Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier: ajnYkKU92oTeM7ovoBG0st7Vf4Rro2A8KZ8MZZd+wkw=
Subject key identifier: 9C:82:37:71:BC:8E:28:F7:09:84:D7:D4:47:76:1D:59:CE:11:7D:62
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial: 019A71B8CC51222DD5FB24CFA6DFE38D7F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number: 0995
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: lD/1PIf7YpPkenUpy4UZy2Y/59uf3tx8GEvqTLQyFxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cc:51:22:2d:d5:fb:24:cf:a6:df:e3:8d:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=9c823771bc8e28f70984d7d447761d59ce117d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:be:eb:fa:ed:8e:90:2b:25:f3:90:5b:c3:
91:ff:28:ab:80:85:da:96:c1:0c:77:3f:c3:c5:61:
48:15:ad:76:f9:a7:fe:c0:39:fc:58:dc:9b:f3:b8:
5e:7b:99:3e:f9:c7:64:df:9a:5f:20:40:14:2b:4c:
e3:06:04:c9:c7:9a:30:8a:42:c5:7e:58:ca:b6:2a:
91:f5:b0:cc:4f:30:96:c6:88:3a:a7:b9:58:be:15:
a9:8a:02:e3:4d:5f:46:38:12:30:bd:f0:9f:01:34:
4e:d6:26:28:9e:8d:28:b9:ad:50:ff:62:16:a3:7f:
57:db:24:ea:72:b6:21:5f:0f:50:2b:9b:cc:12:31:
96:01:bc:2f:d4:e7:a6:3d:16:05:7d:38:0b:21:5d:
74:fa:5d:93:a7:05:12:34:45:0a:93:df:97:02:27:
03:be:13:2a:ef:be:ce:19:89:32:88:6d:92:d5:19:
af:24:ae:35:59:aa:df:d5:86:4c:80:88:04:6a:fe:
99:37:c0:b8:3d:f1:90:c7:fa:d9:6a:d7:59:b8:61:
bb:6c:ef:d0:bb:cb:33:de:ab:c2:62:2d:bc:dc:73:
08:55:90:ec:d3:97:1f:8f:83:7c:99:24:94:89:35:
78:44:4a:5d:34:36:d9:ed:55:ca:c3:b7:77:70:9d:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:37:71:BC:8E:28:F7:09:84:D7:D4:47:76:1D:59:CE:11:7D:62
X509v3 Authority Key Identifier:
keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:6d:a5:56:28:ab:f7:84:dd:e6:0c:9a:87:b1:95:ef:da:
e0:05:27:3e:10:ce:90:ad:74:7c:3c:8a:85:13:fc:0c:a6:8a:
15:23:5f:b4:3d:5f:68:5e:08:92:32:29:88:20:02:95:7c:2d:
b3:b6:b1:52:63:bb:b5:7d:c8:cc:64:6a:9f:ec:45:03:d6:10:
a5:47:43:89:f6:94:f1:a4:b6:ef:e2:a5:bf:53:3e:e3:42:b3:
eb:30:dd:cc:99:80:fa:d8:46:f7:97:05:c1:0d:31:04:ea:c4:
3e:92:23:cb:82:82:4f:19:bd:a5:58:ad:07:91:57:9e:f8:9b:
22:5f:33:2a:5c:4b:0c:54:22:91:56:f0:5c:0b:8a:e5:4c:dc:
26:b3:78:75:92:c3:8b:5f:af:8f:27:65:ba:bb:33:6a:e3:10:
a6:f8:d2:66:7c:55:7c:00:3c:5f:61:84:de:25:03:d9:37:69:
c4:b3:d9:51:0c:38:f1:96:7b:3d:30:1d:e3:26:50:0e:8b:77:
8c:6e:24:cf:db:7a:fe:57:5e:c7:f4:21:7b:ed:03:c7:d5:c0:
93:ad:32:19:a5:e1:bf:0a:4f:d7:32:ad:2c:c1:e9:ab:a5:f7:
15:91:04:6e:0a:c8:45:b8:98:b2:af:bf:33:7d:62:de:3b:ac:
ec:e8:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:14 2025 by rpki-client