Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File: A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier: 83CQtDKRbgtQ515uigQFSRteXA8Xt9n3GW3LRpFygtM=
Subject key identifier: D1:30:4D:7B:68:FD:73:02:BE:AE:20:DE:74:06:7F:B1:6D:F5:7B:CE
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer: /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial: 019A7112EA8B8AF5888AA10C994483E859E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number: 123E
Signing time: Tue 11 Nov 2025 04:00:56 +0000
Manifest this update: Tue 11 Nov 2025 04:00:56 +0000
Manifest next update: Wed 12 Nov 2025 04:00:56 +0000
Files and hashes: 1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: N/y0Bs0oXMAsKpwNz7467cDLVOc05rAfQeQCU+w/lTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ea:8b:8a:f5:88:8a:a1:0c:99:44:83:e8:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Validity
Not Before: Nov 11 04:00:56 2025 GMT
Not After : Nov 12 04:00:56 2025 GMT
Subject: CN=d1304d7b68fd7302beae20de74067fb16df57bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:aa:b6:cd:a5:95:55:ea:22:22:f2:69:42:
8d:5c:e7:b2:12:27:77:eb:9f:8c:fe:78:69:c7:56:
78:3a:8b:57:12:99:0b:e7:59:f3:c5:67:b4:6a:dc:
d5:a2:2d:19:28:02:1b:bb:38:5d:6b:54:c3:e5:e7:
62:39:c8:dd:f0:53:34:2c:c6:41:4b:09:ee:17:c3:
07:6b:35:b6:97:6e:03:e0:9c:92:30:dd:3b:9e:0d:
78:e7:17:fb:68:10:24:c5:db:fe:07:c9:d9:ad:5b:
47:b0:21:16:88:95:b1:ad:d0:4e:e8:7d:fc:d1:18:
34:4d:e6:e5:c2:a1:cc:0a:69:54:ad:74:54:9c:29:
a3:ff:ce:d4:e4:08:a4:76:9f:55:29:fa:e1:5b:ea:
f7:fc:84:ae:84:01:f3:9b:cd:3e:e3:0c:77:8b:40:
5f:2f:31:cb:ac:12:7f:25:b2:65:c2:14:0b:04:47:
ed:e8:47:4e:16:46:cd:e0:d1:ec:54:72:3b:b8:c5:
66:4e:c6:00:a1:a3:f1:28:38:16:51:e9:9e:5f:db:
12:e9:70:0c:10:0c:5c:64:2c:b6:d2:af:e3:49:78:
c7:25:a8:3b:01:e3:8b:43:35:a3:1c:c1:72:69:db:
be:70:83:e2:49:44:a8:4b:78:97:37:a6:6e:ab:4d:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:30:4D:7B:68:FD:73:02:BE:AE:20:DE:74:06:7F:B1:6D:F5:7B:CE
X509v3 Authority Key Identifier:
keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f4:f2:1e:0d:ed:fc:86:78:33:2c:0e:5d:77:60:0c:8e:fe:
c6:bc:70:0e:cf:5b:e3:74:37:83:7e:86:31:15:38:3c:a5:53:
45:db:0a:18:eb:15:c8:95:02:63:5f:db:f4:40:c7:ab:dd:6d:
f6:59:ba:c5:15:3a:d3:a0:cb:5c:88:ba:88:03:db:40:50:d9:
13:60:a4:03:e2:c7:53:d4:d0:fa:6e:76:b4:b1:02:73:28:67:
72:80:2e:da:b9:2c:55:7f:a1:6d:87:f0:1c:f2:56:a2:77:a0:
57:58:5e:cf:11:1a:04:0c:10:bc:c2:d3:3b:95:a8:80:ea:6f:
55:5a:26:03:28:eb:56:d2:c0:6b:cc:21:0e:da:ff:4e:1f:27:
12:61:38:16:d9:67:53:6f:99:01:47:d8:40:b6:09:b8:64:6d:
b8:f7:8d:3b:66:d3:5e:21:63:2c:3a:d4:cb:af:bd:54:ee:d9:
68:98:d5:f2:5b:7c:5f:c7:0e:b0:7a:12:b2:ac:5c:f2:56:8e:
d5:8a:35:04:22:f9:c8:a8:4d:c9:1f:e9:26:57:59:d1:2e:a3:
e0:e2:ea:26:d8:9f:05:25:ad:c5:fc:2b:35:bd:a6:2a:88:18:
c3:d6:0b:68:50:0f:e7:79:c0:89:03:af:89:fd:1c:14:81:3d:
c8:63:d7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:02 2025 by rpki-client