Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier: yLs5gaHlqq1JzroR8y3rtKThw2bQxfUYI4JRSYDJ9CE=
Subject key identifier: AA:8F:95:54:56:B1:B3:BF:BA:63:52:D9:82:29:4D:89:A2:47:B7:3C
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial: 019A70DC18F0A9601C5804E0F43662510F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number: 06DD
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: MBTYTAgGMN1chvFkooCwRP7M2MH/TaKWmWmHAH+WZss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:18:f0:a9:60:1c:58:04:e0:f4:36:62:51:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=aa8f955456b1b3bfba6352d982294d89a247b73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:ef:a1:32:44:75:98:5a:1f:cb:a7:de:c2:
42:0d:a8:09:8d:dd:6c:46:d6:da:f3:08:66:e2:98:
4f:ad:0f:72:c7:9f:18:ca:52:f9:fa:b2:7c:27:eb:
2b:33:72:3f:3d:fc:fb:d7:b7:90:46:e0:65:b6:b9:
7c:fe:41:c4:91:dc:9c:1b:ac:b2:bd:d0:78:bf:5f:
24:eb:c2:f2:a6:8c:f2:03:8f:cf:36:70:a1:3a:6c:
84:bc:cf:10:e0:a3:6e:8a:2f:66:34:32:f9:a1:6c:
9c:5e:6c:3b:43:11:6a:af:e4:d5:96:4c:b3:1d:56:
5c:b0:04:30:c0:ce:4c:7a:20:44:b5:2c:31:3c:56:
f1:f1:14:2a:a1:31:b4:28:88:44:b2:6c:a8:69:a9:
92:0e:3b:c5:a4:34:1b:28:17:ba:ed:e3:82:a5:08:
4c:06:44:c4:62:e0:a8:9d:13:01:5a:8d:90:97:53:
00:05:f0:f2:9c:4a:9a:4d:43:6f:32:84:62:71:4c:
3d:93:3f:13:53:9b:08:9f:aa:5b:2a:73:ee:91:d8:
e2:c6:af:ad:d2:9b:e1:7b:8b:a0:6f:e5:62:92:74:
cd:6e:4a:8e:9a:0e:05:09:97:ef:06:f0:f1:84:9e:
86:9d:16:fb:1c:70:5c:4a:55:33:52:05:bb:c7:cf:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8F:95:54:56:B1:B3:BF:BA:63:52:D9:82:29:4D:89:A2:47:B7:3C
X509v3 Authority Key Identifier:
keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ea:a1:9d:87:2a:d9:22:19:63:7d:3c:78:3c:65:f1:7e:d3:
9e:8c:06:c1:9a:0d:c1:ea:48:b7:b2:42:12:2d:b7:d0:4c:f7:
f2:7c:b1:a3:d5:32:9a:37:e9:63:d5:4c:c9:09:aa:db:f9:5a:
93:04:70:93:b7:42:ca:47:11:73:2c:8a:ac:8e:8b:fb:7f:e5:
c3:02:d1:4c:43:7b:f3:4d:00:2e:55:71:20:46:4d:9a:6b:47:
4e:1b:23:78:db:18:9b:3e:6d:6f:f9:dd:ed:31:d0:ce:c0:e0:
1e:bb:8a:aa:0c:fa:c4:c7:46:83:20:a9:2a:eb:ec:ae:eb:25:
0b:ae:1e:32:8d:f3:e8:15:f5:25:23:37:f2:f9:5f:9d:94:ff:
f2:c8:7e:22:ff:9a:c9:84:a2:3d:f1:08:2c:1a:ac:80:eb:9c:
6a:a2:1f:bd:ff:f2:9b:be:c9:e9:02:59:5c:1a:dc:52:b9:8b:
10:02:99:1a:05:bc:9a:4b:e7:bb:17:19:15:a6:55:39:18:fd:
3e:22:da:a7:1c:3f:71:c8:f2:7c:b0:a4:04:d4:a4:41:bc:cb:
41:d1:1e:1e:0b:b0:00:92:78:92:58:a1:68:6c:0c:1e:7e:a0:
6b:0e:87:38:6b:26:e6:3c:29:43:fb:c4:b6:9c:32:e7:c8:d6:
ba:e5:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client