Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File: WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier: +7pW6ggsALkgqJOR+/RS5iSBOEtdePRfRg7ybpFNOmk=
Subject key identifier: 4B:E3:61:35:E5:06:F4:8B:B8:BA:04:32:84:83:4C:A1:3A:F2:94:12
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer: /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial: 019A725CEBEFD9AE8D5E37E793237D7C57B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: SiurfTMOTYUC9hotDgXzwcOqQEZC3sDm1ecU2suBqZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:eb:ef:d9:ae:8d:5e:37:e7:93:23:7d:7c:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=4be36135e506f48bb8ba043284834ca13af29412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:e5:b7:b1:25:65:16:53:95:8f:88:e9:85:
89:25:7c:6a:3c:e8:65:af:08:2c:9e:08:ad:07:a8:
c3:fd:46:59:e0:98:43:8d:7a:53:70:68:f5:7a:4f:
0f:3d:d1:79:96:8b:a8:dc:6c:ef:b3:e9:9b:b1:52:
ee:cf:96:66:8f:f3:5b:b9:29:fc:f1:64:9d:97:0c:
00:95:9f:12:20:68:45:15:c4:5a:57:7e:4f:a7:c3:
1d:86:0f:a7:5f:73:f0:3c:6c:24:3b:35:ec:39:35:
ec:4d:77:7b:26:3e:c6:21:43:0a:d6:de:d6:d0:bb:
1d:02:5f:5d:c1:ab:e5:5d:e2:2d:4e:4d:83:b6:59:
1d:49:da:76:b6:4c:31:4e:ab:ee:8a:43:5f:aa:45:
a7:20:ec:66:93:df:3b:dd:d7:e6:ed:0b:3a:3e:ec:
c3:c1:0f:f6:36:3c:12:57:9d:b8:d7:7a:b6:07:53:
b9:ee:8b:09:ba:61:c5:6a:78:88:29:86:f8:e4:ad:
31:75:49:0f:2c:d0:86:ab:2b:35:e1:49:dc:d5:09:
53:b7:bf:15:5b:5a:36:d8:56:24:6d:5c:50:8d:5c:
b9:12:7d:46:ee:b0:a0:d8:a9:9d:8a:aa:70:bb:37:
51:d0:37:97:67:2e:f4:25:e2:eb:bd:b1:cf:71:b3:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:61:35:E5:06:F4:8B:B8:BA:04:32:84:83:4C:A1:3A:F2:94:12
X509v3 Authority Key Identifier:
keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:18:c5:9d:71:47:03:2b:26:51:af:c1:29:e6:fe:c6:88:aa:
e8:1e:c3:a3:5f:5c:48:5a:19:16:d2:4e:e7:d3:d8:bb:3e:36:
fc:63:5d:ca:2c:cd:bb:36:c7:80:58:75:c1:5b:bd:9d:4f:6e:
4f:50:f8:cf:df:38:11:fb:b7:cf:11:ec:c3:4f:b7:3c:ec:82:
de:ce:52:5d:fa:55:37:a4:d8:d4:15:a8:53:0f:99:84:b6:8c:
78:34:5d:09:74:14:4c:33:34:20:4c:29:c8:82:1c:cb:8d:85:
ed:22:48:72:01:54:a9:a0:db:85:4c:5f:21:8f:8c:21:cc:c3:
a1:ae:07:93:6c:33:26:f8:21:9e:10:59:61:da:87:f8:b1:db:
55:4a:04:82:2b:da:d6:71:0d:83:92:08:81:6b:45:ce:68:2a:
8c:92:fa:50:e1:cd:86:f4:a5:37:b0:89:46:12:53:8a:ef:86:
5e:1a:33:d3:f9:9a:bf:41:db:b3:82:8f:91:0c:83:88:bc:50:
e7:cd:3d:d3:fb:39:21:f6:af:38:13:48:0f:65:79:73:30:d0:
57:1a:f6:47:d8:1e:c2:cf:d1:2a:6b:6d:17:76:24:0d:35:aa:
ba:42:39:4b:22:3e:17:56:83:56:f4:87:37:06:c3:a9:04:6d:
6f:73:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client