Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
File: wlZYX2ctCeHXfOXq9OPhUfhgroY.mft (raw, json)
Hash identifier: QxXnj4wBZELRZELwETdSBJqDZNcDaFLubV0lrYgczJQ=
Subject key identifier: 2A:8D:52:04:7C:98:23:8D:1F:B9:A0:15:44:0F:C9:30:AC:3D:15:0D
Authority key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
Certificate issuer: /CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Certificate serial: 019851C3D17ED3771CF913D3072F9EBFA316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
Manifest number: 1518
Signing time: Mon 28 Jul 2025 16:00:44 +0000
Manifest this update: Mon 28 Jul 2025 16:00:44 +0000
Manifest next update: Tue 29 Jul 2025 16:00:44 +0000
Files and hashes: 1: wlZYX2ctCeHXfOXq9OPhUfhgroY.crl (hash: vWr01sW6FkLsqByT/Tp6EGjwYlNFi/HZ1pdL25NWzy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:d1:7e:d3:77:1c:f9:13:d3:07:2f:9e:bf:a3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Validity
Not Before: Jul 28 16:00:44 2025 GMT
Not After : Jul 29 16:00:44 2025 GMT
Subject: CN=2a8d52047c98238d1fb9a015440fc930ac3d150d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:af:88:38:a6:84:3e:60:a8:ba:5a:40:62:
f2:b4:7f:0b:9b:38:36:9b:ac:d6:2c:c0:df:48:2d:
3c:95:a4:a1:0a:c7:af:cc:fd:ed:60:14:f7:f4:d9:
ef:ab:fc:9e:6d:4a:00:4c:b6:62:6a:f8:27:96:d2:
e3:0f:02:5d:91:38:56:61:50:87:df:a7:29:92:ae:
db:d4:d7:97:6b:62:28:51:9d:51:30:8b:a5:bd:e0:
00:d2:9f:38:f8:ac:5f:f6:ab:dd:5b:85:6c:4e:48:
cb:b7:29:f6:78:37:83:1a:e5:da:43:34:0d:91:80:
4a:57:ce:5a:57:0e:4c:84:37:a4:20:9d:d9:34:f2:
87:07:67:d0:91:da:d5:e4:8b:02:46:57:f8:54:b0:
db:11:61:ec:3b:8d:91:d6:ff:82:ea:44:f9:85:25:
46:01:7a:72:30:5d:6e:45:cf:b2:c3:fa:32:d1:2b:
6e:d9:20:44:b9:37:79:0f:1b:e2:06:04:92:42:04:
0f:0d:fe:5f:82:d7:52:fb:9d:47:47:b4:6b:69:9a:
23:77:80:b0:ec:f8:c3:92:20:41:cc:c9:d4:41:20:
0c:c5:1c:ee:89:95:6a:c5:9f:30:1d:6b:48:b8:f3:
38:f7:ae:4e:54:39:f0:b0:9e:6e:28:25:51:e3:30:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8D:52:04:7C:98:23:8D:1F:B9:A0:15:44:0F:C9:30:AC:3D:15:0D
X509v3 Authority Key Identifier:
keyid:C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:2e:49:38:f6:61:14:68:71:a3:36:36:69:cc:61:2a:4a:
a5:d7:10:1f:54:db:0d:60:94:be:21:8c:83:76:3c:b8:3e:62:
da:18:4a:c3:4d:5d:bd:05:95:a9:b3:a5:fc:07:8e:83:b0:85:
b2:9b:58:0f:90:f9:12:d3:64:0d:e7:89:ae:65:92:7e:dc:0b:
81:7c:e5:64:13:ef:50:5e:cd:6d:e8:78:d3:9a:58:3d:9f:c2:
a3:a1:f1:f4:0e:86:55:ed:62:0b:cb:06:5b:65:ff:65:71:bc:
14:1c:e5:a7:82:71:e8:dd:f6:d9:82:7b:42:7a:78:0b:4e:d3:
95:cd:b1:de:24:ed:e8:e9:4f:ed:c9:4f:7a:30:06:88:1b:14:
81:68:58:68:58:e9:43:c6:1c:aa:2d:f4:e3:c5:67:11:d8:a6:
8c:1b:03:e9:e0:3e:4f:41:1b:3a:2c:bd:7f:39:13:5b:21:f2:
9c:9c:83:fe:ec:6d:fb:86:2b:42:35:55:62:86:35:4c:34:e7:
83:46:e6:31:56:11:95:44:7a:45:f0:dd:fb:37:96:7c:11:0c:
c4:8d:76:c7:98:a4:94:7e:57:8e:e2:17:87:cc:aa:c4:a8:a5:
fe:83:f0:28:f6:b1:b5:b5:04:81:71:31:a3:9d:8a:a9:d7:d0:
ed:55:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:02:26 2025 by rpki-client