Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
File: Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft (raw, json)
Hash identifier: ZRv2I7T21yXyzSqgu+vC6Q/Eh92E86ole74gZd3cz2I=
Subject key identifier: 3F:23:94:A1:8D:2E:ED:84:EA:50:A9:4C:FD:94:B9:34:0B:08:93:E2
Authority key identifier: 5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
Certificate issuer: /CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Certificate serial: 019A71B83EC0EFC85FB681AFF9D9432F3405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
Manifest number: 1516
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl (hash: 7TLfWRBN72jCzLRQYfyRqMVQ0eyENHJ8RXJjn5+EISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3e:c0:ef:c8:5f:b6:81:af:f9:d9:43:2f:34:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=3f2394a18d2eed84ea50a94cfd94b9340b0893e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9d:c7:1b:32:d8:8d:a4:f7:cf:f6:c9:eb:1b:
14:46:69:6d:cd:1d:10:e5:cb:80:26:7a:f2:f6:b1:
fe:19:99:8b:51:ac:fc:17:6f:cf:35:10:00:8a:a3:
a5:36:da:8a:7a:c9:ba:43:6a:31:ac:de:53:4c:bf:
ea:04:26:f5:89:38:4c:90:fe:1b:f0:74:75:6a:88:
f9:30:16:f7:3b:81:33:d8:cf:50:57:9e:90:6d:c8:
1e:03:72:dc:41:86:2a:e6:b5:14:0d:ab:fe:eb:a8:
3d:1b:58:53:a8:95:fe:76:e0:21:46:54:6b:88:48:
fc:a0:69:c1:59:49:5a:2d:cc:1f:6c:71:fd:81:2e:
6e:c8:72:a4:dd:a6:52:28:b0:3b:60:fb:20:6a:d7:
b5:fb:33:bc:3b:6e:f8:1b:c8:2c:0a:ce:13:ec:fa:
70:9b:f8:39:46:dd:bc:0b:f3:cb:78:aa:13:c8:55:
76:2d:e2:5c:6a:f8:c4:d3:b9:45:b9:b9:07:bb:2f:
0b:e4:77:3e:16:1c:85:39:9d:39:e8:a8:fc:6a:d4:
2d:3a:b2:f5:a5:53:74:50:9f:cf:64:6b:f3:5e:24:
c5:f8:46:39:88:af:4e:b7:c5:e7:05:dc:ab:f5:4a:
06:16:56:33:3c:5e:83:39:e8:24:69:53:c2:5b:de:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:94:A1:8D:2E:ED:84:EA:50:A9:4C:FD:94:B9:34:0B:08:93:E2
X509v3 Authority Key Identifier:
keyid:5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f0:5f:d1:e1:2d:a1:b1:35:a8:03:aa:90:49:15:d1:92:74:
45:15:6f:5f:5a:19:d7:e0:3e:21:d8:3c:7a:7e:d6:42:cc:03:
c7:03:65:8a:c2:f8:7f:24:d8:95:24:75:81:18:c7:32:bb:6e:
37:ee:de:c4:c7:00:db:dd:66:98:f4:f5:7b:4d:04:ad:72:62:
77:e2:e5:40:8c:ef:2f:bb:d6:32:96:b2:6e:0c:87:a8:92:bf:
be:e6:27:bc:57:ac:ee:23:6e:ab:5d:aa:1a:89:3d:c9:f2:45:
5b:7a:c7:a9:ca:4b:45:3b:7c:ba:4c:22:6a:e5:32:11:2f:85:
08:47:ba:dd:37:18:e3:ec:43:5e:82:85:8f:fa:0d:25:8f:be:
47:1d:a6:31:41:fa:96:7b:65:3a:52:38:16:58:17:9d:81:0b:
1e:ce:63:cd:55:f3:67:7c:0f:1c:05:89:62:3b:30:c2:98:8b:
eb:5d:7c:b6:81:e1:26:76:1c:da:c0:9c:ba:5e:fe:9f:23:51:
8c:cc:01:80:b7:27:c1:48:47:8f:6c:76:b6:c6:e0:e3:68:e9:
e9:b9:65:60:6d:8d:4d:c7:95:1b:9c:e8:24:68:93:69:3d:93:
4e:a8:0e:c1:6b:7d:08:5e:c2:db:8b:34:a6:5c:ac:2f:d8:be:
38:c5:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:36 2025 by rpki-client