Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File: w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier: Klmt2AQvWqPC7m7yzYrFnnGQeIMWPkYln3gvMoAWJus=
Subject key identifier: 17:77:B8:49:C2:BA:9F:C1:98:1B:18:0C:F3:C6:8E:4E:32:9C:82:13
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer: /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial: 019849D3A6C348FEABCC050CF736C81B784D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number: 0BDB
Signing time: Sun 27 Jul 2025 03:01:04 +0000
Manifest this update: Sun 27 Jul 2025 03:01:04 +0000
Manifest next update: Mon 28 Jul 2025 03:01:04 +0000
Files and hashes: 1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: N2NfQS/U1frWThpt9f6DDNJ/nL1CH2uALsznH1DY0kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a6:c3:48:fe:ab:cc:05:0c:f7:36:c8:1b:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Validity
Not Before: Jul 27 03:01:04 2025 GMT
Not After : Jul 28 03:01:04 2025 GMT
Subject: CN=1777b849c2ba9fc1981b180cf3c68e4e329c8213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:d2:ac:44:b3:3a:9d:06:5c:97:69:8f:fa:
8d:cc:5c:08:7d:6f:23:b8:69:24:e8:52:97:02:f0:
3d:c5:fb:31:d3:1f:78:71:86:f3:00:d3:7f:05:a8:
cb:4d:54:a4:bf:7a:d3:74:8e:54:96:65:f3:13:72:
99:d4:25:21:27:1e:d0:e2:0e:9f:2b:1d:ad:df:a0:
c9:4d:d3:82:d6:74:a9:e7:fd:5c:19:70:bf:6a:d9:
0d:6e:01:2e:2b:64:62:20:64:d4:bc:56:e0:d0:01:
5c:7b:e5:fe:62:f7:26:ce:9b:2f:b3:93:ce:fb:73:
65:64:6d:33:03:88:7a:4b:69:d1:f6:94:be:3f:8a:
37:e9:f7:91:84:91:69:64:9d:da:ba:72:4c:2d:f1:
30:ff:41:d6:00:33:40:dc:ae:e8:24:b2:50:dc:87:
88:46:a1:82:a2:37:47:7e:a5:e6:f0:9e:c4:2a:00:
12:bf:6a:27:cf:0e:8b:93:cc:6a:ed:d7:f6:7e:2f:
74:3d:e6:fc:68:4d:3f:1f:60:71:9d:ab:37:be:bf:
d5:ee:e8:6e:ac:8f:84:3c:bc:b8:26:32:9f:55:0d:
6a:ba:b4:ee:e9:35:d5:49:95:c6:4c:5f:ab:1f:40:
17:29:ee:bb:6e:b0:af:76:7c:d4:df:40:ea:d9:49:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:B8:49:C2:BA:9F:C1:98:1B:18:0C:F3:C6:8E:4E:32:9C:82:13
X509v3 Authority Key Identifier:
keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:b2:c2:a9:b5:23:9e:a5:5c:58:03:03:94:26:6f:82:d4:
34:df:cb:46:22:b6:49:00:be:0a:10:2c:3f:46:bd:35:fc:74:
6e:3a:15:0a:14:02:4d:fc:3c:2f:ed:fe:39:62:46:3d:42:a1:
ec:22:6b:2e:37:06:56:03:99:95:6e:3d:c6:90:a8:6f:9c:e7:
6d:1f:da:78:de:de:a9:2d:e1:b1:94:5f:8a:5d:4d:34:8f:1c:
a2:f1:01:20:44:47:69:5b:4b:96:85:79:f3:ce:a9:b1:9f:ad:
b5:f9:62:6a:3e:da:67:f5:dc:e3:6e:b0:07:22:58:83:6f:d9:
6c:d0:85:c7:56:9a:18:f7:76:2f:28:aa:2f:04:64:ae:e8:44:
e6:61:7c:0f:ff:ee:5b:37:05:1b:ff:9a:88:84:a1:35:97:cc:
af:76:62:53:e2:77:86:91:0a:1e:0e:6f:22:58:20:2a:b4:4e:
fc:4a:b8:f5:1a:e7:85:f6:31:97:a4:52:4d:94:c0:09:3f:97:
21:50:f1:b0:5e:3a:d3:39:e4:90:23:4e:54:f2:32:1d:a7:a8:
4e:f8:e4:e7:a1:b9:0e:64:0f:84:8a:04:bb:f9:c9:5b:db:b7:
9d:60:29:37:f1:ed:0e:0f:bb:ae:62:27:d5:0f:fd:1d:bc:70:
a4:6e:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:57 2025 by rpki-client