Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
File: wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json)
Hash identifier: /BaMh6gSPQQkrb6GqyS97Vc+FJJMJVUnFda13r231po=
Subject key identifier: CF:B5:15:BA:1A:0E:85:E0:B0:F2:E6:41:CD:02:22:43:B0:4C:C2:5D
Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
Certificate issuer: /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Certificate serial: 019A706E5091AD5BD87B1C5146BEFF079F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
Manifest number: 0A8F
Signing time: Tue 11 Nov 2025 01:01:08 +0000
Manifest this update: Tue 11 Nov 2025 01:01:08 +0000
Manifest next update: Wed 12 Nov 2025 01:01:08 +0000
Files and hashes: 1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: ZvVZSEyTdaMnI3vtmE2nHfMahY9AzT//YBo1RxlG988=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:50:91:ad:5b:d8:7b:1c:51:46:be:ff:07:9f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Validity
Not Before: Nov 11 01:01:08 2025 GMT
Not After : Nov 12 01:01:08 2025 GMT
Subject: CN=cfb515ba1a0e85e0b0f2e641cd022243b04cc25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:33:ff:f7:17:7a:ad:ea:3b:17:25:30:ab:
c1:94:4a:8a:5e:ad:64:98:3e:55:e5:1e:15:8d:c0:
9f:6d:9c:03:58:3d:cd:71:c4:3b:54:35:7e:23:cf:
d3:18:b8:27:af:c7:89:45:4a:38:78:aa:ff:f2:0b:
48:6a:6c:c8:28:21:81:30:14:67:88:17:e1:c9:01:
95:0c:5e:be:4c:5c:27:6e:b0:86:0c:e9:e2:71:1a:
59:99:f9:1e:68:a1:3d:a2:3b:2a:ef:91:30:ec:ad:
e9:8c:7d:eb:41:6e:30:63:9e:39:50:84:b2:ff:ce:
a1:3f:28:d0:ac:9f:5f:49:5a:9b:c4:19:e0:e5:a0:
86:da:7c:8a:8a:46:79:a1:11:e3:f9:21:c5:80:57:
63:e7:a2:5c:c5:81:50:29:19:37:d1:4e:10:e4:c5:
fe:f5:24:ac:ad:dd:ba:bc:5f:7d:2e:4b:ac:bc:7c:
8a:6a:ba:f6:1e:4f:3a:53:f8:e6:d2:4c:5d:05:e4:
af:9c:1c:79:08:f1:69:6f:47:69:c2:c8:48:13:18:
8b:a8:5b:2a:a1:47:f4:e9:2c:24:d9:02:8c:86:84:
3b:89:0f:9f:bd:07:8f:2c:ab:5b:3e:98:46:91:51:
18:99:61:45:77:7a:e2:21:a2:9f:fd:70:b2:b3:69:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:15:BA:1A:0E:85:E0:B0:F2:E6:41:CD:02:22:43:B0:4C:C2:5D
X509v3 Authority Key Identifier:
keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:61:f6:95:dc:47:f9:8c:5d:06:a5:e4:46:0f:ff:67:2f:75:
c4:ef:4f:81:7f:50:73:d8:fb:f0:c4:25:5c:02:12:c6:58:57:
96:83:15:d2:57:ff:ff:d4:d8:df:30:40:40:61:1d:c5:1e:62:
5e:ad:74:7e:21:c6:9f:9e:5a:a5:69:67:26:5d:df:d1:e8:47:
90:94:94:19:bd:61:99:f6:58:62:15:c2:dc:24:72:53:2a:6d:
24:ad:81:55:e6:f1:12:51:0a:de:57:4c:42:08:4e:ac:de:15:
ee:ee:a8:80:33:d0:11:b1:f3:18:bd:d3:95:16:17:d7:7c:dc:
a8:fc:6e:3c:da:52:88:f7:d3:ec:b5:95:34:70:fc:38:70:32:
a1:24:55:f4:89:e6:32:83:c4:f0:df:be:a8:cf:72:11:5f:e2:
7a:1e:be:e7:b3:e6:af:4a:15:75:61:94:6b:b1:6f:3a:23:1d:
eb:18:7e:b1:17:4f:9d:88:2f:2d:9d:d3:ee:ec:97:52:c1:fa:
5a:bf:11:27:30:89:af:b0:13:5d:d5:8c:be:1e:d3:0b:dc:81:
92:5b:d6:6d:a1:e1:dd:38:f8:ec:cb:a6:3f:f2:be:1a:f8:5c:
43:ea:83:19:2b:fd:12:ec:4b:74:0a:bf:75:98:f1:db:9f:9c:
04:96:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:43 2025 by rpki-client