Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json)
Hash identifier: bCPf8Af7iauA2GMvkkokGzLXY+F/GRYI2/AL4rOqfUY=
Subject key identifier: BF:57:F5:83:4E:2A:84:8F:FA:C3:C0:10:1E:78:DA:9D:16:42:9A:37
Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Certificate serial: 019A71135DE65A3D02E2142B28A2DBD06725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
Manifest number: 0D3F
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: I79SLU6EWdTCGeTQFWRgmFH60c2M8rVW4DQyR2n1QCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5d:e6:5a:3d:02:e2:14:2b:28:a2:db:d0:67:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=bf57f5834e2a848ffac3c0101e78da9d16429a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:5d:dd:ff:22:6f:68:9f:18:78:bf:f9:16:
26:d0:25:b8:56:89:cd:2f:b3:83:ac:03:fa:bb:15:
e1:57:f7:89:73:ee:29:b8:f1:48:15:14:d5:a4:cc:
30:4a:8e:ee:5e:5c:94:5a:84:65:f2:cb:8f:ba:d3:
5e:12:1b:96:8e:0f:d5:b7:35:14:49:39:83:ad:76:
78:f8:d5:63:0a:06:fa:f0:cc:e4:16:10:b0:6f:fd:
14:d9:69:f0:94:0e:56:33:4b:cd:36:e9:f6:5b:85:
5b:ce:af:fa:40:d2:6c:b4:a4:d8:d7:fa:42:4b:d4:
db:71:fc:9e:da:0c:26:24:2f:81:69:17:61:a5:74:
47:0b:84:7e:29:3e:14:29:b2:4b:10:72:fb:ed:da:
98:b2:18:27:97:8d:6f:da:c4:11:58:e6:fd:52:d8:
a3:75:e5:fa:78:0f:96:a0:26:a6:2e:ac:dd:43:69:
59:04:a9:40:2e:e5:03:62:13:4f:61:e0:4b:49:90:
3a:ad:3f:55:0a:0d:3e:8f:7a:77:0f:79:2d:a8:84:
e8:fd:9b:1d:2b:86:aa:b8:57:7b:8f:99:67:68:de:
dc:bf:a5:ea:16:cb:12:a0:04:81:3e:07:e2:02:8e:
63:7f:6d:85:b4:10:21:a9:b8:0b:f4:40:fc:a7:20:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:F5:83:4E:2A:84:8F:FA:C3:C0:10:1E:78:DA:9D:16:42:9A:37
X509v3 Authority Key Identifier:
keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bb:28:b7:45:45:48:45:3b:58:c0:de:88:02:f1:b0:7f:bb:
85:ca:13:77:01:b3:a3:21:e8:07:37:a8:2f:e0:23:79:6b:31:
45:a8:9a:e9:42:bc:4a:ef:33:95:5f:81:11:3b:4d:cf:91:1c:
db:d8:e4:14:fd:03:e3:b6:c5:b4:1d:62:8e:ff:bf:2f:2c:38:
a7:fa:1c:e4:80:18:5c:1e:c4:1b:41:e4:ab:97:8c:c2:0b:26:
9f:4d:ca:a4:bb:52:f5:c8:b2:b8:cd:19:85:9c:9a:c5:e1:b5:
3e:92:20:72:40:f1:7c:2a:85:ea:8d:72:d5:cf:ba:35:97:65:
70:8c:cc:1d:5c:17:8d:57:23:5b:ca:9b:d1:b4:74:dd:4c:21:
e6:86:4a:26:3a:e4:07:b3:89:e7:59:bf:80:c6:b6:a5:95:3d:
d6:d7:8e:63:02:86:92:e2:5b:fe:d8:66:15:bd:ea:39:a1:81:
57:20:d1:c1:61:7a:d5:9a:9d:95:0c:e3:8e:dc:94:c7:ab:b6:
46:0d:94:b2:85:78:1d:e9:78:b9:ec:f0:13:16:a7:92:f0:f5:
26:7d:f5:30:da:5e:69:47:b9:f0:17:9d:ef:27:a0:db:6e:39:
ec:72:06:1d:17:91:51:e0:b1:c8:62:d1:0d:04:39:46:46:e5:
18:32:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:31 2025 by rpki-client