Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
File: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft (raw, json)
Hash identifier: kMU9OasTOdqgv4nwJo0CRg/NB54M6hAIy/k63GvJvHo=
Subject key identifier: 5D:99:DD:3D:ED:19:B5:1B:1D:56:8C:D5:53:2F:3F:92:B7:93:6B:91
Authority key identifier: C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6
Certificate issuer: /CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
Certificate serial: 019A706E2E90E87006795C89C56FD637D9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
Manifest number: 11D4
Signing time: Tue 11 Nov 2025 01:01:00 +0000
Manifest this update: Tue 11 Nov 2025 01:01:00 +0000
Manifest next update: Wed 12 Nov 2025 01:01:00 +0000
Files and hashes: 1: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl (hash: 0XGllIfjH+/za7tMD+rhSxicqIeNkRemdeYH5GzolzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2e:90:e8:70:06:79:5c:89:c5:6f:d6:37:d9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
Validity
Not Before: Nov 11 01:01:00 2025 GMT
Not After : Nov 12 01:01:00 2025 GMT
Subject: CN=5d99dd3ded19b51b1d568cd5532f3f92b7936b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:60:d1:d6:a3:47:d4:9a:9a:86:86:af:41:
90:67:e2:fd:6b:e5:93:3a:56:b6:5a:e4:36:1d:52:
40:0f:12:cd:f0:38:0d:ba:47:d3:2e:9b:f3:83:91:
f5:15:58:05:17:a0:00:16:96:5c:94:a6:a9:50:be:
d3:98:12:ca:d4:6b:da:1f:ec:cc:ef:18:ee:71:87:
6f:2d:65:d8:61:38:2f:14:66:98:2b:a5:45:6f:ad:
a5:71:f6:b8:58:d9:2e:50:57:03:d5:29:d8:68:92:
0f:c7:cd:99:2a:eb:0c:85:e4:89:a2:3a:29:18:4b:
a1:fd:ec:76:90:ca:78:ca:90:4a:e3:4d:94:c1:95:
78:83:50:1f:dc:47:3a:1e:46:a8:b6:0d:67:86:b6:
18:9b:05:1b:32:27:dd:54:c9:7e:db:08:8c:f7:e0:
05:12:bb:d1:44:08:97:d0:d1:3a:cd:57:54:53:a4:
f8:0d:54:06:3c:07:e4:ef:f4:3b:53:4d:6f:c0:52:
0d:81:70:4e:bf:2f:3d:a7:80:b0:d5:d8:c1:89:35:
a1:d7:24:6b:82:bf:20:e3:73:69:9f:e8:5a:df:a9:
bf:bc:fa:ab:9a:f8:7d:e7:22:62:7e:20:80:81:07:
f9:7b:fa:f7:85:cf:e4:df:de:5e:ba:27:9f:b6:08:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:99:DD:3D:ED:19:B5:1B:1D:56:8C:D5:53:2F:3F:92:B7:93:6B:91
X509v3 Authority Key Identifier:
keyid:C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:37:ce:e4:1a:3a:cb:9b:7c:e6:6f:85:01:68:70:5f:43:00:
28:9d:0d:a6:b0:f0:6a:b5:b0:94:8c:bb:a9:d4:4a:04:68:57:
c3:47:32:ef:7e:f5:b7:dd:d1:cf:82:0e:92:ed:88:29:0a:2e:
cb:c5:09:86:4a:39:66:9f:48:0e:5d:99:8a:f9:bf:ff:7b:4b:
8f:ea:d9:8e:73:ee:1e:71:59:25:70:52:2e:ee:85:05:2c:e9:
9f:bc:05:f7:59:e2:c8:99:c7:1c:09:ee:4d:80:a0:8b:f8:36:
63:ec:7e:8a:27:23:2f:cb:33:0e:eb:44:63:5c:f7:74:99:f7:
33:f4:a5:93:c0:5b:6b:cb:bb:7d:56:4b:e0:21:68:e5:ac:94:
99:83:d0:df:26:e9:4c:71:8d:00:99:03:d4:c2:5e:82:5e:36:
d1:38:c2:d8:fb:f3:4d:7b:e9:28:d9:63:62:ee:e2:03:18:5b:
83:c0:da:03:34:9d:66:fe:e9:ef:d2:b1:3b:d9:d7:e9:f6:67:
67:58:f6:ef:81:8e:df:c5:67:c1:9d:89:0b:2c:c1:7d:e6:38:
c8:41:9a:c7:cc:f2:b1:80:4b:c7:49:d7:cd:84:1d:aa:6a:38:
11:ab:5a:cb:17:6c:b9:51:25:e2:f7:e4:4c:6a:b2:71:b5:0e:
fc:20:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:23 2025 by rpki-client