
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier: sD+X4kyIXY3nnxUtQjm7voCQ2CRDlioLXycQKpv6/00=
Subject key identifier: 07:40:8E:99:2C:7E:7C:58:89:5D:AE:53:FC:97:84:15:2F:1C:EF:D7
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial: 0199239FD2904E4181DDD475977D73E7B2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number: 1462
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: w17SWS6oSYZdbNpcLatEv8kVli/MO0ggvdP74bloJYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d2:90:4e:41:81:dd:d4:75:97:7d:73:e7:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=07408e992c7e7c58895dae53fc9784152f1cefd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:b4:38:c1:21:cf:f4:57:c6:42:c9:97:af:
04:78:57:ea:0d:87:1d:df:7d:6a:02:32:71:ba:27:
28:fc:0c:6d:4a:4d:91:ee:b3:aa:71:1c:7f:34:df:
3b:d6:8a:6c:5e:de:4b:21:c2:6f:78:20:0f:8a:bf:
c2:b4:0d:29:0c:6e:57:7b:e0:d2:8d:bd:91:fd:72:
27:68:99:59:d5:71:2e:1e:48:4d:da:49:ca:6f:c3:
90:0e:d3:ef:25:4c:a8:11:1f:e5:e3:47:98:17:82:
97:10:22:4d:a6:ad:34:80:70:6c:10:75:6b:4a:28:
8b:31:e6:66:8d:15:2b:7f:ad:b1:3c:b5:4f:ad:5b:
10:9c:da:34:22:26:a3:05:07:29:f3:ef:5c:d1:ec:
ee:bf:55:6b:6e:f6:45:d6:a4:1b:52:34:50:e5:e7:
d2:0b:ba:34:55:ff:a8:20:27:58:52:02:58:71:e0:
11:cf:be:d2:10:44:37:f9:dc:1b:f0:ea:73:63:bc:
47:38:b3:c7:ba:79:b0:22:ff:4f:2b:74:0c:09:76:
23:58:68:fc:e2:d7:a7:c8:ad:26:df:3f:2f:0a:84:
98:a4:96:1c:7f:ec:54:be:87:9e:40:4c:ff:ec:6a:
d2:53:ff:a0:43:d8:db:15:34:21:fb:c7:15:5e:78:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:8E:99:2C:7E:7C:58:89:5D:AE:53:FC:97:84:15:2F:1C:EF:D7
X509v3 Authority Key Identifier:
keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6f:7e:14:58:a5:49:cb:fa:e6:74:86:f3:41:13:a2:db:45:
e8:48:0f:5d:7f:a3:b6:89:06:74:89:60:80:21:0d:8b:7e:53:
9e:4f:8e:1e:73:43:cd:4f:c1:7b:48:79:42:f2:3d:8b:5c:ed:
b1:eb:ed:76:cb:eb:62:13:a7:ba:44:5a:22:2d:99:3d:6d:4b:
f4:7f:49:66:e9:59:77:61:8c:da:44:5a:f7:a4:d9:c8:80:83:
7f:cd:ff:ae:95:89:4a:01:55:ea:9b:ab:7b:50:ca:b5:2d:85:
be:ff:20:2b:33:78:f5:f2:84:72:eb:7b:f4:8b:94:05:32:63:
e6:7b:17:da:61:26:07:88:31:89:be:70:f9:47:3a:44:d4:1a:
f4:3e:c8:34:8b:b8:08:27:8a:8a:09:cc:fb:d0:54:c1:43:ad:
ee:04:b4:a3:82:99:33:c5:b0:5d:76:56:51:87:c7:30:a1:ba:
3f:57:14:70:04:66:65:f2:c3:82:c1:38:0a:52:fb:95:0e:11:
7c:f5:95:87:ae:03:a8:fc:ec:a3:9b:f6:ad:fe:55:d3:44:d6:
cd:5d:24:20:0b:f2:40:b7:48:69:57:4e:b0:86:bd:f6:42:b4:
0b:f5:a9:b3:82:6c:f2:2e:04:32:12:56:fb:1a:89:ba:3a:42:
af:8b:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:20 2025 by rpki-client