Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File: wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier: WUd9fGvlXkVIGZVJ54fgX8ZOjUFFSgnbybRxfBbwPRo=
Subject key identifier: 5C:D9:EE:68:B6:DB:E5:FE:F0:61:E0:EF:CA:B9:5B:29:0A:6F:6A:1F
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer: /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial: 019A24E5DC61D74C8C75D9FCE1FB05EACCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number: 0B76
Signing time: Mon 27 Oct 2025 09:00:35 +0000
Manifest this update: Mon 27 Oct 2025 09:00:35 +0000
Manifest next update: Tue 28 Oct 2025 09:00:35 +0000
Files and hashes: 1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: NMPw0IjiTXbM1/aOnlcIsAw3hBOkV4XXU/VzqO6Sdjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:dc:61:d7:4c:8c:75:d9:fc:e1:fb:05:ea:cc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
Validity
Not Before: Oct 27 09:00:35 2025 GMT
Not After : Oct 28 09:00:35 2025 GMT
Subject: CN=5cd9ee68b6dbe5fef061e0efcab95b290a6f6a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:e5:e3:e4:b4:9d:a0:ca:5e:0f:43:20:5f:
9f:f0:93:7d:c1:b9:91:7c:c5:02:97:d9:d2:61:31:
7c:d4:a0:38:bc:00:7c:e8:b1:8b:ab:a9:90:16:9a:
ad:88:56:44:88:34:f9:68:5d:87:4f:a9:4c:3b:d7:
bc:d1:83:19:58:0d:d3:72:2b:57:94:b3:27:81:87:
57:93:90:4a:5b:8e:b1:71:1a:47:45:b6:94:8e:07:
d4:2f:a2:22:dd:5a:49:df:84:22:05:d9:d0:51:e7:
62:4b:d8:2c:d4:91:3d:4a:de:0e:68:e6:ba:84:31:
67:06:c4:f2:05:ae:9f:01:a1:8b:6d:c2:0d:87:91:
de:86:42:2e:bd:e3:a5:10:3f:10:df:af:ab:5a:75:
ed:ce:3f:ab:87:73:88:7a:0a:7a:08:53:dd:c1:57:
63:39:40:15:d3:4d:9c:8e:ab:7a:dc:ef:ff:49:61:
98:85:ee:bf:bd:df:cf:48:53:f1:06:ea:cd:ca:d2:
1a:ae:28:2f:01:9a:f1:68:40:33:23:c5:d0:4d:64:
02:ee:c1:e0:6c:1b:c1:79:b4:5b:55:4b:9a:50:28:
25:1e:9a:37:ee:88:56:ab:21:ae:c2:cc:71:3a:61:
0d:5c:82:4b:4c:5c:7b:31:4f:6c:fb:f5:18:c7:51:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:EE:68:B6:DB:E5:FE:F0:61:E0:EF:CA:B9:5B:29:0A:6F:6A:1F
X509v3 Authority Key Identifier:
keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:12:02:e5:26:90:f4:cf:04:c6:5a:27:99:ac:6c:62:32:
c1:15:ff:30:19:ed:b7:8f:ef:10:15:0d:c4:19:83:ea:a3:59:
2f:ca:7f:52:cd:ab:52:59:12:62:bb:6a:87:e5:3a:c0:87:fe:
10:67:34:4a:93:cd:6b:ff:53:69:d9:1a:a6:d2:87:8d:3c:05:
f3:ed:22:0a:1b:a2:59:a7:5b:ff:ee:fe:8b:d4:aa:f2:ba:c4:
57:b0:9f:5b:5d:32:c4:58:51:67:9f:77:b8:a3:f3:61:a5:3a:
59:4e:c7:01:05:13:24:cf:35:1c:0e:15:6e:66:2b:5b:32:e9:
10:1b:b1:57:14:26:e2:a6:58:75:54:e7:be:70:d9:9b:c8:e0:
91:11:b2:a1:67:a1:62:0e:75:73:4a:8a:59:ca:0d:43:47:74:
67:fa:c4:6a:35:c3:f0:ad:55:05:e7:30:43:fe:2e:70:bf:94:
c1:56:d6:de:c7:83:3a:9b:c5:32:b5:fe:15:61:a8:25:0b:02:
6f:66:e0:3d:54:4d:12:b4:29:a7:18:84:e3:20:28:d5:61:7d:
a0:9e:8e:0f:70:69:78:11:33:0f:57:0a:9c:de:a3:34:43:4e:
71:c0:a7:b0:82:e5:53:9d:ac:ea:26:35:c6:0c:be:d6:78:5c:
6e:ca:8c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:35:04 2025 by rpki-client