Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
File: wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json)
Hash identifier: uz8gABQR2ZDZsRaSPkv45k0ZJi6uQHH+IQV3sCVMBx4=
Subject key identifier: 1E:80:7B:E1:E0:7C:39:39:B2:7A:92:8D:A3:7B:01:67:51:AE:56:35
Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
Certificate issuer: /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Certificate serial: 019A725C6FCF7F6BC07739E95C5C269AFAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: wYr5fHxvfZOs3JvftNds9B3OIUsjaqavAmZxq6YPEEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6f:cf:7f:6b:c0:77:39:e9:5c:5c:26:9a:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=1e807be1e07c3939b27a928da37b016751ae5635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:d0:b2:a8:bf:c6:4d:7d:6e:6c:2c:f2:c7:
9a:17:ba:5e:3e:81:34:65:ef:c1:29:87:bf:bd:28:
52:2c:a6:e3:54:73:e0:34:81:e8:b6:8f:54:b2:21:
de:1e:c1:fc:fc:fd:7d:6f:1b:e0:7b:b0:f4:fd:38:
e7:f9:0a:cd:b4:c3:08:4c:89:5b:85:b9:59:cb:6c:
94:e1:15:68:2b:b7:75:ad:75:4b:15:46:e8:eb:59:
16:84:a3:56:12:d8:3e:74:bd:ed:06:d9:23:a1:d9:
db:04:75:8b:c5:a9:b5:db:bb:da:f9:92:81:8a:dc:
fe:36:34:69:85:34:88:1e:37:82:57:e5:ee:db:f7:
cb:76:7b:1e:8c:a0:5b:53:ec:c7:5d:94:39:2b:c1:
ff:86:47:ca:20:d1:ff:e7:7d:81:f8:0f:3b:01:95:
c7:b2:03:77:86:29:3f:10:90:25:37:46:f2:d5:d1:
28:dc:89:b6:25:85:43:8d:f8:fa:d6:54:71:a0:87:
b1:dd:9d:c2:a1:bb:19:27:00:38:e3:8d:6f:43:c5:
2f:49:2e:13:fe:11:00:6b:d6:4f:5d:a7:e1:b4:03:
53:0a:92:aa:5b:ec:e1:49:0a:7a:e6:f4:82:4a:d2:
a6:b0:ab:df:19:80:bb:fd:ec:20:56:a7:e8:f0:12:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:7B:E1:E0:7C:39:39:B2:7A:92:8D:A3:7B:01:67:51:AE:56:35
X509v3 Authority Key Identifier:
keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:37:3b:97:df:bc:5f:9e:5a:7b:53:82:c8:ca:6e:12:72:
60:a7:fc:ed:ac:d8:d2:37:bd:78:a6:3b:2e:c8:70:03:70:b6:
ab:ce:cf:69:c2:ac:14:2e:76:02:a1:59:bc:0d:7c:35:1b:03:
0e:6c:a2:4b:92:6f:ed:7d:d8:0e:11:cc:19:ed:44:58:71:6f:
e4:07:73:bf:d7:88:eb:ac:b8:99:0a:da:9d:d0:8a:28:70:06:
5e:57:80:a8:76:f0:08:64:04:87:0d:15:45:4a:b2:76:67:c8:
5a:97:f5:88:74:89:44:9f:77:b7:e5:bf:a2:35:50:20:7f:c4:
cb:60:bf:17:f7:27:88:5d:5e:f0:19:41:08:fa:96:0d:d8:a2:
22:be:1a:c4:a3:ee:2f:64:23:46:e9:9e:62:58:37:77:32:65:
13:9e:35:e0:8e:8f:d6:4f:fa:73:55:37:6c:58:47:8c:81:b2:
0d:33:90:f4:10:25:3f:41:07:f3:2d:7f:1f:f7:22:e7:02:87:
f8:90:9a:a8:29:d8:37:28:a2:91:15:5b:c6:2e:4d:f5:28:b4:
d5:07:63:21:1e:5e:d4:f0:d4:f0:ad:43:f5:65:08:44:d8:a3:
99:c4:0d:2a:f1:b7:ba:73:a7:63:ac:ee:6a:a0:a0:c4:e2:2b:
bb:b2:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:22 2025 by rpki-client