Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
File: wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json)
Hash identifier: opr7qdZfevZO4nqofWE7mVh+EKOIQU3Vt/s8Pb6Gd90=
Subject key identifier: 84:B5:9F:26:19:A6:95:C4:47:CB:E9:A3:15:63:BC:6D:E8:E0:62:79
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019960FD2095522F30AEE0D8301BDF62BAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
Manifest number: 17C1
Signing time: Fri 19 Sep 2025 08:00:25 +0000
Manifest this update: Fri 19 Sep 2025 08:00:25 +0000
Manifest next update: Sat 20 Sep 2025 08:00:25 +0000
Files and hashes: 1: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: NVeXtBA2cb3VL2KweLzSJG49nABLiF/CfHlZHm30fBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:fd:20:95:52:2f:30:ae:e0:d8:30:1b:df:62:ba:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 19 08:00:25 2025 GMT
Not After : Sep 20 08:00:25 2025 GMT
Subject: CN=84b59f2619a695c447cbe9a31563bc6de8e06279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:66:48:ca:2e:3c:c3:14:84:d2:31:40:28:
e1:f9:7f:aa:a7:23:33:b7:54:4c:47:af:59:51:8d:
ba:3e:a3:22:50:c1:c3:95:7e:a2:ab:e7:6a:6c:53:
13:b1:2a:41:f7:50:21:6b:88:e6:58:05:d9:80:03:
8f:55:d1:19:48:b0:46:b9:3c:db:82:27:20:99:85:
58:12:4a:57:ed:69:9b:ae:9c:98:d7:da:6b:cf:e1:
e9:c8:ec:2f:fe:3b:c2:2c:43:c1:2d:cc:3d:14:b5:
fe:5a:28:99:37:e7:da:28:fc:bb:a4:23:0f:c7:90:
32:74:f6:ca:c0:c6:37:18:d2:b3:18:20:45:e7:2a:
7c:12:c9:3d:20:cc:34:bf:79:8e:49:98:9b:e2:71:
6a:29:89:73:e4:11:6d:4a:0b:79:f2:de:57:7d:ae:
d1:d2:0f:86:4b:56:5f:37:02:ca:d1:51:89:38:d3:
9e:f0:8b:2f:8b:ec:f6:68:7e:27:0c:b1:ea:6b:c3:
a7:09:93:b4:9e:28:25:c4:49:64:7b:fb:13:b0:69:
66:60:21:07:1a:3c:b2:bc:ae:40:da:40:85:e2:08:
5d:9f:78:4f:6f:83:12:f6:40:50:5d:e5:c8:bc:4b:
b3:02:80:1d:93:cc:e5:cb:cb:05:f5:b7:38:d8:b3:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B5:9F:26:19:A6:95:C4:47:CB:E9:A3:15:63:BC:6D:E8:E0:62:79
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e5:22:a9:4c:94:b9:4e:3a:07:ef:da:b2:84:05:69:2c:b6:
6f:d5:dd:68:64:e2:9e:32:9c:40:11:10:cf:6e:ad:60:70:78:
4e:2e:b5:55:0a:9b:e5:37:74:54:5d:26:f3:ae:a7:e9:a6:29:
86:fa:17:ed:b1:1d:23:54:5e:db:f1:45:0c:58:ce:bc:c0:dd:
fc:5b:4c:bc:eb:ee:28:e1:51:58:5b:1e:cc:ff:39:e8:c1:fb:
53:f1:63:64:b5:8b:a1:c2:e6:63:5b:97:22:f6:a1:d6:50:c4:
76:ee:87:89:74:62:73:9c:89:c0:3a:84:aa:bb:37:6c:42:1e:
e7:7b:16:3d:eb:e7:ee:32:e4:d8:ac:2c:d9:53:1d:55:9e:43:
a0:a0:78:25:06:c6:fa:80:6e:60:f9:20:cf:2c:05:c5:ba:17:
94:24:da:b6:00:56:1d:56:9b:0e:73:b3:69:2e:ae:a2:b9:1a:
0c:ed:ca:f4:61:22:73:bd:21:05:09:36:87:9e:b8:37:d1:23:
2b:e1:f3:1f:cb:ef:50:64:da:3f:c7:e4:73:6c:02:17:48:c8:
ac:1d:38:1d:9c:c4:1b:3f:6e:3b:04:4d:de:df:26:5d:22:32:
54:21:52:6a:41:eb:98:f9:83:2d:ad:fb:e0:01:76:1c:75:3a:
f7:5f:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:03:21 2025 by rpki-client