Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: h9G/QMTcwcz+0HPqymRReetuz/Quj+QhNVSzUpEngWY=
Subject key identifier: 43:44:18:56:B1:32:FF:C1:09:1A:2D:77:C8:46:7C:CA:74:8C:34:DC
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 019921B1B4D682896D9C6D87FEF8E111C3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:01:58 +0000
Manifest this update: Sun 07 Sep 2025 01:01:58 +0000
Manifest next update: Mon 08 Sep 2025 01:01:58 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: rtiR3LBpUna75SRp3NsgbDSQpeG4sjNxkGlwPoUqyiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:b4:d6:82:89:6d:9c:6d:87:fe:f8:e1:11:c3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Sep 7 01:01:58 2025 GMT
Not After : Sep 8 01:01:58 2025 GMT
Subject: CN=43441856b132ffc1091a2d77c8467cca748c34dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:cf:0c:16:ba:c9:d5:79:61:8d:53:88:6b:
f2:58:4c:b9:a6:98:13:2b:b3:00:49:51:e9:12:1d:
55:65:6d:fa:62:66:ee:a1:9b:ef:38:41:b3:b1:5a:
a4:41:21:5d:24:c1:a1:74:9b:2f:11:80:ba:b6:f9:
9e:14:43:5d:08:bf:3a:b0:45:9c:a2:a4:ab:3b:67:
e7:28:bd:ec:a3:56:be:46:21:1b:9c:5c:ac:d9:7f:
39:dd:e4:02:62:82:8a:ab:bf:98:f9:86:c0:ad:eb:
a3:dc:d1:61:a3:c4:7d:5b:d7:42:0c:e6:82:8c:53:
d2:53:1e:31:41:49:66:0e:16:16:5c:bf:52:4e:d9:
15:2b:31:07:e9:2f:d3:e9:05:f2:5e:90:02:9d:7c:
3b:28:d1:9b:ab:a0:9d:88:18:eb:af:66:44:83:ce:
8e:4e:90:a8:6b:48:29:b1:37:fb:19:00:05:45:02:
aa:60:98:8f:37:56:5e:45:eb:db:03:49:1b:ac:5e:
7e:9e:e9:cf:a2:f9:86:f8:2e:58:36:6e:95:1b:2b:
96:c2:b3:f8:62:90:cb:cb:f0:8d:ba:bf:a0:29:56:
c0:30:2e:fb:62:3d:1d:d0:23:7f:e2:4f:ed:1e:81:
63:01:a4:f6:7c:34:eb:f5:fb:8f:fa:9e:7f:32:6e:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:18:56:B1:32:FF:C1:09:1A:2D:77:C8:46:7C:CA:74:8C:34:DC
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fb:72:69:92:81:1d:04:4d:bc:53:3b:92:54:0e:7d:c9:2f:
ae:47:bf:f4:75:3d:4f:f2:1b:5a:18:3a:4f:3c:cd:47:55:d0:
a5:1d:b8:54:0f:7f:17:df:43:ab:87:c7:cc:af:e0:ed:12:97:
a6:0b:53:c9:57:7e:6e:1f:66:1b:93:d0:ae:3b:a8:89:45:94:
7d:4a:ac:d0:77:3c:65:e5:45:ed:b7:df:7f:db:16:bb:d5:4b:
c3:da:35:da:bc:ae:a8:7b:01:b8:c6:f7:0d:10:2e:5c:76:ab:
41:1e:b9:e1:bf:67:9b:b9:ec:f9:c4:fd:30:59:3b:2a:8a:5a:
3e:58:a9:90:de:43:79:e8:68:7f:26:e8:ff:03:8c:f3:43:fe:
ef:a8:e5:92:03:a0:e4:89:66:88:7a:57:e3:21:af:80:d3:8e:
16:a9:de:cf:c4:81:d9:35:5e:c0:22:c7:1c:08:d1:a5:fd:dd:
ac:23:67:26:3f:4b:38:09:ff:5a:38:f2:0e:93:d3:ee:20:87:
5f:82:01:2f:6d:1e:12:6c:74:01:4b:19:df:33:37:31:5a:c8:
00:a6:0c:dc:7c:0f:57:67:8f:29:43:2e:c1:47:fc:15:77:34:
61:a9:4a:02:98:c3:8d:47:37:25:29:f0:6f:bb:4b:92:65:3b:
2a:7e:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:35 2025 by rpki-client