Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: FlODWTsACks2Tzn5fUDkgJeXh41Zr+Qh1OVvwkgJeTY=
Subject key identifier: E3:C2:86:8B:2B:BE:7F:AC:D6:AF:97:A2:C5:D3:23:65:17:BD:D5:A1
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 019A725CB6621526A92A7EF1130D7DFAABEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 1076
Signing time: Tue 11 Nov 2025 10:01:09 +0000
Manifest this update: Tue 11 Nov 2025 10:01:09 +0000
Manifest next update: Wed 12 Nov 2025 10:01:09 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: Eg8HLV07zSZ0hUHJmsUiThLMXLf5hzfASqo8ZQZi680=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b6:62:15:26:a9:2a:7e:f1:13:0d:7d:fa:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Nov 11 10:01:09 2025 GMT
Not After : Nov 12 10:01:09 2025 GMT
Subject: CN=e3c2868b2bbe7facd6af97a2c5d3236517bdd5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:94:a0:42:dd:91:f8:37:f8:a6:aa:a3:cc:
c8:0d:56:3a:de:6c:d2:36:81:19:88:55:98:7b:d9:
bb:41:3f:a3:b3:7d:47:8e:98:0a:86:fe:db:d6:59:
5d:fc:d3:24:23:f8:c7:15:c9:d1:68:b1:79:95:e4:
2e:2d:07:b8:4f:68:2e:d0:c8:05:af:24:a5:37:ff:
6d:ed:af:5e:1a:50:18:ca:a4:d7:5b:ed:a7:32:51:
f3:63:37:a0:00:6a:54:41:5a:71:92:2f:c2:07:51:
15:5e:d0:19:85:c1:b8:ef:13:b5:46:43:6e:1c:67:
27:11:08:34:56:b6:b3:10:69:4e:27:31:78:a7:8f:
7b:6f:10:fb:14:48:99:1a:e9:7c:cd:ac:98:12:f7:
c2:c7:f8:5c:ae:91:c2:99:3f:8a:e4:cb:b0:a7:72:
25:e3:e7:e9:a5:77:06:57:2f:44:eb:59:fd:e2:e5:
c2:28:60:c1:95:57:e3:f7:03:b5:be:71:e9:96:10:
69:d1:f4:8a:f2:64:b8:87:45:0f:6d:f7:84:b3:59:
cf:8c:7c:a2:2a:93:e2:08:37:4a:9a:b7:6e:36:b1:
ed:8d:bc:f1:d3:a9:2b:4d:86:97:ca:bf:98:fa:bd:
b6:ec:77:50:5f:57:f1:dd:db:9a:f0:b6:2e:6c:07:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:86:8B:2B:BE:7F:AC:D6:AF:97:A2:C5:D3:23:65:17:BD:D5:A1
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c9:7f:a4:27:05:25:8e:00:b2:1d:38:40:f9:9a:35:bf:57:
be:21:50:25:15:8e:67:68:8c:75:3f:ac:ff:9d:43:46:51:9d:
85:7a:c5:11:fa:69:04:9b:08:ab:47:81:dc:9d:2c:86:7b:63:
91:07:62:b1:d2:09:15:a3:b7:e8:ee:b9:f2:54:0e:6d:42:59:
c5:56:ab:c4:69:5d:cd:ca:5e:3c:0d:41:6a:eb:61:55:7e:03:
d9:db:ed:81:81:bd:9c:49:3a:a0:63:7c:3a:64:88:a3:1b:a8:
e7:8d:fc:d6:10:26:d1:11:61:a3:e7:8e:e0:2a:82:b8:34:06:
e8:4f:c3:36:12:42:07:8a:05:e9:dd:55:f1:09:a1:7d:90:ea:
0f:91:e1:ca:f3:60:5c:b1:63:2b:2f:4e:fb:51:96:29:03:af:
21:77:6e:cd:4d:48:38:8c:74:e8:58:b6:23:70:06:8c:a5:98:
0b:67:0a:ac:cc:c6:c3:82:ad:ac:65:dd:f3:ad:5d:df:bb:66:
43:6a:bc:ca:28:4c:9d:27:84:5d:db:18:fd:b2:84:e4:7e:0f:
a9:a6:42:da:78:2c:bf:90:62:4d:e7:46:a0:ee:ee:47:51:c4:
27:fa:2d:3f:83:34:34:e6:99:2b:c4:0a:8d:2c:b1:49:69:7d:
d4:26:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:46 2025 by rpki-client