Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: HQJ8iuQ5r0t/+3PHy6ckZ8zHF6kiSGb31HIdXWdGEjs=
Subject key identifier: D8:CE:C1:97:42:38:AD:6F:08:36:40:67:2F:EB:10:8F:39:FC:BC:86
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 01992255ABBBFB3D1AF5B034667E553D86CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 13A8
Signing time: Sun 07 Sep 2025 04:01:03 +0000
Manifest this update: Sun 07 Sep 2025 04:01:03 +0000
Manifest next update: Mon 08 Sep 2025 04:01:03 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: V0iZ2ezizPd9c8RS9IU01lcA8Lx0z2tEERRVGqNMctw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ab:bb:fb:3d:1a:f5:b0:34:66:7e:55:3d:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Sep 7 04:01:03 2025 GMT
Not After : Sep 8 04:01:03 2025 GMT
Subject: CN=d8cec1974238ad6f083640672feb108f39fcbc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:96:29:eb:85:82:aa:cd:98:9a:cb:af:b1:
82:44:0d:27:86:60:e9:59:57:25:e7:02:08:2d:55:
0a:ee:0f:8d:93:cc:4d:31:9a:1e:3f:1a:99:3d:2a:
c6:06:c0:34:87:0f:af:67:ae:c4:12:e5:1b:a6:08:
ce:e2:2f:ab:89:da:4e:c8:87:99:38:9c:94:c3:2c:
27:4c:2f:e0:a3:58:de:1c:e5:9d:92:e9:ca:eb:c5:
a9:2a:d3:09:ef:59:cf:8c:67:ab:d1:28:8c:22:a1:
b4:fa:20:b1:71:66:52:de:e9:f8:db:06:c6:56:c4:
b3:e3:c1:d6:0b:e8:dd:c7:0e:5e:89:d9:a7:dc:74:
55:5a:41:30:86:5f:6a:b9:70:4c:90:57:ec:2c:af:
c0:ca:2d:1f:0c:38:8d:9d:7a:c6:43:99:e5:2a:17:
6c:cd:cf:8d:e3:51:8a:17:f1:26:50:a8:d6:b5:70:
d8:10:f7:8c:13:d3:ab:1f:2a:c9:5e:c7:d4:fd:bb:
c8:76:a1:66:15:45:bd:fc:bf:b3:f2:be:6e:a3:8d:
04:ac:7b:73:91:e3:e0:03:72:e1:3b:73:3b:c7:ee:
64:b9:17:93:ac:a4:52:43:cc:3e:d9:0f:39:b2:c7:
1e:b7:a3:ce:dc:a4:8d:56:93:8f:cd:95:62:90:d8:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:C1:97:42:38:AD:6F:08:36:40:67:2F:EB:10:8F:39:FC:BC:86
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6f:5e:8e:1e:b3:1c:6d:37:5b:c8:46:59:9d:9b:5e:eb:8e:
e7:78:8e:06:76:c2:72:18:1d:aa:0c:31:63:56:8d:c6:24:a6:
25:21:e0:51:3a:d3:26:33:31:8d:69:3f:5e:95:b2:61:5c:a7:
b7:98:76:59:5b:84:73:bf:5d:18:0f:5c:c9:fa:03:54:87:f6:
6d:7a:ef:b1:09:11:fa:a0:ec:92:b2:88:fe:86:8a:56:2c:4e:
49:de:e3:ef:07:2d:54:ec:f1:2c:5c:9b:e9:87:ff:bf:73:3b:
2f:70:dd:66:4f:94:a6:5c:fc:13:c6:0a:ab:cd:5f:78:e6:f5:
94:33:b0:88:0a:56:96:cc:21:42:a1:bc:54:94:45:43:d4:5b:
49:6d:43:4e:e1:84:47:c2:54:dc:ba:8a:a4:81:e7:88:dd:5d:
a9:ff:f6:1f:b4:ac:45:20:72:ce:a0:3b:7c:cb:a4:77:3d:a2:
c9:94:89:ae:48:8c:00:2d:a4:01:f1:a2:50:22:f3:bd:78:76:
1d:8c:5e:5b:a9:ef:06:49:d6:d7:ba:f7:f9:96:b6:2c:50:41:
af:4d:e6:49:24:92:2f:8c:48:28:11:85:2f:d4:24:fe:8c:76:
de:8f:8b:c8:87:34:12:e3:cf:34:30:fc:1e:36:42:52:6b:3a:
40:4d:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:45 2025 by rpki-client