Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier: 0ifTRexZusKE2+IlNEded3EK+95wH0v5Jaa6eUHTt7A=
Subject key identifier: 74:E6:9C:1C:CD:63:5C:2B:86:A2:0E:D4:C8:6A:C6:75:05:75:0C:AE
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial: 019A71B7F027D0B9757BFBFCCF775601BACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number: 11A4
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: h5cY9eETe8HyD45KIRW74Czev9ppwaeg826viT/Mhy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f0:27:d0:b9:75:7b:fb:fc:cf:77:56:01:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=74e69c1ccd635c2b86a20ed4c86ac67505750cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:b3:ed:67:c4:7e:5c:80:b8:ea:da:c5:4b:
74:80:9d:f1:30:11:d8:c8:47:b0:59:b9:e1:45:6e:
07:67:2e:e6:b1:f4:59:b3:a2:a1:10:fb:eb:bc:6d:
c2:05:41:d4:08:80:40:6d:ab:89:5b:ac:24:3c:ac:
73:f4:69:ed:d3:b3:b3:0f:17:e4:d8:61:d7:03:6a:
6e:19:d3:86:f5:73:90:d3:3e:b6:54:cc:ed:45:66:
f3:05:34:ce:17:4c:70:f2:84:4e:3d:a2:1f:b8:e5:
88:d6:45:88:ce:2a:00:e6:0b:83:02:0a:09:04:d2:
d3:20:ee:0f:a6:b5:a8:1c:ff:82:51:3c:b6:aa:c3:
a0:c9:aa:4e:57:00:f0:16:49:61:f4:5c:ae:7b:3f:
d3:e3:49:9d:52:89:0d:73:6a:3a:1c:7c:1e:0b:dd:
83:d8:b0:55:59:51:60:4d:3c:55:7d:ab:83:0f:f9:
e4:3d:3a:94:0f:a9:3b:0c:c1:a1:89:5a:6d:9e:a4:
a7:65:03:62:3b:3d:90:71:78:92:cc:0d:69:1a:af:
bc:d2:2e:7e:a8:24:09:bf:e2:aa:8d:b8:dc:3a:b3:
10:ce:55:c8:39:5b:2d:d8:3f:3d:a6:bc:dd:d9:0e:
70:aa:64:80:6a:a7:f0:1d:03:96:30:de:06:5a:51:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E6:9C:1C:CD:63:5C:2B:86:A2:0E:D4:C8:6A:C6:75:05:75:0C:AE
X509v3 Authority Key Identifier:
keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b2:c5:c1:66:e6:37:a9:2d:bb:fe:07:27:bf:f6:25:b2:0d:
70:b4:9a:9f:85:29:1d:b9:7f:19:80:12:1c:08:ba:8d:37:5e:
7d:40:48:9d:e2:23:50:00:1d:f4:78:aa:96:d3:6e:07:df:73:
59:8b:dd:7e:4f:b4:04:60:53:86:61:88:52:9b:c0:99:87:20:
06:66:ed:14:10:90:8c:7f:e2:e0:5a:bc:6c:3f:7c:19:28:8a:
67:54:a8:40:25:a5:bd:e6:6d:ad:c5:50:c1:df:49:4d:cd:fb:
2d:10:2a:2d:f0:05:9f:50:a5:97:e1:0c:d3:11:69:76:1d:71:
ed:67:cc:38:75:42:7c:56:17:e8:37:f7:c3:2c:20:21:e0:b5:
63:b1:05:42:b8:15:01:be:f4:69:50:59:76:fe:d7:22:b7:c7:
35:90:ed:92:cc:68:05:80:ff:61:a4:82:6d:00:42:9e:fc:0c:
85:57:6b:dd:d7:db:e6:93:be:9e:58:80:5c:27:a1:18:83:11:
30:a5:a1:e2:e3:9a:28:69:5c:2d:f0:a6:e5:44:47:dd:26:e9:
37:3b:f6:53:b2:83:1d:e1:7a:19:a3:1f:4e:aa:d5:9a:6a:62:
d5:af:8a:3a:25:eb:d8:e9:1f:1e:e6:e7:5c:e0:ca:a1:27:7a:
16:4e:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:31 2025 by rpki-client