Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
File: dWQLapVyPRupdqH7EJKDnpRrWyQ.mft (raw, json)
Hash identifier: e8wknCuZfj85hkgopF0Qx5GAU2FZDomEKR7LezTR8gI=
Subject key identifier: B5:BE:7F:44:78:B2:6C:D9:28:2E:C7:07:EF:0B:F9:80:30:5A:91:68
Authority key identifier: 75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
Certificate issuer: /CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Certificate serial: 019A725CCB48E4F71DF215EF3C53BF6966B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
Manifest number: 0126
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: dWQLapVyPRupdqH7EJKDnpRrWyQ.crl (hash: 2UMH836Jm+ZMsinLr16MAm0MTUH1pmlnAG8VxWUmhHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cb:48:e4:f7:1d:f2:15:ef:3c:53:bf:69:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=b5be7f4478b26cd9282ec707ef0bf980305a9168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:f4:4a:b2:82:2a:54:69:d7:34:ff:00:0e:
97:0e:9f:87:fc:8f:72:f5:d1:e4:c3:85:f2:3d:40:
b2:43:45:85:0b:fb:a0:e7:af:ce:e0:68:cf:ba:88:
e0:55:a8:c2:9c:41:bb:e2:0c:25:d5:cf:6b:3f:39:
f6:19:48:47:af:30:d7:3c:f9:a5:59:a9:c2:fe:49:
6a:14:45:23:e7:15:ed:d8:c1:ec:af:b5:2f:50:7d:
85:35:7b:76:a6:d4:4d:d2:89:6f:57:2c:44:4e:75:
15:fd:b9:3b:cc:cb:4a:b5:4e:a9:fd:29:28:a6:7b:
27:e1:da:58:36:a3:dd:e5:a9:17:18:64:1e:c8:dc:
f1:01:fe:97:81:70:d4:7b:f8:ee:14:78:5c:69:c9:
16:90:d5:c9:3c:be:f9:4c:8a:a0:7b:c0:cb:66:7a:
1b:c0:1c:01:92:66:1a:e7:98:e4:db:35:4b:fe:65:
17:fd:e1:97:64:6d:e7:56:84:c0:db:81:06:88:95:
c1:60:d3:87:b6:b4:28:16:72:1a:0a:f7:2f:f6:c4:
3b:3f:8a:c6:51:8f:98:00:4e:d4:13:0d:24:d6:a8:
7b:06:d3:1e:17:76:4a:2a:fc:34:7b:ac:0e:0f:d6:
b3:2d:7b:ac:ce:62:a5:1b:9c:1f:b8:cf:4a:ed:e3:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BE:7F:44:78:B2:6C:D9:28:2E:C7:07:EF:0B:F9:80:30:5A:91:68
X509v3 Authority Key Identifier:
keyid:75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:91:c8:d2:c5:eb:6e:6c:48:13:ce:4d:fb:84:56:1a:85:eb:
70:d5:4e:75:ad:20:da:ac:61:f3:ff:e2:44:0b:3f:6f:c6:55:
2d:3f:91:00:c0:87:1e:90:d7:df:33:9e:37:f5:7d:79:52:92:
b0:c8:4e:65:2d:59:3d:43:dc:93:c2:63:4e:c8:32:ef:e3:96:
14:d7:bf:3a:66:23:ba:3c:0e:6b:c7:2f:9c:ae:e8:56:bb:9e:
d3:f5:a6:66:c4:ae:4e:7f:fb:f9:ea:f9:f9:77:d3:6f:e9:f9:
ed:67:7b:de:88:0f:1d:df:2d:b7:0b:b8:f2:1b:c5:32:77:d8:
4a:0f:9e:54:4e:c6:be:5d:cc:ab:5a:d3:7f:d4:24:4c:ce:e0:
2e:1d:ee:a7:f9:b3:5c:eb:d2:41:dc:a9:aa:5f:dd:b2:8d:ac:
6e:96:de:44:89:31:b5:38:9c:c9:a2:ee:36:9e:8b:90:64:e9:
71:b1:8f:ae:29:66:e8:f6:50:30:90:9e:fb:f8:c5:d3:69:68:
a0:79:c7:be:a5:7f:89:e2:64:50:3a:17:9b:ce:df:ce:fc:d9:
0d:c7:86:f6:ff:bd:29:b2:eb:e2:1d:dc:7d:1f:c7:cc:d7:77:
85:c7:44:33:c9:a5:ed:c4:7f:7c:75:b9:a1:58:09:eb:8a:c4:
81:53:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:19 2025 by rpki-client