Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File: wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier: FFR/Hs+4t3+FxrLkF4euL5ZGx2h/WI9FPfct59OtRU4=
Subject key identifier: 5C:30:D9:38:B3:88:75:4D:1B:66:E5:58:2F:A4:AC:13:94:F7:98:C2
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer: /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial: 019933EE4C011BDEF8FC63A220F8A037ABB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number: 1678
Signing time: Wed 10 Sep 2025 14:01:18 +0000
Manifest this update: Wed 10 Sep 2025 14:01:18 +0000
Manifest next update: Thu 11 Sep 2025 14:01:18 +0000
Files and hashes: 1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: RfOd25mWo6VktQTp6C5p0y7asl+GwTBlDMsnja4E1U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:4c:01:1b:de:f8:fc:63:a2:20:f8:a0:37:ab:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Validity
Not Before: Sep 10 14:01:18 2025 GMT
Not After : Sep 11 14:01:18 2025 GMT
Subject: CN=5c30d938b388754d1b66e5582fa4ac1394f798c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:26:ef:ef:7c:84:0d:f9:52:67:bc:1b:69:
4b:ef:08:e9:db:2e:a3:de:64:c5:73:3f:53:ed:2b:
f5:48:f3:f1:f7:9c:ec:c2:4b:fc:fb:f0:c7:06:e9:
e2:19:c8:8e:84:57:a8:cc:e5:15:1d:4d:4e:e5:5a:
e5:17:7f:f8:a2:54:b5:e0:fe:29:b7:01:b2:4d:43:
e9:9b:d7:ec:e6:cc:46:7a:09:1c:ef:04:22:93:ec:
a0:74:48:49:a7:5d:0c:4b:b1:54:e1:6e:50:8e:23:
d6:b2:8a:4e:91:63:34:94:e8:6d:72:a1:9e:d1:a7:
77:f3:bc:50:2d:89:4c:1b:ec:15:cf:84:be:91:f2:
4e:d0:8e:7c:b4:45:48:85:d4:6d:b9:d2:70:8d:6f:
be:4a:4e:84:b0:45:55:f0:16:67:c5:3c:bc:cc:62:
d2:58:73:8a:65:5c:ce:4d:72:be:21:e0:c0:0c:80:
7d:44:aa:af:c0:97:5f:1d:79:83:b4:d6:7b:bd:1f:
a5:58:a5:79:41:8a:c7:7c:2b:4c:b7:9b:a9:78:e4:
1a:05:e9:cb:4b:dc:1d:de:4b:14:12:cc:4b:4a:77:
23:e6:39:49:bd:82:e7:bb:34:9a:54:c7:fe:20:3f:
07:ab:13:4d:ab:e9:fd:e1:0c:ca:2a:d5:a5:48:22:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:D9:38:B3:88:75:4D:1B:66:E5:58:2F:A4:AC:13:94:F7:98:C2
X509v3 Authority Key Identifier:
keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:20:89:a0:a7:a9:13:a7:d1:b2:38:71:83:bd:a5:35:75:05:
9e:5e:fc:f6:63:20:91:18:72:c5:53:58:f1:2c:60:ab:0b:bb:
4b:5b:54:ff:62:46:01:b9:59:ac:00:d9:3d:3f:79:b3:68:42:
b6:ac:e0:c5:4c:a5:bf:d9:21:3a:f3:a1:6b:da:06:ff:12:c0:
cd:8d:93:7c:02:0e:31:9c:3d:01:22:4c:84:4e:a6:0a:6e:94:
b7:39:f3:a7:87:34:2c:ef:e4:f5:07:45:5c:fc:f5:52:1a:80:
92:43:ac:5d:9c:70:ea:61:a6:3b:7e:a4:07:2e:03:00:46:d2:
8b:66:02:97:91:3b:6a:5f:d0:0b:58:7f:08:15:68:6f:89:d0:
85:8b:5a:fd:4d:b5:26:92:54:d3:54:d7:25:38:8c:76:31:e5:
c9:61:e6:b0:b7:4e:f4:e8:e8:78:17:a1:20:4e:4f:d2:1d:8b:
cf:73:b3:12:35:62:03:0a:0c:23:2c:74:32:df:80:a5:90:35:
2c:84:88:1a:cd:fc:ce:72:83:ca:87:0d:b6:60:92:04:b1:ad:
29:93:93:f6:69:a0:16:3c:99:d8:18:3d:54:6e:73:a0:77:02:
ec:09:7a:b5:3a:68:fc:18:4c:0d:b2:c3:3b:7b:aa:2f:d9:4d:
e6:f8:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:26:22 2025 by rpki-client