Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: pIIyNKbDH4QW5facg/W4UMuY6eTpqcb3qwa8EqajGxI=
Subject key identifier: 1D:DF:E2:44:F2:B8:A4:01:78:B3:55:A7:77:78:35:02:8D:1D:EF:58
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 019A7113108EED46883392983A2E97E67225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 11EF
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: diUhbR9BJvF8bVpUftiqRehvbZPlS9DCIimYk4IC01M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:10:8e:ed:46:88:33:92:98:3a:2e:97:e6:72:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=1ddfe244f2b8a40178b355a7777835028d1def58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:07:c4:d7:92:5a:0f:91:d9:75:48:bd:cb:
0a:ba:88:f0:a5:3d:73:90:19:38:a6:9d:32:a5:24:
c5:79:03:12:35:89:e1:e9:b3:be:0a:21:a4:f6:b3:
89:7c:e5:c3:26:cb:6c:fc:65:bb:bf:f4:f2:45:1f:
9c:2f:60:71:44:0f:72:3c:0e:7c:71:8d:46:6f:f5:
6f:3a:5b:13:e7:98:4c:5d:8b:2d:1c:5f:d0:fe:1e:
1a:8f:4e:92:ff:16:fc:86:32:23:3b:83:59:4f:de:
2a:da:e5:0d:f3:53:cb:c5:d0:0f:11:77:13:96:b6:
80:78:4f:e7:c2:aa:f7:b5:db:1d:57:27:11:2c:32:
78:08:0a:25:95:e1:bb:21:68:88:df:b4:99:3c:90:
13:d9:2b:8d:e3:51:7c:78:89:5d:b0:34:17:fb:2c:
98:75:dc:49:b5:a1:b4:bb:80:e2:6c:1f:d4:cf:f3:
b4:f3:f7:24:2b:be:82:4d:60:13:1a:86:be:d9:f1:
58:9a:13:14:11:6e:bb:63:ac:79:d8:ba:d1:0d:f2:
e5:db:ed:3f:39:1a:80:21:c7:24:a1:92:86:04:8d:
b7:8b:5d:4c:ca:80:91:60:99:61:0a:2f:c8:d6:da:
f4:7a:9e:d5:c5:df:3f:f6:e1:64:12:03:81:20:3b:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:E2:44:F2:B8:A4:01:78:B3:55:A7:77:78:35:02:8D:1D:EF:58
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:64:cf:c8:8c:2c:55:fe:89:c8:da:b3:a8:ca:93:2a:6b:f1:
4a:46:94:b8:ff:bd:8d:89:e8:e7:ca:e4:12:68:4e:6a:86:7f:
b7:cc:83:5d:80:ea:32:93:83:a2:cd:c8:42:e5:da:94:ec:3e:
5a:76:60:07:82:c5:81:c5:af:b9:da:9d:96:f7:a6:1e:1c:3b:
5f:eb:d9:df:f0:f1:f5:45:98:b9:bd:eb:58:89:7d:b8:6b:ff:
cf:67:ac:d5:bf:d8:30:db:31:59:75:0b:2b:dc:f8:6f:29:26:
66:24:a2:4e:d7:ee:f1:08:4e:66:20:b3:9b:4d:01:17:5c:05:
06:ce:21:6d:b0:db:15:07:56:d5:f0:83:88:8c:f6:51:43:d9:
c5:1d:a2:4f:75:f7:30:c0:bc:a0:e3:f6:46:51:77:a9:7f:44:
43:3a:16:87:cb:0c:15:ff:12:9f:c2:7f:19:1b:73:32:e2:16:
15:75:0a:a2:a6:bf:0e:d1:41:c0:96:66:9d:d1:90:7f:28:27:
db:91:bb:af:dd:14:8c:3e:b9:54:b5:e6:2d:6c:47:da:e0:92:
f3:6a:b2:bd:93:02:68:52:e6:63:6d:44:c1:f1:5c:d1:a7:7e:
1c:d8:dd:f7:a6:40:08:bd:bf:9b:e7:f8:f4:86:b2:17:df:b8:
70:28:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:44 2025 by rpki-client