Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: YuFtl6Yk+rqH7TWr1iAbujj8VgKy786xJEkI/pud90g=
Subject key identifier: 4F:D2:D6:20:5B:79:C8:BE:11:0A:A7:27:A4:36:A7:CD:13:A1:8C:F5
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 019A7225CE3744A171E4F5099FB8D3132EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: Bvl2eEIQDQmz2VmWIvVMfS1gbP6JDndQSIIF8N1fetQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ce:37:44:a1:71:e4:f5:09:9f:b8:d3:13:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=4fd2d6205b79c8be110aa727a436a7cd13a18cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:03:a5:56:3e:db:13:f4:a2:25:90:9e:c8:
8a:10:09:27:c9:46:44:c9:25:b3:95:f0:b7:a7:56:
04:6c:26:7f:2e:b0:54:48:bc:d3:88:d4:78:13:64:
3e:03:3e:b2:64:89:b8:ff:1d:d1:44:56:ee:09:14:
ab:59:da:97:58:d9:18:93:7b:f6:09:6e:ab:6d:03:
59:8a:2a:e2:d7:38:8e:4f:a5:ed:50:0a:15:6c:39:
f0:30:80:9c:46:97:30:4a:f7:d1:77:df:1c:2e:6c:
82:7f:32:c4:15:d2:fe:a5:48:c9:fa:2f:bf:05:a8:
f1:33:95:ee:49:e7:26:25:fa:c3:a3:f3:53:d9:d0:
e8:d7:5d:c6:84:89:53:5e:e2:74:08:e2:92:1b:19:
68:81:ee:03:fc:58:6d:c8:f3:d2:a8:82:43:3f:11:
39:40:b2:bf:83:93:6b:ec:db:b8:66:b1:0f:a1:d4:
cb:97:95:18:a6:2c:88:01:3e:81:fd:1c:a5:58:b2:
c7:96:9e:30:5e:20:b3:73:81:f1:95:6c:df:75:b5:
8d:68:41:77:1d:2a:7d:a2:5f:b6:7d:7e:32:0d:56:
10:43:09:07:19:e7:40:df:d8:55:be:ad:18:4a:77:
8e:c8:67:ef:7c:7b:bd:46:41:dd:c3:ca:6f:a1:fe:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:D6:20:5B:79:C8:BE:11:0A:A7:27:A4:36:A7:CD:13:A1:8C:F5
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:13:2a:4d:32:dc:2b:da:be:32:a8:b7:d4:33:d3:9a:43:f8:
78:06:7b:93:5d:3d:7c:85:ec:c3:74:3a:62:01:7e:46:8c:20:
3c:b5:94:72:09:32:1d:21:71:a5:c1:96:1b:f3:21:dc:e8:ec:
87:ae:01:23:3d:b2:58:d7:d0:b2:d8:b7:2b:d3:62:6e:58:b2:
8a:bc:23:bb:b3:77:30:7d:0d:29:9a:26:a8:0e:2e:de:58:4b:
ae:5e:53:9f:07:72:26:02:79:4c:79:aa:af:7b:16:78:c4:4e:
4b:61:37:d1:80:af:02:82:75:c1:09:f9:04:30:42:58:aa:94:
ed:69:03:25:57:46:35:08:b7:8e:27:99:a8:96:bf:57:e4:69:
35:8c:4e:f7:08:f6:aa:ba:0a:63:fe:16:12:0d:29:d7:92:3a:
18:d2:61:de:0e:d8:c6:b4:f0:64:ca:25:c7:f0:b1:1c:20:47:
2e:c6:31:d5:f4:31:d8:e9:46:28:40:07:b0:0c:f5:f2:5d:07:
05:92:ba:92:84:af:c4:de:47:ee:77:bd:c5:2e:e1:f0:af:5e:
6e:a4:eb:b4:c0:b4:ac:d1:86:3b:57:43:ec:8a:05:b5:65:46:
0e:3a:6f:c4:aa:6e:a1:3c:6a:01:0f:38:88:23:d1:de:4f:a0:
2e:18:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:55 2025 by rpki-client