Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
File: rWbePns_OvDgZAZ70c52RUNYL18.mft (raw, json)
Hash identifier: /XYhB21JQx6TdFv60/4e1Ws5LOVKcBhtpk8i7gHqgZU=
Subject key identifier: 3B:07:C9:CF:64:5E:61:DE:45:06:03:40:E7:73:CC:F5:34:32:B7:C7
Authority key identifier: AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
Certificate issuer: /CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Certificate serial: 019A71B7A57593265F6797CB910B86F080E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
Manifest number: 13D0
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: rWbePns_OvDgZAZ70c52RUNYL18.crl (hash: 5/4z6dZZ0Mkc6eI0PmFy3D9rHmJG6CsIj1znB5QkCu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:75:93:26:5f:67:97:cb:91:0b:86:f0:80:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad66de3e7b3f3af0e064067bd1ce764543582f5f
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=3b07c9cf645e61de45060340e773ccf53432b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:ff:a7:d3:cf:8d:fb:8d:d3:b9:5c:10:44:
e4:cc:41:68:f2:ea:f9:cb:40:72:8b:83:3c:60:ca:
1a:c8:8f:09:85:f7:b3:4b:3c:92:3e:9e:3a:c3:4e:
d6:6c:df:c0:2c:2f:f7:17:9c:d5:76:ca:de:6a:3a:
6b:11:0c:02:21:7e:4c:9f:05:7e:c5:c8:89:14:39:
6c:f2:02:e5:6e:2e:58:69:f5:c5:21:2f:ce:92:99:
04:55:15:90:cd:5c:67:2d:c6:2d:78:16:44:dc:b8:
f9:bb:74:e6:e5:e1:36:25:dc:10:1f:36:83:c0:63:
96:7d:01:c8:73:d9:2d:bb:7a:2b:d5:ef:9f:6e:8d:
ed:84:e8:fe:46:77:f2:de:6e:61:f9:80:7c:65:4a:
78:09:b0:d9:c1:5d:8a:9b:b3:49:79:92:1f:2a:7a:
fb:7b:94:94:6d:0c:d3:30:9d:b5:5f:cf:45:17:fd:
51:bb:51:26:78:66:98:9d:73:db:4b:4b:2d:1f:34:
14:44:33:51:6f:54:57:01:e5:c5:13:64:96:53:51:
a6:4e:cb:63:ba:5a:ef:26:87:3d:fe:ec:98:b0:d1:
2b:bb:f7:fb:bf:64:80:db:76:d1:e6:df:ee:fb:2b:
68:53:5c:8b:e2:f0:88:e1:e2:eb:ab:2e:4f:d0:91:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:C9:CF:64:5E:61:DE:45:06:03:40:E7:73:CC:F5:34:32:B7:C7
X509v3 Authority Key Identifier:
keyid:AD:66:DE:3E:7B:3F:3A:F0:E0:64:06:7B:D1:CE:76:45:43:58:2F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWbePns_OvDgZAZ70c52RUNYL18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/03e755-8021-49b0-82e4-71ef49799bd9/1/rWbePns_OvDgZAZ70c52RUNYL18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:21:48:2d:6d:03:52:17:cf:75:d6:8a:43:74:56:3e:40:bd:
30:94:6e:9a:ab:6c:40:ad:f2:9d:61:0d:d7:fe:48:06:17:ec:
e2:f0:74:75:00:81:cc:0b:a3:77:71:04:88:62:2f:52:7a:04:
c6:29:26:01:5a:85:dd:fa:92:20:44:1d:2f:66:24:c3:27:31:
62:ce:69:04:d0:71:f9:03:48:20:f6:4f:a9:51:41:18:52:d3:
d1:59:44:cd:15:c4:fe:94:f3:bb:37:af:e1:32:e8:48:44:a9:
ce:b7:de:1f:d9:b5:6e:be:49:bf:92:05:a8:e0:67:a1:ea:8c:
49:d1:5e:e6:4c:00:d3:61:fd:30:5a:e0:56:fd:49:47:88:02:
da:a0:46:3f:8f:ce:18:3f:cb:c1:86:57:02:99:d5:47:31:c7:
9b:e1:a4:05:ae:0e:63:8e:78:3e:97:0e:da:b0:ed:98:49:51:
d2:03:be:06:1f:ba:9e:6f:95:9e:6e:52:1d:8f:ee:b5:eb:08:
c5:d1:28:cc:ec:5a:28:3a:23:df:2c:12:5c:3b:f9:75:5d:95:
0c:c2:9f:15:a1:43:e1:ef:ef:19:9b:04:de:e7:a1:43:56:b4:
60:20:5b:c5:3c:a6:c0:5e:c8:ae:0e:86:b7:f1:8d:72:60:dd:
21:3f:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:39 2025 by rpki-client