Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier: sX7uZIWWbmsQK4KTeRV3Cca5HWrGuSjWDY+KFFfKbZ4=
Subject key identifier: 43:F5:C8:F3:44:B4:87:FF:9A:B4:B0:8C:CA:6B:DC:50:AD:14:8C:2E
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer: /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial: 019A71137DD0D708387FFCE7E4B27DB51E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number: 15ED
Signing time: Tue 11 Nov 2025 04:01:33 +0000
Manifest this update: Tue 11 Nov 2025 04:01:33 +0000
Manifest next update: Wed 12 Nov 2025 04:01:33 +0000
Files and hashes: 1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: eAcx7gXVvgWmu1Ee0MWCDfncxcUKJhekbvmxAMrlX6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:7d:d0:d7:08:38:7f:fc:e7:e4:b2:7d:b5:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Validity
Not Before: Nov 11 04:01:33 2025 GMT
Not After : Nov 12 04:01:33 2025 GMT
Subject: CN=43f5c8f344b487ff9ab4b08cca6bdc50ad148c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:05:95:2c:95:69:a1:2c:25:d3:d1:8a:b8:
a7:b3:44:19:e6:65:4a:c9:71:ad:f8:44:44:f3:e7:
8b:b1:68:c6:ae:f5:2b:4a:ad:79:cd:a9:e7:dc:fb:
5d:ee:aa:74:b6:94:f8:d4:7c:d5:c5:d5:21:26:14:
18:bc:37:5f:95:61:19:ec:be:f8:d5:a2:42:1b:b3:
72:32:95:fd:d7:75:e3:a8:60:86:a1:b3:64:24:fa:
bf:ad:fd:cf:02:81:2a:04:29:63:84:92:dc:fa:89:
cf:54:75:eb:30:2a:e6:f6:65:ea:01:bb:a2:fb:7c:
f2:49:98:e2:3d:54:9e:4f:24:b6:c9:0f:52:f4:18:
d9:e4:b1:ae:c5:fc:d1:87:67:65:83:ab:9f:6a:48:
f8:16:c8:b2:5b:34:cf:83:52:d6:38:bc:8e:a2:04:
97:58:20:28:ca:e7:62:8a:3b:eb:ae:15:fb:5c:24:
58:a9:a5:91:56:cf:84:1e:12:0a:58:b6:9e:30:f1:
20:6d:58:a5:15:db:58:59:4d:e1:01:ad:8d:29:2a:
53:36:9b:44:e2:1b:d9:d7:42:a2:47:1e:7b:08:66:
74:7a:15:bb:bd:b0:10:50:af:4b:33:5c:11:d4:4e:
36:4a:e5:89:32:18:62:c5:59:c4:71:f3:83:81:89:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:C8:F3:44:B4:87:FF:9A:B4:B0:8C:CA:6B:DC:50:AD:14:8C:2E
X509v3 Authority Key Identifier:
keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ee:13:e8:82:bd:84:9c:a9:e2:9f:44:50:1d:ca:3d:2d:4d:
05:eb:91:2f:1e:55:6a:61:2a:02:00:58:f7:3e:86:dc:44:70:
f2:ee:78:46:64:5c:07:41:66:d2:ba:72:4e:d2:e1:13:5f:d6:
95:d2:9e:a8:63:7e:76:f5:95:d1:eb:88:e2:11:37:7b:72:4f:
4b:a7:c6:94:0c:1b:7b:a5:1d:d4:51:b3:e5:2c:d9:1d:89:39:
ba:83:62:02:35:b2:28:ce:50:c1:4a:e8:fc:33:b0:1d:0f:fb:
2a:fa:30:d3:a3:52:12:bc:d9:ce:03:1d:3b:52:ba:02:11:0f:
6a:90:24:1b:7a:c8:0c:92:3b:4d:42:8a:14:01:58:a5:a8:42:
cb:17:0f:ea:c1:de:31:75:72:dd:d4:bc:cd:ef:4b:d2:7a:98:
1d:6c:4e:16:44:8f:5f:e9:a3:c2:4e:ad:73:25:23:34:0f:8e:
66:db:8a:4d:b2:9f:e3:49:64:cc:46:46:71:7a:ec:dd:5b:ab:
7e:f9:15:c3:30:5e:55:bf:45:41:02:8e:ce:54:44:46:20:fb:
b5:01:62:24:a1:36:70:8b:71:94:95:d9:fc:de:11:f6:4d:ce:
44:78:08:b6:65:72:b5:0f:b5:91:44:8f:f9:4e:4e:7c:78:c2:
15:a1:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:56 2025 by rpki-client