Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
File: wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json)
Hash identifier: wGOssX5SZ1UFtm9wiNeIiNXsxFpMWjbUKah+ISncw5Y=
Subject key identifier: 0D:B2:07:F4:22:23:74:14:1B:74:86:79:0D:E4:BE:81:10:D5:E6:F0
Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
Certificate issuer: /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Certificate serial: 019A7112E2B7F95136896B07C414C87E6C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
Manifest number: 012E
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: CGS4DT3NU/c7u2GSUXWC9/Po190rwOMIJK9csZ7PedE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e2:b7:f9:51:36:89:6b:07:c4:14:c8:7e:6c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=0db207f4222374141b7486790de4be8110d5e6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:8a:ce:21:5b:09:5d:a0:3d:9f:67:9a:39:
fb:17:78:14:4d:8a:ce:2a:5c:3a:88:e2:ce:b6:72:
d7:e3:ac:28:dc:8a:2e:c7:ab:18:58:5a:42:36:c1:
41:f6:4d:16:65:c0:a4:49:f4:16:ee:79:b6:e0:65:
6b:48:0a:1f:2a:ac:8d:ad:6d:f3:98:80:b3:d5:7b:
0c:b3:a5:db:4e:cf:df:56:56:be:45:dd:5e:93:4a:
c2:2b:bb:f0:3a:39:c6:66:ba:cf:cd:d4:6f:34:1a:
54:70:0b:5d:e6:e5:e3:6b:11:cb:25:8d:25:b8:fd:
50:39:4f:52:05:50:12:93:45:6c:d1:68:32:9f:92:
8f:81:b0:ae:68:53:1c:4f:9c:6a:7b:60:41:ce:7d:
8c:c7:8d:bc:65:99:8c:d2:ca:45:2a:0f:00:9a:81:
89:95:64:c8:e8:32:ca:5b:f7:83:48:df:c7:24:e4:
a6:91:f0:40:d9:cc:b6:53:bc:82:8b:74:84:03:c1:
ed:8b:ca:18:b4:fe:40:a6:9f:27:c0:ec:11:60:ae:
08:5e:24:52:9d:26:b4:54:4e:4d:c0:29:25:c7:b1:
c4:da:a4:1a:3a:62:40:70:61:0b:c5:80:db:39:47:
31:f4:18:ab:5e:62:97:40:10:34:b4:b1:56:da:41:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:07:F4:22:23:74:14:1B:74:86:79:0D:E4:BE:81:10:D5:E6:F0
X509v3 Authority Key Identifier:
keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c7:30:a7:14:70:b7:64:d1:a4:78:f6:b9:d8:b7:db:b7:0b:
1b:ec:8c:80:34:20:61:1d:60:0b:71:f4:15:77:0e:a5:58:37:
0b:8c:c3:3b:97:e2:1f:01:d0:2f:0f:af:70:f2:32:1a:7c:92:
12:08:0c:d8:72:e7:9d:4e:41:ed:53:42:cf:6e:ad:7d:24:26:
22:bb:0f:1b:45:53:98:ef:01:ba:f2:af:fa:d9:99:b7:38:a9:
f5:95:90:1f:5a:47:37:8a:93:82:4a:84:bf:59:22:e9:b3:3e:
33:8c:63:f7:60:01:26:60:ab:56:3e:0e:c2:e1:a6:41:5e:82:
0f:19:e0:2a:f6:22:5c:06:a2:f7:2a:e2:1f:8e:ae:e5:e9:a8:
74:53:f7:a4:24:91:bb:ac:60:59:4c:89:57:53:30:07:ed:b8:
96:90:c4:3f:a6:63:39:1c:2d:b7:60:e2:05:3d:fd:d0:e1:2d:
fa:a9:b4:36:44:10:78:9a:56:05:8d:44:be:80:9a:98:eb:e9:
ca:e8:8f:02:85:e6:88:7d:30:40:04:6c:4b:8f:8f:03:7b:42:
51:47:6e:23:2f:5c:e4:c3:c5:c6:2a:25:b9:4f:c3:0d:1a:31:
84:84:43:5c:90:37:31:27:61:95:4b:2b:9c:fa:da:f3:8d:7f:
7c:51:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:11 2025 by rpki-client