Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
File: wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json)
Hash identifier: r35+jgeG4MJ/R/8xT+E3WaWacRgprnZ7wLCnQ5uyTrg=
Subject key identifier: A1:D8:FD:3D:05:0D:B0:2F:0E:1C:68:CD:27:A0:87:00:C4:25:21:B9
Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
Certificate issuer: /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Certificate serial: 019A72CA8D56B0748A349B11BBBB863B1AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
Manifest number: 0457
Signing time: Tue 11 Nov 2025 12:01:08 +0000
Manifest this update: Tue 11 Nov 2025 12:01:08 +0000
Manifest next update: Wed 12 Nov 2025 12:01:08 +0000
Files and hashes: 1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: 3s1Mjw5Eq2wGDqmwIl/DLayPoYpXKTSO6R7wuWe7CYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:8d:56:b0:74:8a:34:9b:11:bb:bb:86:3b:1a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Validity
Not Before: Nov 11 12:01:08 2025 GMT
Not After : Nov 12 12:01:08 2025 GMT
Subject: CN=a1d8fd3d050db02f0e1c68cd27a08700c42521b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:4c:e4:0a:22:e2:8a:a9:7b:97:5d:69:98:
c7:55:39:2c:0c:57:34:ee:d0:4d:48:ba:6e:ab:1f:
b1:1e:83:a9:4b:85:eb:9f:19:1f:b6:30:f8:32:76:
1f:c5:10:e2:c6:77:d5:d1:6c:5f:5d:bd:22:29:af:
c3:a3:b1:b0:bb:e5:d5:c1:65:54:e1:68:f7:26:25:
6c:1f:6a:8a:ef:17:a4:b5:5f:52:b6:8c:c7:04:69:
33:18:69:54:fa:13:20:72:8e:db:7d:cc:66:ac:06:
68:6b:5e:45:d1:fc:0d:00:6a:b0:5f:ca:66:88:7e:
f4:cb:76:cb:d0:1c:79:61:41:93:84:06:5c:6d:79:
61:f1:15:34:25:24:54:47:89:b6:58:47:71:8f:2f:
3e:43:76:fc:ae:29:93:a7:f0:17:79:c3:1e:cc:56:
fd:6f:d8:e4:bd:a5:67:e2:6a:ee:0c:28:d9:ef:61:
81:38:ec:1d:36:f7:3d:08:e7:7d:22:9e:cd:48:fa:
ca:1e:7d:1b:e0:5b:84:62:4f:c5:c9:94:51:50:09:
f4:39:da:d7:70:4a:04:63:4d:b7:ea:a5:01:74:eb:
e0:66:49:83:3d:e9:df:77:7c:d4:1d:88:5f:f7:4f:
d1:c8:6b:7e:bf:74:b3:c1:cd:66:52:7c:9f:6d:e3:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:FD:3D:05:0D:B0:2F:0E:1C:68:CD:27:A0:87:00:C4:25:21:B9
X509v3 Authority Key Identifier:
keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:59:47:3c:78:4a:78:7d:bd:59:df:09:1f:44:23:c2:f1:90:
fe:fe:8d:5a:de:42:23:8e:27:70:03:24:21:51:a7:37:5a:ad:
2d:b3:32:4b:d7:0e:2c:0a:4f:c1:c5:bf:49:fc:46:d1:25:d7:
0a:61:2d:0c:fd:79:ca:9a:c0:15:1d:fc:f6:5a:17:f6:f5:09:
c0:50:8a:a1:56:7a:b3:fb:31:34:92:3d:5e:05:e4:1d:e1:ab:
b2:ea:cb:d2:da:52:ec:d1:41:80:a4:5e:0b:0f:52:e6:75:ff:
01:e9:0b:7c:0c:7f:1f:4e:1e:61:86:df:47:f6:8c:19:92:65:
4a:f1:4a:96:3d:d6:2e:be:7f:03:40:66:25:d6:91:28:a4:12:
ca:14:13:e3:f2:ed:2f:17:b0:7c:e5:ec:e6:8b:91:94:29:61:
2e:eb:4b:d8:e6:cf:61:e2:e2:3d:74:10:ae:7a:88:43:ba:3a:
4b:c5:23:55:0b:30:a7:79:58:64:1a:8a:6e:cb:56:24:39:df:
21:55:a4:aa:f1:ff:41:1d:38:7d:73:0a:11:33:ed:e3:9c:0f:
74:53:19:12:42:15:19:e1:e3:a8:22:d5:01:88:11:1d:13:63:
87:7a:39:47:3e:67:45:5c:5c:d6:d0:d9:ba:57:b4:32:28:eb:
e2:55:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:09 2025 by rpki-client