Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft
File: wfxZzHwlBRzVo-8-tcocUVA_HdI.mft (raw, json)
Hash identifier: zK4pbcZLIBe+Wip94f2hr8kjkQaMMj7Su6sURtX7cNE=
Subject key identifier: 18:67:48:BA:EC:67:DC:F7:37:58:8A:70:CB:4B:9D:AC:D9:BD:FE:A9
Authority key identifier: C1:FC:59:CC:7C:25:05:1C:D5:A3:EF:3E:B5:CA:1C:51:50:3F:1D:D2
Certificate issuer: /CN=c1fc59cc7c25051cd5a3ef3eb5ca1c51503f1dd2
Certificate serial: 019A7180917F8AF645554058A5A18AAE2637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wfxZzHwlBRzVo-8-tcocUVA_HdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft
Manifest number: 23
Signing time: Tue 11 Nov 2025 06:00:42 +0000
Manifest this update: Tue 11 Nov 2025 06:00:42 +0000
Manifest next update: Wed 12 Nov 2025 06:00:42 +0000
Files and hashes: 1: wfxZzHwlBRzVo-8-tcocUVA_HdI.crl (hash: kThJqxEtIh1y8Y0ewQ79irKkcws3oXp0fGsvNyysBTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wfxZzHwlBRzVo-8-tcocUVA_HdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:91:7f:8a:f6:45:55:40:58:a5:a1:8a:ae:26:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1fc59cc7c25051cd5a3ef3eb5ca1c51503f1dd2
Validity
Not Before: Nov 11 06:00:42 2025 GMT
Not After : Nov 12 06:00:42 2025 GMT
Subject: CN=186748baec67dcf737588a70cb4b9dacd9bdfea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:18:47:2d:65:ab:e4:d0:c9:55:4b:63:5e:
5c:31:ef:5b:a5:9b:4f:f7:a2:a0:53:8b:e2:2a:c3:
e1:2e:e3:8e:c9:3b:fd:33:bc:32:60:db:6b:ce:dd:
95:68:9d:7c:42:3a:75:a5:06:70:07:c2:94:a5:83:
39:62:26:39:be:5a:c7:e4:22:96:98:af:01:4a:ec:
39:1a:a8:db:75:2e:64:12:17:52:1d:b1:11:ee:a5:
52:c2:e5:99:8e:31:10:dc:48:38:c0:09:98:1b:35:
27:59:ae:f0:7a:db:84:36:5c:cc:28:28:31:16:03:
06:f9:7c:aa:a1:e9:b4:e0:15:61:82:4b:3d:b4:d8:
bb:d2:ab:43:e1:b3:a0:1f:28:e7:19:f7:5d:7a:8f:
10:9b:6f:74:cb:f2:b5:27:e6:f7:21:7d:c6:55:fd:
c7:44:a1:f1:ad:af:8e:ea:8e:a9:62:43:55:4c:10:
b6:77:31:45:4d:70:ed:f6:ce:de:ca:a6:f8:2b:b8:
09:6b:c4:26:82:67:13:04:0f:0d:9d:1d:5e:28:d9:
ac:d5:7b:a5:f0:35:46:a3:42:3e:99:f4:bb:7a:12:
f0:45:fd:a9:8f:99:b1:1a:1c:d9:f6:75:a1:8e:2d:
34:e9:06:fa:08:9e:13:95:ab:9d:ca:b4:8b:b5:3b:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:67:48:BA:EC:67:DC:F7:37:58:8A:70:CB:4B:9D:AC:D9:BD:FE:A9
X509v3 Authority Key Identifier:
keyid:C1:FC:59:CC:7C:25:05:1C:D5:A3:EF:3E:B5:CA:1C:51:50:3F:1D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wfxZzHwlBRzVo-8-tcocUVA_HdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b3:54:29:f2:71:75:25:74:9d:be:1b:a3:13:71:f0:a6:10:
3d:ec:6c:4c:b4:16:5d:8f:15:e9:71:40:2b:55:77:e4:75:65:
09:13:87:e7:b4:fc:db:da:89:77:86:7d:b5:7a:94:0a:41:ca:
72:2f:17:95:a5:df:a6:57:95:5a:e8:48:72:c8:4d:e3:cd:3e:
cb:78:68:95:f7:b8:05:54:f8:5d:9c:25:ef:75:09:ad:b4:76:
b5:b3:ef:31:2b:59:c4:ef:e0:61:f4:05:25:14:d4:86:52:d8:
a8:b0:aa:81:de:ca:1c:17:cb:76:9d:02:ae:cd:8b:ed:f2:f5:
09:11:46:eb:c0:48:3e:b4:47:27:ee:b2:30:c6:71:09:4c:1f:
3f:ad:13:85:44:0f:5d:7a:32:60:52:af:df:42:25:01:de:77:
7c:36:a9:ca:4c:df:32:db:cf:76:60:84:e9:b8:41:9a:01:d8:
43:7e:50:5a:20:5e:3a:4f:9a:96:1d:e0:cc:75:c5:a5:e3:91:
8a:fc:84:ef:09:5d:76:4a:29:83:ee:67:bb:84:85:8a:c2:9f:
e2:b1:e4:7a:7a:6a:fd:5d:0f:3a:91:a6:75:c7:79:a2:6c:5a:
f9:1a:9d:07:ae:bc:92:cc:6b:75:47:bd:31:9d:e1:66:57:f2:
48:14:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:24 2025 by rpki-client