Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier: slC27DK4RqpOtwA2CQA1BcNAObfst5TRLXUAlwDSzNQ=
Subject key identifier: B8:29:6E:DC:9F:45:0E:AF:F2:0D:65:0B:0C:1A:D3:37:9B:43:C3:E6
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial: 019A71EEE320263845BC72E6C5702749FA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number: 02A0
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: KkR906CfnzRuqOZLse6/zb484nNhaiobd9Xglubp6zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e3:20:26:38:45:bc:72:e6:c5:70:27:49:fa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=b8296edc9f450eaff20d650b0c1ad3379b43c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:27:e4:40:67:77:f3:0d:fd:b9:c1:71:ab:
45:4b:4a:bd:5d:50:d0:ee:dd:5a:95:5d:e6:3a:a1:
3b:45:c8:2d:cc:8c:db:24:bd:7c:08:22:34:25:ba:
16:5f:5c:2b:06:de:cb:01:5c:80:25:90:29:17:1b:
44:15:be:56:69:76:e9:a6:d1:3c:a8:1b:86:15:b4:
84:35:1d:99:f3:d0:6d:c5:82:9f:d7:0c:66:88:34:
49:9a:10:ae:19:75:12:fb:e4:c2:5e:45:fb:08:29:
c1:15:10:ab:a7:b8:89:f2:f3:02:75:b0:5f:42:10:
10:4d:c5:85:e5:20:0e:90:a6:44:9c:41:9b:89:2c:
a0:ca:be:11:8b:6c:c1:7f:66:ec:40:5c:41:ac:79:
76:b9:f7:97:d8:a4:6e:d7:8b:5f:b2:33:de:b3:6d:
ff:bc:bf:e2:38:7a:f2:5b:41:ea:68:44:b3:e3:2d:
b6:10:6b:5e:f3:cf:95:a1:96:cb:43:96:b3:d4:0d:
6e:47:c5:b2:b6:29:35:7d:5e:92:cc:f6:03:a0:65:
09:42:d9:5d:a0:fd:09:27:aa:97:41:04:d9:12:45:
c3:46:8b:39:ec:97:29:03:42:b5:54:da:87:ed:15:
82:da:ca:09:31:27:80:0c:81:67:33:c7:4b:84:be:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:6E:DC:9F:45:0E:AF:F2:0D:65:0B:0C:1A:D3:37:9B:43:C3:E6
X509v3 Authority Key Identifier:
keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a7:08:c7:c1:39:82:c3:c4:d4:c2:7e:58:61:a7:28:9f:1b:
23:78:eb:90:ea:fe:25:61:ba:91:ce:c6:28:d2:be:cb:75:82:
2e:b1:70:17:2d:8f:f4:0c:f4:89:a3:01:f6:dc:2c:8a:d6:86:
b5:a6:88:14:96:50:c2:c4:cf:9d:18:4e:c3:3e:e6:fd:2e:32:
00:ac:03:36:52:98:02:61:69:12:85:fa:5a:b8:6e:59:15:1b:
6c:26:52:fe:16:76:bd:a3:91:29:f1:a4:4b:f4:8b:14:7d:e8:
1a:c4:8b:1a:43:aa:3a:ab:aa:1a:c9:a1:71:f7:3d:7b:15:89:
7a:94:d8:05:2a:53:6f:65:ef:a7:76:f2:58:dc:14:21:37:d9:
0a:de:3e:e6:16:37:86:a2:4a:76:51:e7:32:b0:9c:44:c1:08:
2c:0e:f7:9b:e3:9f:90:56:dc:85:dc:67:a3:0c:ae:07:ae:b6:
98:b4:30:87:a1:af:2a:18:e4:86:15:d0:a2:31:d7:ef:fb:3a:
dc:5c:35:02:d9:47:63:58:ed:fb:63:a2:21:b2:1e:71:20:75:
d0:21:62:c3:74:56:95:30:a4:aa:b7:7d:de:fa:43:eb:92:dd:
1d:4d:c4:2f:35:b3:b7:88:23:8a:32:9f:a0:80:1a:a4:e8:5f:
30:5a:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:46 2025 by rpki-client