Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: MvSKdJeqtcUJ2DWSWPjisVRcu85Hwex+/JFKI7IIpaU=
Subject key identifier: 06:A0:8F:3A:2F:0D:57:29:D8:EC:11:EB:6D:C3:52:51:B9:0D:D2:C5
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 019A729376400DBE4C40839F5669AFB8D0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 12C4
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: ZIK/m0LtJdj8A5qWTn3zOn6o6irZMwrRTaZxPkvKo7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:76:40:0d:be:4c:40:83:9f:56:69:af:b8:d0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=06a08f3a2f0d5729d8ec11eb6dc35251b90dd2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:81:9a:b4:a2:e0:a8:9b:35:65:5b:96:13:
5e:f9:5b:e7:0f:0f:15:bd:b3:0d:9c:18:ee:c7:f9:
1f:37:41:3e:52:fd:9d:77:ee:da:ce:1e:ea:62:76:
cb:4c:39:32:ac:c1:32:7a:7c:f5:6a:01:32:84:66:
15:7e:c1:76:3e:a1:b6:b1:0e:a8:d3:60:f0:03:68:
1c:37:d3:4f:16:67:9d:f3:4d:45:10:c0:f3:47:0f:
1f:e1:be:20:eb:32:e1:41:03:ac:09:6f:76:ba:15:
b8:54:09:1a:c6:10:a6:5c:a9:f5:2f:fc:be:4b:c7:
01:7c:2b:9b:eb:0e:88:70:94:e4:b3:d4:e0:9b:ba:
2b:e4:d0:10:b0:51:4c:01:2b:ef:cf:1e:60:d3:e6:
8c:da:14:77:ec:1b:45:42:5c:fc:ce:51:d8:a7:c7:
12:27:de:04:3a:94:1c:91:34:c6:1b:60:45:e9:ba:
af:82:1e:61:ea:28:0f:6d:96:eb:91:b8:f5:9c:aa:
57:e0:7b:0e:c1:0a:7a:8d:a7:7f:f3:0d:8c:e4:46:
57:80:e0:0f:bf:f5:16:20:20:f2:c1:e4:b2:ca:b8:
18:a2:37:8a:45:1b:bb:1a:f7:45:f5:69:cf:55:2e:
20:80:4f:c0:d7:70:55:b8:5d:47:6f:d7:0e:da:1e:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:8F:3A:2F:0D:57:29:D8:EC:11:EB:6D:C3:52:51:B9:0D:D2:C5
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:75:69:7f:95:21:44:a2:9c:b5:a8:8e:6e:46:4e:35:f6:
29:15:be:55:3f:01:e8:97:a7:37:62:c3:76:ef:6e:8e:e8:40:
fd:52:9e:f5:24:37:3c:48:a7:1d:2f:70:73:e0:ed:0e:a7:ad:
21:35:af:18:d9:35:de:5b:f1:90:41:de:ad:bd:9f:08:7b:4f:
12:49:2e:05:3b:3f:4a:2e:72:c2:33:6e:ef:9d:cc:0d:79:9d:
5d:b6:ad:16:44:ad:aa:4f:29:72:14:13:ff:d1:8f:b6:f8:5d:
6f:b9:c6:8d:b4:00:ed:07:20:dc:f1:53:55:6b:5b:57:6b:96:
99:cb:00:80:41:27:b6:da:7b:0b:f8:3c:3f:66:28:37:a8:ce:
8c:b6:85:ea:f8:e5:ea:62:90:24:d1:2b:f6:48:11:21:fd:7b:
14:dc:14:de:ff:fd:27:de:7f:53:3f:46:a6:11:93:fb:97:4b:
91:28:73:49:b1:98:55:56:a1:47:a6:ba:9e:22:41:af:0c:e6:
1f:72:e4:43:4a:6e:55:eb:e0:50:fe:38:eb:3d:1b:4b:d3:de:
35:cb:18:1f:39:54:de:1d:11:19:17:38:ab:57:7b:c6:3b:17:
bd:b3:14:56:3f:92:56:48:a5:a7:38:dd:f1:66:af:0a:70:3a:
88:53:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:48 2025 by rpki-client