Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: jeULGLfOHr4hc7RAvOlUyk59pcAHg4LvEUk4GS2LdMA=
Subject key identifier: 7C:8E:4D:D1:52:5E:6F:5A:5D:82:B7:66:A8:65:56:96:EA:E4:E2:FC
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 0199172CCF5B3768B6A5E2D3EDC42ABED38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 062A
Signing time: Fri 05 Sep 2025 00:00:36 +0000
Manifest this update: Fri 05 Sep 2025 00:00:36 +0000
Manifest next update: Sat 06 Sep 2025 00:00:36 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: QiVUi+9XDDrd+KjwKYwLb465dskJK1RzHCSDAUWz3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:cf:5b:37:68:b6:a5:e2:d3:ed:c4:2a:be:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Sep 5 00:00:36 2025 GMT
Not After : Sep 6 00:00:36 2025 GMT
Subject: CN=7c8e4dd1525e6f5a5d82b766a8655696eae4e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:ff:d9:b7:07:01:3a:11:82:68:3d:b6:a2:
e7:07:a7:74:0e:1d:f5:96:bc:6b:d7:d6:5e:e4:2c:
3f:0e:df:82:5b:52:74:3c:00:c4:4d:8d:40:08:1c:
87:f9:66:f3:bd:73:67:b8:13:5c:a6:1b:a0:6c:c7:
94:e1:66:aa:3c:de:09:cf:11:a3:fe:b2:0c:ff:7a:
de:d1:fb:7e:46:45:79:44:87:6e:ca:c0:a9:e7:93:
f7:2d:39:0f:b3:24:e0:a8:a8:ec:26:70:e9:4e:87:
00:1d:a0:6f:ac:0d:8c:ce:37:5c:2d:56:a1:3c:27:
5b:5c:c3:a7:fd:81:8a:a4:33:bb:42:39:77:d3:32:
e1:b8:be:f9:02:f6:89:0c:0a:1e:24:94:4d:51:60:
67:6c:ce:cc:5b:12:ee:5e:e3:8a:d8:32:5e:1c:90:
ad:ff:59:9d:21:f4:39:aa:41:93:14:be:04:49:4a:
4a:0f:e4:27:8b:a3:5e:d8:e3:22:a7:3d:7e:b4:4c:
cc:cd:1c:84:fa:e3:55:05:5a:be:9f:19:91:95:1d:
6f:00:06:25:9f:6c:04:29:e9:36:7e:db:15:72:9b:
ae:55:37:52:89:4b:c2:7d:e0:60:00:ad:26:d4:1d:
69:1f:93:38:d2:57:91:dc:40:64:fa:71:9c:3a:78:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8E:4D:D1:52:5E:6F:5A:5D:82:B7:66:A8:65:56:96:EA:E4:E2:FC
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e4:8c:9c:98:d8:e2:af:61:60:a1:e7:00:90:89:5d:9c:16:
92:76:e5:b2:bd:53:ef:d7:c9:b9:18:1b:11:fc:b8:8d:a3:b5:
40:84:8c:c0:5b:14:95:4e:6a:93:73:32:db:91:c5:f2:e8:c5:
a7:6e:cd:06:d8:75:92:16:f1:1f:54:28:0c:0e:c2:e8:d9:94:
c6:88:82:a9:f1:94:8d:41:78:f7:ea:7a:f4:f5:31:29:8c:a9:
53:d3:a2:55:d9:ce:dd:c0:00:e1:df:e0:4c:d2:2f:2a:64:bf:
15:3e:5d:a9:ed:9c:0e:78:eb:7f:dc:6b:b8:af:7b:e5:4c:6a:
a6:86:9b:2a:88:b9:a9:05:83:1d:b5:aa:34:ae:71:59:58:ec:
cd:4f:38:65:cf:42:58:dc:fa:2f:0e:c1:b7:dd:f1:48:b2:b9:
0d:f1:49:e1:78:77:45:cb:cf:c0:61:8b:4f:7a:d4:07:60:2e:
30:3d:49:85:47:84:76:7f:31:39:a7:8b:95:f3:8f:57:bd:14:
26:f9:c5:2d:a4:de:ec:79:5c:a2:88:a2:71:4a:8a:d4:fc:2f:
7e:df:7a:f1:e2:53:61:3f:b2:ad:80:bd:b0:74:2a:56:07:3f:
ec:97:75:17:58:c5:1a:10:68:ba:4d:be:8e:d4:7f:6d:4a:50:
e5:82:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:20:17 2025 by rpki-client