Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File: WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier: YiY2r8yesoxpJaovifZMRcwhWt/ajXI5P5N4SQf1HUQ=
Subject key identifier: C8:27:50:17:53:C1:E9:D9:A5:7D:18:AA:E9:37:E6:E9:A5:1C:3C:7D
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer: /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial: 019A7293533D6F5D6470A458B6EE4A03F7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number: 0FAE
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: 7bbINOsMOeJB9Ahh76mQqmhL+qxxpyoT1VKipQfqoQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:53:3d:6f:5d:64:70:a4:58:b6:ee:4a:03:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=c827501753c1e9d9a57d18aae937e6e9a51c3c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:6b:be:98:92:ad:6c:de:5c:27:d8:3c:70:
92:fc:7c:f2:b0:d3:74:8c:1e:03:27:ac:bc:f8:75:
9b:09:28:06:e7:5b:9f:64:6a:b0:b4:da:9a:9c:a6:
d0:b9:f4:2f:e1:52:e1:d5:dd:a3:c6:7c:a7:1b:a6:
fe:22:45:20:59:07:3b:a7:f6:9b:7f:04:eb:a0:25:
93:96:1b:a5:f4:e0:a2:ba:cd:d3:02:5d:9e:6f:d9:
0a:e3:98:74:9c:5d:fa:93:05:61:8a:b0:df:bf:ac:
9b:36:c3:d4:bf:a2:da:e4:55:bf:3e:f0:c3:9d:2c:
91:ad:0e:90:73:9f:f9:29:a1:12:56:cf:64:7c:2c:
2d:a2:8a:b1:7c:32:13:ec:2f:6f:4d:8a:c4:c9:49:
9b:d9:75:5d:fd:8f:54:b4:93:81:7b:e3:8c:08:df:
c6:e3:ac:ef:86:4e:3e:13:46:0d:ad:64:e5:e0:0c:
fb:bf:d0:1e:d1:b4:9e:9e:1b:84:c2:29:f7:4d:10:
f0:5b:1c:48:7d:98:55:bb:f4:ca:b9:66:d5:c8:bd:
15:39:47:89:fa:72:5c:14:1b:61:de:44:1d:04:64:
00:47:75:69:73:23:4d:36:a1:4c:ea:d2:a1:72:06:
2c:1e:0f:cd:54:c7:2f:6c:22:c1:d9:92:1b:92:4f:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:27:50:17:53:C1:E9:D9:A5:7D:18:AA:E9:37:E6:E9:A5:1C:3C:7D
X509v3 Authority Key Identifier:
keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:50:07:67:a1:a7:fe:1a:91:8b:57:83:23:68:71:11:4c:c4:
fd:8b:7f:d8:ce:c6:7b:9f:8a:38:4c:85:af:9b:90:f8:2e:68:
b8:79:5d:5a:42:6c:cf:7b:11:c0:cc:ab:7f:21:4c:d6:4c:8c:
17:a7:16:29:d0:8d:c7:c8:bf:6e:e2:c8:a4:c0:c8:83:2f:5e:
85:a4:71:99:cd:89:d5:37:3b:9e:44:ee:6e:92:3b:26:4b:0f:
cd:b5:d9:8f:c0:95:a2:f5:4b:2c:ec:72:25:17:6c:57:09:70:
c0:d9:3d:26:10:29:3c:07:b5:e6:eb:09:a4:6b:c6:80:31:0c:
a2:e1:a9:e0:f7:2b:bc:df:34:24:25:d2:16:ae:d3:cc:74:f2:
e0:7b:14:f7:0d:ec:ba:48:0f:78:d0:f5:53:90:de:a0:a3:8a:
f8:2d:6d:36:cd:64:6d:cd:37:8a:b7:39:fc:ef:31:c5:cc:72:
3f:8c:4c:b0:b4:69:40:52:c6:6a:15:6d:14:4b:16:b3:2f:73:
61:88:40:74:48:d0:40:ce:3a:97:d2:7d:bc:58:aa:3d:36:fc:
e8:97:45:ea:58:69:3c:ec:40:4c:bb:73:a2:9f:db:e9:91:4f:
e8:e9:dc:9d:37:82:63:8f:09:67:c2:f6:9b:9a:3c:d9:e6:ca:
7f:d7:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:35 2025 by rpki-client