Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: ILECidY33uwHNTFCcGAgxUhhU7gftxv54YcPaXdcnCU=
Subject key identifier: BB:62:3C:C0:B2:C4:EC:B7:58:76:08:94:A6:EA:A0:F3:2B:83:AC:02
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 019A725C8A37F048512A207F0B9332F81982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 1456
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: 6xxPYnB67ZSdvlxEC/FEzEn57ZLLG9lCJPTNuHmQekE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8a:37:f0:48:51:2a:20:7f:0b:93:32:f8:19:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=bb623cc0b2c4ecb758760894a6eaa0f32b83ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:a2:a9:bb:cd:76:da:5f:7c:f4:04:2f:b7:
5b:76:f5:3e:c9:1c:54:70:be:cc:25:9a:22:3d:0e:
5a:7e:68:4a:11:1a:fe:93:77:37:90:4b:6b:d3:fe:
dd:3d:26:53:0b:3e:ea:12:b5:66:4c:c2:8d:4c:e5:
b5:b3:3e:83:2b:95:b8:8a:36:28:c0:fd:31:16:70:
cf:ed:35:d0:26:5c:7e:90:4f:d3:1f:96:c7:ca:5b:
5f:e9:0f:09:a8:79:b5:1f:9b:27:0c:d4:f7:43:f4:
5d:33:b6:59:90:dc:2a:29:cf:ef:d4:8d:cd:85:6f:
ca:9c:f3:84:8f:fe:b9:d1:2d:8c:10:51:a0:74:ef:
54:96:1d:c1:77:e9:3f:9c:33:55:be:7c:c9:ab:fb:
35:e8:d7:01:d6:85:fc:ec:3c:42:85:f2:ff:a1:c8:
36:e2:39:02:d1:5a:08:b5:da:74:ee:ad:21:58:df:
1a:aa:ee:d1:be:94:3c:97:d2:d5:34:61:68:8c:75:
f6:af:c2:2e:80:38:92:68:5c:eb:66:20:10:97:29:
0a:32:de:f5:cd:96:e5:bf:7d:d8:8c:5c:f7:21:6d:
91:d2:b1:e6:48:1e:9e:2e:fd:51:10:b4:04:b4:b1:
fc:f3:bc:e6:2a:fc:30:21:b1:45:e3:50:41:49:90:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:3C:C0:B2:C4:EC:B7:58:76:08:94:A6:EA:A0:F3:2B:83:AC:02
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:41:76:b0:b5:ca:57:26:6d:26:61:72:49:56:92:ac:c7:3e:
3e:d6:cb:5b:92:b0:59:69:ac:13:3e:ec:f3:55:94:d6:ab:73:
ac:8d:cf:06:d0:a9:d4:5d:ea:aa:92:fb:70:45:11:0e:72:50:
be:39:55:a8:ea:39:96:08:53:44:7a:4c:0e:9f:55:73:55:66:
9f:75:b3:a6:66:df:be:d7:d7:05:22:40:fb:39:fe:2a:3b:87:
14:c0:1d:48:22:bf:79:7a:eb:b8:dd:54:85:e0:0c:72:ff:df:
12:0c:82:50:e4:70:bc:8f:8d:24:36:90:91:74:12:ea:b3:5c:
0b:b2:84:36:50:ee:dc:fa:7d:2f:0d:dd:51:c7:d6:19:f8:c8:
4f:eb:55:0b:9a:a6:30:c9:64:b0:d5:99:6e:0f:a9:cf:62:c6:
23:4e:0f:c0:5f:31:8d:10:df:7b:22:d2:df:b3:ec:18:7c:ce:
c3:dd:68:43:c0:73:fb:4f:d0:c5:10:fd:f9:07:f9:c3:ce:81:
fc:27:ef:9d:c6:2b:88:b3:6c:54:0c:fd:3d:51:7e:51:42:b0:
8a:6c:94:4c:81:3b:86:b3:5a:67:3d:54:92:1f:1e:1c:43:f0:
29:e2:61:7f:e2:67:90:3e:f9:10:28:a4:fd:8c:0d:40:3c:b7:
be:21:30:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXIo38EhRKiB/C5My+BmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNjI5YWI3MmNkYjkwMzNlZTU1NmUzOTliZjUyMjYzZDVh
YTVhNDYwHhcNMjUxMTExMTAwMDU4WhcNMjUxMTEyMTAwMDU4WjAzMTEwLwYDVQQD
EyhiYjYyM2NjMGIyYzRlY2I3NTg3NjA4OTRhNmVhYTBmMzJiODNhYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7eGiqbvNdtpffPQEL7dbdvU+yRxU
cL7MJZoiPQ5afmhKERr+k3c3kEtr0/7dPSZTCz7qErVmTMKNTOW1sz6DK5W4ijYo
wP0xFnDP7TXQJlx+kE/TH5bHyltf6Q8JqHm1H5snDNT3Q/RdM7ZZkNwqKc/v1I3N
hW/KnPOEj/650S2MEFGgdO9Ulh3Bd+k/nDNVvnzJq/s16NcB1oX87DxChfL/ocg2
4jkC0VoItdp07q0hWN8aqu7RvpQ8l9LVNGFojHX2r8IugDiSaFzrZiAQlykKMt71
zZblv33YjFz3IW2R0rHmSB6eLv1RELQEtLH887zmKvwwIbFF41BBSZBUyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtiPMCyxOy3WHYIlKbqoPMrg6wCMB8GA1UdIwQY
MBaAFNFimrcs25Az7lVuOZv1ImPVqlpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgt
ZDFhODRiNDE0ZWY4LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgtZDFhODRiNDE0ZWY4
LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUF2sLXK
VyZtJmFySVaSrMc+PtbLW5KwWWmsEz7s81WU1qtzrI3PBtCp1F3qqpL7cEURDnJQ
vjlVqOo5lghTRHpMDp9Vc1Vmn3WzpmbfvtfXBSJA+zn+KjuHFMAdSCK/eXrruN1U
heAMcv/fEgyCUORwvI+NJDaQkXQS6rNcC7KENlDu3Pp9Lw3dUcfWGfjIT+tVC5qm
MMlksNWZbg+pz2LGI04PwF8xjRDfeyLS37PsGHzOw91oQ8Bz+0/QxRD9+Qf5w86B
/CfvncYriLNsVAz9PVF+UUKwimyUTIE7hrNaZz1Ukh8eHEPwKeJhf+JnkD75ECik
/YwNQDy3viEwcg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:49 2025 by rpki-client