Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File: wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier: 5CbILmjlrDB4L9uGQ+uer9tb3DtrQHYuwzAUBthtvTw=
Subject key identifier: 97:EA:DD:28:B7:7A:3A:AA:D9:84:3E:BD:51:E8:8C:E8:77:58:1E:C8
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer: /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial: 019A23D36FB28E66CDBFAE0C9F41F7F25778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number: 044F
Signing time: Mon 27 Oct 2025 04:00:50 +0000
Manifest this update: Mon 27 Oct 2025 04:00:50 +0000
Manifest next update: Tue 28 Oct 2025 04:00:50 +0000
Files and hashes: 1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: t6z78LtQyEyqKLo5d6nF4ltPS3e4L4q+wLVStoo4baw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:6f:b2:8e:66:cd:bf:ae:0c:9f:41:f7:f2:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Validity
Not Before: Oct 27 04:00:50 2025 GMT
Not After : Oct 28 04:00:50 2025 GMT
Subject: CN=97eadd28b77a3aaad9843ebd51e88ce877581ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:1f:7c:90:46:ae:49:b8:f1:ab:66:46:08:
03:4f:9a:bd:3c:78:18:60:51:ad:b2:db:e5:74:ad:
f2:43:3d:27:0a:4c:08:e9:b3:e0:0b:d4:4e:af:b8:
13:85:e2:4f:67:aa:68:03:b6:8d:1b:1c:ec:20:18:
f4:ba:15:b2:04:15:33:fe:83:ec:6f:8e:1f:be:05:
ae:8a:84:dd:10:4f:c0:d8:21:17:f9:d2:aa:02:35:
44:0b:ce:c0:cb:0f:7d:97:63:54:09:32:fb:c2:b7:
60:4a:59:61:03:84:ce:d3:04:6f:9f:09:fd:4b:6f:
a2:3e:ae:aa:8a:85:9e:db:b7:1f:43:73:2a:4b:89:
5f:ef:3c:4e:2c:4c:0b:6f:30:3a:ae:ac:76:4c:39:
d2:43:46:db:79:c7:30:b5:fc:1c:fa:7b:fb:66:95:
72:8c:53:c2:1b:bd:02:a9:ae:d8:57:e8:a3:56:76:
49:dd:99:7b:ea:04:79:33:2b:c4:5a:26:b7:77:c1:
e5:67:d8:3a:a4:c5:bc:da:fd:e0:24:5f:3e:1d:bc:
8d:52:6b:c2:6b:99:ae:5c:70:75:93:80:d6:6e:1f:
af:99:2f:c8:65:59:53:58:fb:71:9e:1a:95:47:15:
1a:d9:6f:f2:27:b2:4e:f6:fb:54:e4:ee:7e:90:f9:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EA:DD:28:B7:7A:3A:AA:D9:84:3E:BD:51:E8:8C:E8:77:58:1E:C8
X509v3 Authority Key Identifier:
keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:1e:da:5a:7d:0d:6a:8f:af:f5:ca:23:f6:de:41:f0:64:
3b:05:c6:85:72:73:cf:a6:06:66:37:39:0a:c7:c0:08:0d:b0:
0e:59:80:52:28:49:6a:60:cf:38:ad:22:6a:88:4e:a1:19:9d:
af:a2:0f:71:16:59:05:7b:7d:14:93:92:e4:3d:be:d7:4e:64:
19:ae:29:b2:5f:f4:0c:c6:78:1a:ba:be:5d:41:5f:1f:4e:29:
bc:dc:bd:cc:90:6f:1b:ea:79:ac:5e:af:1e:a0:d0:a2:c8:91:
8f:bc:c8:91:26:f5:3a:1f:f7:cd:a5:f5:b9:f1:35:7d:aa:6c:
45:51:05:00:66:48:b2:39:d1:20:82:df:b4:dd:8f:9e:43:d4:
e2:13:a5:81:51:f0:10:41:8f:f4:82:33:00:7d:dd:27:a5:39:
3b:1c:fc:4d:3e:d6:e8:c7:96:51:71:fd:99:e3:4b:92:76:5b:
d0:19:41:2c:10:ee:76:d3:76:7f:29:1e:bb:04:db:f0:a1:5a:
0c:50:ff:13:a2:57:96:04:a7:77:dc:91:fb:f0:b5:16:75:57:
26:12:ff:42:29:b5:65:94:da:94:b1:52:ae:7b:99:47:a8:99:
e7:81:bb:95:8d:f2:3d:8d:4b:36:33:70:10:b3:53:4b:e7:69:
eb:77:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:59:20 2025 by rpki-client