Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
File: wuLumMR1LMeKgj6b-aTsmt8cO80.mft (raw, json)
Hash identifier: CPQCOcyEJbQmsuh+Qzp5iia2hsm3iGQ5ejApLmYJsbY=
Subject key identifier: 4E:89:D8:7C:A3:75:5F:6B:73:6D:C1:ED:AE:0D:76:ED:7C:A9:E2:1D
Authority key identifier: C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD
Certificate issuer: /CN=c2e2ee98c4752cc78a823e9bf9a4ec9adf1c3bcd
Certificate serial: 019849656E91FD120E16670745FB8AD6B2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
Manifest number: 12AB
Signing time: Sun 27 Jul 2025 01:00:40 +0000
Manifest this update: Sun 27 Jul 2025 01:00:40 +0000
Manifest next update: Mon 28 Jul 2025 01:00:40 +0000
Files and hashes: 1: wuLumMR1LMeKgj6b-aTsmt8cO80.crl (hash: VM7W78T0bvzHQDENQ5zmPO8mxRubDyewPKk342Eb+mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6e:91:fd:12:0e:16:67:07:45:fb:8a:d6:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e2ee98c4752cc78a823e9bf9a4ec9adf1c3bcd
Validity
Not Before: Jul 27 01:00:40 2025 GMT
Not After : Jul 28 01:00:40 2025 GMT
Subject: CN=4e89d87ca3755f6b736dc1edae0d76ed7ca9e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:71:b2:e4:c4:d0:7e:0b:2a:d0:67:89:58:
87:e6:d2:cd:96:c3:ac:1d:14:02:54:74:9e:e3:b7:
a8:52:98:15:93:00:3e:f5:c8:be:c7:ce:c0:83:8e:
90:76:82:e4:3a:9e:e1:05:64:cc:f1:c7:9e:84:43:
58:15:80:18:da:ea:78:1d:66:d4:e2:12:74:65:32:
0a:de:5f:1e:53:52:5c:c6:2d:80:44:fa:67:50:77:
9c:10:77:85:98:59:c5:ca:b8:42:2c:d2:98:01:bc:
ee:a4:4a:59:9b:3e:fe:a8:ac:64:73:2b:0b:7d:51:
29:81:10:6f:16:a3:8e:fd:aa:4a:5c:1b:bf:e5:79:
34:e0:7c:a6:ca:12:5e:d3:cd:13:a3:30:16:94:7c:
b3:22:63:ce:39:5d:5e:a9:3f:3c:9d:fc:ab:92:18:
20:4f:6e:88:cc:86:5d:c5:fc:cb:18:b2:b3:1e:af:
7f:b8:a1:e1:62:eb:00:be:01:af:bf:16:37:5c:55:
49:13:e1:50:fe:d2:8b:3b:b2:6e:2c:c5:5e:b0:f9:
e9:4f:b0:a4:a1:98:9d:41:df:88:d2:94:ee:3b:c7:
04:4c:b5:e6:63:7f:b2:d9:aa:9b:8e:ba:b2:43:75:
cf:03:5a:fb:32:45:dd:f8:a6:43:8a:ac:94:44:03:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:D8:7C:A3:75:5F:6B:73:6D:C1:ED:AE:0D:76:ED:7C:A9:E2:1D
X509v3 Authority Key Identifier:
keyid:C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:98:41:0b:f5:f4:e2:db:85:30:73:ec:c1:dc:76:63:bf:15:
5d:e3:f7:03:fa:36:7b:e4:91:4c:13:6c:3c:1b:41:7d:04:c7:
e0:20:49:e4:c2:3b:46:f6:cf:e1:4f:e0:9d:43:2f:7d:a4:1c:
16:1e:74:2e:5d:8d:19:50:7b:27:bf:dc:31:ea:28:4b:f8:96:
d4:fe:23:98:34:78:17:78:78:5c:48:da:de:dd:41:85:98:fc:
29:a1:28:78:c4:26:41:f3:05:99:e1:34:a3:47:89:a2:2e:7e:
37:af:bc:ae:65:b1:08:6a:3b:fc:bd:95:52:ee:8b:18:c1:aa:
21:b4:94:14:2b:bc:f0:66:a5:17:24:3f:b2:e7:2f:09:c1:9e:
60:7c:04:02:da:60:aa:62:52:5b:6b:45:3f:56:b0:95:8a:64:
cb:8b:7c:44:55:9c:f2:1c:64:4f:d7:3e:c6:57:e1:00:be:07:
f6:59:c0:86:b5:fb:d7:5d:e3:ce:5a:43:b1:f9:b5:fd:58:d0:
21:f7:4f:60:e5:f2:1d:6e:26:0c:86:6d:8b:e9:bf:6f:03:16:
cd:25:43:59:84:a2:41:43:52:56:98:9f:59:b2:5a:48:5b:40:
e2:34:e9:d0:b9:1a:87:5a:3b:25:72:cc:6c:e3:13:59:88:61:
73:2f:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:58 2025 by rpki-client