
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: sjt89eNnrm4EbqkxlnU4/3BjLM9Zzd7uImQOvRuMpVo=
Subject key identifier: 98:DF:F5:9D:CA:95:43:21:13:E1:D3:0D:08:19:32:3E:53:74:06:A5
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 019922FA8EF0A16B6E7D6AAAEEDD382E0685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 0C92
Signing time: Sun 07 Sep 2025 07:01:09 +0000
Manifest this update: Sun 07 Sep 2025 07:01:09 +0000
Manifest next update: Mon 08 Sep 2025 07:01:09 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: CAn0mHezE2/YmTV2hlL1qAL+w6IywPDBP+bhMVp/jVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:8e:f0:a1:6b:6e:7d:6a:aa:ee:dd:38:2e:06:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Sep 7 07:01:09 2025 GMT
Not After : Sep 8 07:01:09 2025 GMT
Subject: CN=98dff59dca95432113e1d30d0819323e537406a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:a7:77:8c:5a:50:17:cc:d3:cb:8b:fd:0c:
f0:c7:fd:25:2d:cf:eb:0d:01:57:b3:bf:ec:fc:f2:
d2:88:18:05:35:d9:ef:40:c7:95:eb:b5:17:2d:cb:
9c:0d:5f:b0:c6:d9:57:7a:1d:b9:25:88:a2:71:38:
f9:68:f9:99:85:5f:2a:4d:c1:2d:f9:ce:06:8e:6d:
07:9e:35:d5:3c:85:ba:c0:4e:b2:34:0e:30:fa:a2:
4f:40:6e:db:e2:0d:ca:cc:a7:6c:42:7a:75:7e:be:
54:17:95:77:63:4a:49:38:04:75:91:d6:ba:3d:d2:
a9:c1:a3:35:14:48:3f:52:9a:8c:b0:4f:7d:e6:8f:
bb:63:15:6b:26:fc:e9:11:b4:47:d7:e6:d7:c3:e0:
24:53:9b:cf:23:cc:25:80:62:14:fd:a0:b7:d2:16:
23:1c:d9:64:ab:fc:a7:78:41:26:39:bb:97:91:45:
4a:b8:fc:59:8c:1c:5f:e4:fa:58:88:25:24:20:b6:
7f:35:e0:66:03:90:99:62:ae:36:a2:98:8e:bb:78:
42:33:86:4b:79:ab:81:04:bb:7a:1f:58:cb:85:15:
ea:f3:19:eb:d3:93:c1:e4:7d:b0:ac:e8:0d:d7:6b:
06:f5:df:d7:d3:41:f0:14:cf:d2:91:b0:1c:67:43:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:F5:9D:CA:95:43:21:13:E1:D3:0D:08:19:32:3E:53:74:06:A5
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5d:8b:17:53:25:09:97:1c:b9:4e:4a:a0:32:c3:6e:b0:ca:
5a:ca:89:79:a4:07:cf:f3:3f:4e:22:fb:e1:2d:3e:49:84:30:
be:96:0a:11:58:59:46:64:25:92:b1:00:82:60:55:e0:47:85:
43:5b:ef:57:78:e4:23:1d:32:f9:a4:77:d3:fd:f2:02:c9:3f:
fc:c2:3a:9a:87:dd:4e:5c:7b:ec:f2:7a:da:a9:d2:25:70:4f:
67:7b:07:56:b5:97:8b:f9:da:6d:90:a1:3f:ae:f4:c6:8f:cb:
fa:5b:df:cd:46:81:e9:68:14:f2:b6:45:fc:c5:18:fe:b7:63:
31:eb:5d:46:52:00:5b:51:a4:9f:38:4e:0b:47:de:34:3c:0b:
32:5e:b1:75:00:62:bb:66:4a:24:b1:f0:66:cd:be:99:15:b3:
d8:fb:fa:f1:8d:b9:e6:6a:4c:d6:f7:8a:2c:d4:d5:4d:50:a6:
7d:c2:9c:11:48:a7:92:d5:f0:bb:43:8b:0b:0d:33:bd:b8:34:
0e:38:22:f7:2b:9d:07:42:3a:b4:07:78:10:b3:50:5a:e1:95:
60:7a:d6:4b:38:68:0c:75:b4:9d:42:6f:06:1c:da:e4:6f:39:
20:94:12:8a:9a:b8:ee:6d:db:35:3b:8b:4c:e0:0b:19:79:83:
85:07:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:58 2025 by rpki-client