Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File: wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier: ZQav4yCXVCxMjj+UbJ+lumjBpKko460EV4kbv0fJp/E=
Subject key identifier: 02:48:DE:3D:7E:13:A8:A6:0D:8A:CC:E5:4B:41:79:A8:9C:72:F3:E8
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer: /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial: 019A71B8F8E1D4F88AEB40FF7302BEAC1344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number: 11C8
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: N+MojeH8PgnBD+c55FphczTsJdzS5rNHDf8bEqe9zr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f8:e1:d4:f8:8a:eb:40:ff:73:02:be:ac:13:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=0248de3d7e13a8a60d8acce54b4179a89c72f3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:80:26:b6:c8:5a:13:e3:5b:e8:73:f7:81:
06:58:59:b4:c6:54:17:53:04:f6:b1:42:6c:fb:79:
3b:65:ed:26:e7:56:91:bd:77:8c:90:0a:b9:33:5e:
5a:24:31:0f:61:e7:90:c3:01:64:0e:12:7f:69:1f:
65:f9:8e:cb:ae:54:56:e2:cd:b7:4f:1d:13:80:3b:
0f:7f:c5:4a:57:e9:e5:a8:96:a2:d9:88:a8:d6:9f:
0e:a4:d7:b8:d3:09:64:a7:b2:60:4b:c9:46:22:8f:
ca:ca:af:f1:60:f3:50:87:43:e7:50:52:31:d9:97:
6e:83:08:4a:b0:01:fb:c3:68:21:7a:eb:49:84:2d:
9e:a2:54:6b:74:5e:25:b6:b6:c3:27:66:1f:29:0a:
95:72:eb:94:3d:cb:3e:d3:c8:ed:4f:f8:b2:a8:7e:
81:bc:91:59:31:f3:c1:ea:b4:fe:41:84:e0:fd:ad:
17:5d:2c:79:56:61:70:b7:b2:76:7c:1d:03:9b:cd:
25:38:59:7a:82:a7:0d:76:92:6e:da:b8:46:bf:f4:
d7:ab:c2:44:63:70:5c:82:55:ca:fc:7f:79:30:5f:
56:22:8b:5e:fe:e3:94:84:3b:1e:0b:52:e0:5d:6c:
e8:b9:89:fb:ef:f9:aa:26:db:2a:00:9c:2b:27:b5:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:DE:3D:7E:13:A8:A6:0D:8A:CC:E5:4B:41:79:A8:9C:72:F3:E8
X509v3 Authority Key Identifier:
keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8a:33:1d:c9:3b:ec:08:59:1c:34:6d:2e:01:22:58:b4:3c:
43:b7:c0:a2:15:a5:63:e3:d9:7c:96:97:0c:8d:47:e2:37:8f:
ad:8f:1c:20:8e:d1:1d:d5:c6:eb:2d:95:54:6f:41:10:d5:fb:
8d:ef:71:f9:41:59:0d:fb:25:e8:c7:d4:c1:a5:08:23:ad:0d:
f0:a5:59:62:8f:d1:ff:e7:35:47:f0:53:5c:11:5c:47:6a:7a:
73:5f:f4:62:ad:bc:e1:0b:cc:2f:28:5a:33:06:b5:fa:c9:89:
08:a6:4e:cb:1d:ec:03:41:2e:7c:45:59:ce:1a:7f:5a:20:02:
10:0f:d0:0f:b0:66:16:c5:3b:f7:53:2a:f5:3e:60:ba:6d:56:
41:0b:ab:df:59:b5:2e:e5:a2:23:cd:8a:62:67:38:ac:04:70:
a5:54:f2:7e:33:38:5c:c0:4e:7a:12:4d:54:6e:32:d4:fd:f9:
2c:86:7a:c4:eb:ae:41:60:a5:e7:eb:90:c0:ea:8a:9d:c2:70:
3c:9d:c4:3d:78:16:f1:2c:b0:8c:f7:03:c2:cd:d7:d9:16:f6:
82:85:66:cb:69:a8:d4:02:c5:fd:16:3a:8a:15:83:73:7c:f9:
5a:01:47:c3:b9:e1:df:8c:d3:53:62:b8:fe:22:d7:d9:67:37:
f9:d0:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:48 2025 by rpki-client