Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
File: wBgy1Ug13BTpEp4LprJRSzlLydM.mft (raw, json)
Hash identifier: oDRlkLlm49mequmbo3YaN7e6L48d+mDekv1h9lxIqIc=
Subject key identifier: 92:B5:44:B2:27:D5:E9:20:04:6C:97:7C:DD:4F:CC:66:E2:51:0C:B1
Authority key identifier: C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3
Certificate issuer: /CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3
Certificate serial: 019A71B79FFB90904716E2E85FB215B93AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: wBgy1Ug13BTpEp4LprJRSzlLydM.crl (hash: OYM5PdLWrvQ5oHrQKFVn1gvpN/QqC21PxmHJ1GrUN6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9f:fb:90:90:47:16:e2:e8:5f:b2:15:b9:3a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=92b544b227d5e920046c977cdd4fcc66e2510cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:53:b0:49:af:2d:20:5e:ca:6b:b5:f1:e1:81:
fe:4e:d5:82:b1:6f:b5:a7:ae:f5:9b:52:5d:21:0b:
52:7c:a4:5f:66:ef:29:bc:d4:a5:4d:17:2f:07:bf:
a1:f3:d5:88:1e:c2:a1:82:06:30:3c:11:c8:87:4e:
62:a7:bf:9f:05:aa:90:24:56:c3:4f:2a:cb:71:cd:
85:61:2f:b1:47:c0:e8:21:34:17:95:25:70:33:16:
2d:93:7d:64:be:c5:5e:20:c0:c5:6b:b4:0b:b0:72:
f5:ab:05:a4:89:31:c3:47:a8:ab:b0:58:0a:23:fb:
f7:97:3d:bb:f9:e5:ea:5c:a9:9d:ed:73:bf:ae:47:
cf:b1:2d:07:fe:2d:25:82:80:1d:9c:d6:1d:d2:b8:
4e:16:32:a9:32:4c:04:5a:c2:28:02:15:fe:18:51:
2f:5d:48:ec:ed:3e:d7:df:78:e4:48:d1:c2:0c:0c:
38:69:d1:72:b1:10:b1:8b:fe:91:47:db:d6:30:13:
9e:97:0c:92:bb:19:ef:f4:9b:ab:00:fd:54:11:02:
72:11:ff:4f:12:58:29:f9:2e:6c:7e:d5:87:b5:77:
55:69:1a:b3:47:17:ab:c3:3f:60:2c:ca:a5:65:3b:
63:6d:83:71:7e:f9:8f:a8:a6:c7:57:a3:78:88:2f:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B5:44:B2:27:D5:E9:20:04:6C:97:7C:DD:4F:CC:66:E2:51:0C:B1
X509v3 Authority Key Identifier:
keyid:C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a5:66:53:80:54:87:40:8c:b3:71:d2:03:89:2f:26:23:a3:
63:b9:93:12:b8:9c:da:6c:f3:13:de:aa:d6:40:84:e3:66:fc:
b3:47:c7:63:d8:1b:3e:52:da:4e:ea:14:c6:6f:ac:86:0f:fa:
4d:2f:d6:fe:60:e4:76:08:c9:ec:9f:ce:89:6b:f6:66:ee:b5:
52:ab:08:12:c5:39:12:5b:ca:c1:16:59:ec:37:09:88:b5:2c:
47:90:30:6b:9b:7e:7f:5b:80:a4:1a:63:f2:c8:d0:7f:69:2c:
23:ab:ec:61:29:07:bf:7a:1b:bd:ab:84:cd:e1:cd:8d:6c:de:
a7:28:5a:41:b4:88:27:d0:d3:c3:31:49:24:5c:af:49:da:17:
d4:7d:0a:28:bf:bb:44:f3:82:a1:d7:ec:9b:fd:22:d6:7f:bf:
8e:85:c6:2d:a3:eb:b0:6c:b0:2c:6c:8b:b5:97:88:9d:69:75:
d4:4e:cf:b7:68:18:b2:0c:f5:1d:62:ce:c9:06:4d:88:84:f0:
a4:3b:94:d4:7b:6e:06:ad:9e:e1:37:eb:dc:7a:37:4e:f8:26:
75:98:91:29:9b:a7:94:a6:84:b4:20:17:08:64:1f:29:f6:e6:
42:49:4f:ae:22:c1:7d:51:ae:33:61:a0:db:07:8b:57:da:80:
2f:ab:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:15 2025 by rpki-client