Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json)
Hash identifier: Yg1TjUx1CoUm1v8cVDF3qmJI7xVC5+Ul9JDC9G6hFrU=
Subject key identifier: D0:3E:13:2C:76:31:C2:03:74:82:95:C2:50:AB:8B:5C:28:B3:F9:FB
Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Certificate serial: 019A71B7AE6A9663DAA36D5C944BD4366C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
Manifest number: 0B95
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: iTFA8pp83hNqMEWIuk71dQJnldlzOPmoCOeUauWy+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ae:6a:96:63:da:a3:6d:5c:94:4b:d4:36:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=d03e132c7631c203748295c250ab8b5c28b3f9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:41:ef:05:c3:92:cc:b7:06:cd:ed:93:49:
09:c7:c7:07:78:c7:61:27:79:0f:88:08:30:00:2a:
29:9b:80:94:a4:8d:d3:be:ec:4d:28:2f:41:20:0d:
d7:34:e4:9c:f7:be:a6:8b:ab:07:74:02:ac:43:6d:
66:d0:65:53:e4:79:b9:e4:8f:7e:41:da:2c:b5:22:
b1:0b:52:df:d5:e5:df:0b:4d:88:b7:07:7d:8a:73:
1d:cd:5c:e4:d2:ab:ca:b6:f5:f9:0c:18:68:7e:00:
9a:ee:95:8f:5c:05:45:52:dd:7c:a1:f5:3a:1d:25:
47:1d:67:78:01:1f:d9:55:a5:07:e7:3a:59:a6:0a:
b1:d6:94:2a:39:26:fd:61:df:74:c8:6d:18:96:5e:
67:df:7b:07:53:5b:66:19:7d:8f:8b:f5:83:07:a9:
d0:6f:fa:a1:cc:bf:1a:b2:9f:24:be:15:40:50:e8:
24:e9:a2:f2:69:1b:fb:9f:72:2b:5f:1c:8a:f4:c3:
88:42:d9:af:80:04:dd:c9:45:db:f3:c3:f5:3b:68:
45:74:57:ac:f0:1d:f9:ff:fd:56:22:fa:06:55:4c:
6a:39:27:99:2d:a5:6e:3a:eb:48:23:82:e9:8f:b1:
f5:ea:85:b5:31:1e:f0:98:30:e0:12:b1:70:38:89:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3E:13:2C:76:31:C2:03:74:82:95:C2:50:AB:8B:5C:28:B3:F9:FB
X509v3 Authority Key Identifier:
keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:ef:d4:19:c3:d3:94:f5:df:f1:b1:5d:a5:1c:96:b5:56:
6e:82:b4:42:50:97:25:20:74:1d:21:02:37:28:5d:0e:c8:6a:
40:05:ea:a9:71:c1:d8:9f:5c:dd:75:5d:dc:54:15:76:01:5a:
51:5a:fb:cf:ef:2a:5e:f8:8a:7a:31:2a:a1:69:42:ef:42:9a:
b0:e0:71:9f:96:41:ed:fc:af:44:73:cb:7e:ed:38:36:d1:e1:
a0:85:17:00:25:6e:f5:1f:1d:7e:80:d5:b2:5a:9e:a0:22:c0:
56:64:3c:8f:c3:c3:87:f2:60:77:29:9f:a3:95:5e:8c:ba:c3:
63:34:0c:08:2c:f0:d4:44:87:23:3c:68:4b:b9:57:29:59:ba:
11:a4:8f:41:ad:f4:78:1f:c2:4a:b3:f4:ae:6b:72:05:ae:a9:
e8:59:0d:34:4b:96:a7:30:93:fd:2f:8f:1a:6f:aa:9c:f8:0d:
7f:3f:65:0e:4c:49:f7:ae:7b:72:d8:40:30:9c:ca:b9:35:49:
98:58:5e:d2:5e:8b:21:dc:e6:43:3b:54:7e:7f:bc:34:c6:13:
35:9b:64:da:8a:18:86:f7:35:54:6f:89:63:34:69:89:f0:44:
14:59:5d:8f:79:e0:0b:f5:5a:6a:42:d0:f5:23:79:19:b9:c6:
a6:fe:97:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:39 2025 by rpki-client