Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: 3+4cBHqvpk5mDVCwbyjpBGxKbGQ65e3uZpZHkt7fuYI=
Subject key identifier: 3B:A7:A3:0A:0D:BA:2D:BD:AC:58:F6:69:01:AC:94:15:25:22:F0:4A
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 019A72258A3981A659F3237AA098AA3100FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: 012C
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: 80swXT8MjgzORskl5TEw/98rey2JAzAIMqDDAPerMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8a:39:81:a6:59:f3:23:7a:a0:98:aa:31:00:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=3ba7a30a0dba2dbdac58f66901ac94152522f04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:e1:b3:52:51:48:9b:02:37:44:b6:5c:74:
f1:01:3f:96:e4:2c:40:17:68:2c:16:bf:73:5a:df:
82:7d:c1:bb:fc:94:f9:65:09:75:b5:d0:ce:70:fb:
8f:58:15:fd:a8:e6:9f:e7:9d:3c:3a:d6:99:6d:3d:
b7:82:8e:76:76:29:2a:84:d4:d0:48:c9:12:63:00:
d8:46:58:82:a0:59:ff:1f:40:04:b6:41:98:42:99:
48:27:27:c5:18:89:66:42:bb:aa:60:01:1b:34:1e:
d8:b5:e3:f3:1d:7f:c7:69:97:1a:ac:dc:b3:97:63:
2e:0f:d0:2f:2f:39:f9:0f:d5:0f:e3:d3:77:0c:b1:
a8:e0:e6:69:8e:93:c5:76:ae:61:9b:6e:47:36:41:
fa:2f:f8:04:5e:de:fe:4d:0d:a2:d0:61:ca:6a:e0:
4c:7f:7f:01:da:69:b4:80:80:14:76:57:1c:63:02:
77:d5:90:82:f4:9b:33:d1:ba:72:b4:a9:bd:8d:d3:
f8:16:0e:d5:4a:5e:2b:09:83:e9:4a:b5:b6:cb:8e:
14:3b:8c:99:39:5f:34:a4:54:6a:2b:4c:bc:6f:ac:
51:0f:a2:f9:bb:78:83:c4:d5:0c:98:46:ec:ed:1e:
ee:7f:f7:82:8b:0b:f5:7a:6c:2b:c1:df:99:60:a0:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:A3:0A:0D:BA:2D:BD:AC:58:F6:69:01:AC:94:15:25:22:F0:4A
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5c:4e:18:19:47:36:4b:b1:fa:cd:22:97:85:39:0a:d6:fb:
b8:20:cd:f3:87:15:d9:d8:55:ed:df:5b:b7:22:d6:e2:30:a9:
e8:c8:43:aa:cc:e1:7f:ca:e7:de:76:fd:5d:8b:96:cb:6e:11:
a9:33:23:40:45:82:50:04:b3:97:e2:5d:db:2e:fe:54:36:60:
01:9e:65:5a:f4:75:c7:2b:7f:16:d0:83:ab:8d:e1:25:ba:ad:
d2:49:57:2f:41:2c:34:a0:5c:a2:fa:c0:cc:95:ff:51:99:60:
7c:ea:39:4b:f7:ef:d2:93:ab:e5:6e:7e:8d:16:11:d0:14:de:
0d:e3:ab:38:54:19:a9:82:a4:94:2f:15:47:1d:58:05:6f:2d:
00:e1:d6:13:7f:39:b9:03:43:b6:ea:48:a0:12:dc:33:ec:cd:
3e:4e:e2:87:5c:77:89:5e:83:c4:74:ba:43:fe:f8:03:40:81:
b7:a0:a1:f4:e4:34:66:ef:90:a7:e8:3a:83:f9:26:c2:6a:30:
e2:69:d1:13:e4:9c:9b:77:52:1c:0f:38:9c:f8:e9:7e:e3:90:
f5:24:4f:ec:b6:91:b8:76:38:16:0b:03:a0:8f:9f:1f:19:73:
e4:e1:a7:80:21:38:c3:18:14:83:c2:45:bc:6c:bb:5e:4c:23:
3b:b8:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:36 2025 by rpki-client