Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
File: wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json)
Hash identifier: 78DXg17UY76NwiKscd9TmIFCfmjw8rndDM9d+JzpA6c=
Subject key identifier: 05:3D:3A:5E:5D:B6:AF:3B:B5:8B:FF:9D:BF:03:F4:20:47:65:C3:82
Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
Certificate issuer: /CN=c12c072c35909d525322b027586bacfad119f17d
Certificate serial: 019A71EEC30E353E7192AFC11B043453F17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
Manifest number: 0541
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: kkobrlz+9MLYqrjTAzc/I+RVg78aKb6JQ5P2DKLzKms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:0e:35:3e:71:92:af:c1:1b:04:34:53:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12c072c35909d525322b027586bacfad119f17d
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=053d3a5e5db6af3bb58bff9dbf03f4204765c382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:55:6d:2e:b9:37:eb:ba:cf:45:81:a3:41:
64:6c:02:95:d7:95:aa:6f:d3:e9:9b:19:bf:29:bb:
6e:8f:47:19:14:8d:40:20:19:07:31:29:86:a2:3c:
1c:08:80:5c:64:bf:34:de:7f:e1:78:f0:99:e2:1d:
71:94:36:05:fc:94:a0:30:d7:25:b1:f3:3b:ad:3d:
a1:1b:e0:fb:72:6e:e6:3f:94:83:24:88:df:98:d2:
62:7d:f8:6b:82:0f:53:93:51:7f:85:6c:18:76:6b:
e2:ac:cf:75:82:62:0e:b9:5f:bd:6e:a3:5a:71:08:
f6:eb:7c:25:d7:a3:4d:43:01:de:9d:b2:7c:9e:e4:
5a:a4:8c:4b:86:c2:c1:d2:37:60:9f:e2:e1:94:39:
0b:99:31:5a:d8:7b:15:2c:d8:9f:6c:b6:b8:87:27:
93:41:89:4e:96:27:3b:e4:f4:2c:c2:6f:7f:6d:cd:
96:fa:e0:58:82:e0:2b:31:bf:5c:02:3a:99:6d:6d:
2d:c4:b6:5f:c1:0c:78:1e:9c:95:08:96:ac:3a:42:
88:13:d1:29:15:91:6d:55:ae:9b:1f:5b:c7:08:8d:
f7:07:c0:65:19:48:f4:b8:9c:e0:6a:91:2c:7f:49:
3d:e6:73:ff:04:70:68:32:2c:e7:a1:56:86:d3:ca:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:3A:5E:5D:B6:AF:3B:B5:8B:FF:9D:BF:03:F4:20:47:65:C3:82
X509v3 Authority Key Identifier:
keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:d0:6c:55:ff:ac:cb:c8:69:be:8a:e1:1c:08:a1:0f:74:
00:8b:6b:86:ae:0c:10:c9:13:02:0d:89:e5:5a:cb:d6:5e:c7:
2c:14:e8:ef:5e:0b:19:27:fd:cf:83:90:33:86:66:53:15:70:
c4:36:95:e0:1d:db:7b:63:09:9d:b7:23:b3:e9:e9:97:8f:5a:
13:95:d2:bc:fc:4c:16:04:a5:a1:a1:d9:f8:a2:f6:d1:ae:52:
74:18:85:d0:c1:b9:ab:8c:a5:be:f7:ff:18:81:67:af:fb:9f:
df:72:3b:c9:6e:0e:ce:96:cb:0b:78:41:e2:fd:8c:30:38:9b:
f0:b8:bb:e2:a0:a3:b9:9c:40:5b:6f:cb:3f:29:eb:42:d5:29:
16:15:f9:48:1f:1a:45:7c:3f:24:6c:23:6c:18:ba:fc:1e:28:
bf:c8:4c:8e:0f:09:2c:4b:6a:a6:ee:d2:ee:57:5d:59:cb:a6:
af:0b:32:a8:36:de:27:fa:2f:36:e6:48:9f:cf:d8:e8:44:c7:
7e:5c:d7:ed:7c:62:16:7b:e5:df:e1:45:bd:55:44:5e:7f:73:
77:31:98:67:f7:2a:ab:ba:5b:f8:02:f1:44:3b:e6:f6:f3:71:
fd:42:92:cf:12:ea:07:9e:59:02:b1:bd:5c:f8:82:9f:41:65:
65:92:b0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:45 2025 by rpki-client