:21:b7:fe:ec:fd:e8:24:
0a:7d:66:35:1a:3d:00:cb:d5:6e:20:e5:8a:0e:95:db:3c:81:
f4:49:f9:88:b7:c4:a4:17:68:91:28:5f:bf:f8:eb:32:50:fa:
e1:43:0b:e2:26:7b:8a:cb:1e:42:bb:4b:e6:be:b9:f6:30:ce:
95:e2:55:9e:d3:de:83:e9:7c:30:2b:dc:d0:6c:44:b0:65:f7:
6d:16:51:05:d6:a7:5f:2e:e8:b3:9f:39:39:39:85:ad:26:0a:
57:ff:9a:76:8c:98:4f:9d:a1:35:61:87:bb:10:66:81:60:ed:
19:b7:bf:c6:96:4b:05:27:0d:3a:7a:98:58:76:4e:05:05:fe:
80:6a:10:40:03:ea:83:e4:88:4a:4a:b2:dd:e3:b6:07:8e:0a:
f0:1a:16:fb:ea:4e:e7:61:16:e1:df:8c:f2:be:13:89:76:91:
1f:b1:46:13:51:49:d2:ba:5b:c2:dd:cf:7a:24:36:f3:c8:6e:
75:dc:b5:83:7f:f8:5a:3e:de:bc:12:2c:0b:dc:73:07:33:6e:
e4:72:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:36:02 2025 by rpki-client