Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File: WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier: pkf0YN9sfkPV2SCfwXEonaa+q7s0ndE2HEv+e1VBHv4=
Subject key identifier: 41:0E:80:76:D5:F3:CC:0E:89:EC:15:B2:81:58:21:DA:33:0C:40:D4
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer: /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial: 019923A08473135C4D747176BB941536ED09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number: 14C2
Signing time: Sun 07 Sep 2025 10:02:26 +0000
Manifest this update: Sun 07 Sep 2025 10:02:26 +0000
Manifest next update: Mon 08 Sep 2025 10:02:26 +0000
Files and hashes: 1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: UWMDGbXy3Xe/wmErJjxs+nQEDKvSzIPR3wB4MX8obyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:84:73:13:5c:4d:74:71:76:bb:94:15:36:ed:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Validity
Not Before: Sep 7 10:02:26 2025 GMT
Not After : Sep 8 10:02:26 2025 GMT
Subject: CN=410e8076d5f3cc0e89ec15b2815821da330c40d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:33:b2:4e:81:95:83:62:81:21:2b:79:13:
44:fb:fb:9a:26:83:11:0e:5d:e2:41:17:2b:bf:a4:
4c:99:99:36:35:aa:fa:d9:27:44:3f:68:6a:7c:b7:
26:d3:f0:78:3a:82:1a:e1:a6:25:f9:27:db:c1:c7:
d7:9d:aa:0f:d6:f1:d1:ed:d3:7a:20:8b:b1:9b:e7:
57:e4:02:08:19:2c:16:4f:9a:9c:11:93:8b:df:e7:
a1:94:57:d5:bd:b7:cd:6a:b9:e5:24:3a:0c:c6:d6:
ad:80:13:c1:69:2d:69:f8:92:92:1b:86:0b:26:f5:
ab:58:e4:9c:c5:d3:9b:61:33:a5:e1:63:11:57:dd:
52:3f:8a:3e:a9:08:04:36:a4:58:bb:36:05:50:ee:
81:6e:62:00:6d:51:fd:04:a1:ec:2b:78:b9:c2:51:
f2:19:53:ae:df:a7:ab:1a:d7:67:7b:23:b1:fe:f7:
f1:65:26:0c:88:5d:0d:fd:c2:a0:46:ab:8b:98:c6:
83:91:ba:17:5e:76:b2:0c:4a:81:92:cf:16:70:47:
f0:c4:91:76:93:ba:b8:9f:27:0e:99:19:08:8e:fb:
0f:11:49:5e:98:94:67:a9:88:64:e1:f3:87:26:35:
af:9a:3d:3f:38:52:a9:cb:2f:8d:6c:d3:db:09:c7:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:80:76:D5:F3:CC:0E:89:EC:15:B2:81:58:21:DA:33:0C:40:D4
X509v3 Authority Key Identifier:
keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:75:3c:8d:c2:21:45:ce:d5:21:80:20:ed:a6:d1:79:b3:50:
64:bb:1e:3d:8b:c7:71:9e:6c:5f:80:5e:4a:ac:0b:5d:63:ea:
20:56:83:ee:05:f7:41:86:a2:a3:52:57:94:e6:1d:5c:27:82:
ee:03:57:dc:5b:9f:1d:d4:8a:bc:86:00:9b:cf:3e:b0:9a:95:
e2:89:63:66:52:e4:f5:3c:d9:4a:62:d3:69:4f:3d:52:38:8a:
29:83:b6:4f:0a:44:73:8a:3d:82:da:60:4b:b3:80:d3:33:e7:
36:f3:07:63:65:89:0d:ec:1e:2a:b9:91:47:08:c8:ef:3e:97:
62:95:dc:a0:c3:ca:54:1e:f6:1a:7c:9a:ce:09:6c:62:3f:fa:
e1:99:07:59:5b:de:41:c7:0b:48:06:8f:88:a9:9c:e9:27:63:
ca:d7:b7:a5:36:a3:4a:69:41:2e:b2:17:cc:11:4e:d0:3b:39:
8a:ef:28:a5:f4:c1:72:78:1c:60:21:70:3e:e1:f2:05:d9:6d:
32:bb:ba:b5:3f:5d:74:00:91:bc:7a:1c:e2:0e:f6:94:ef:eb:
ec:11:3c:c1:89:de:6d:fa:13:cb:1a:a1:6e:97:87:73:2f:94:
a0:0d:9a:e4:fc:0c:d2:bb:5c:7e:6a:34:bd:b2:40:ee:18:04:
cc:ee:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:02 2025 by rpki-client