Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
File: E-wlUTMqDDL7dyXQaVgta1C-Np8.mft (raw, json)
Hash identifier: CoU7R/MbYPUcW2E2s5ajEnE+hdRO63ezZP6eCzoucCU=
Subject key identifier: F0:E1:B8:E3:06:07:CE:14:D3:A2:B8:06:AF:8E:4F:F4:9B:D3:A2:9D
Authority key identifier: 13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F
Certificate issuer: /CN=13ec2551332a0c32fb7725d069582d6b50be369f
Certificate serial: 019A71B8529E52F78847AD576E85DA29D8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
Manifest number: 09FF
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: E-wlUTMqDDL7dyXQaVgta1C-Np8.crl (hash: +tLJrx2xQkpgnayn7igpJ4+1HE7c8nd2n0JvhMer0zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:52:9e:52:f7:88:47:ad:57:6e:85:da:29:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec2551332a0c32fb7725d069582d6b50be369f
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=f0e1b8e30607ce14d3a2b806af8e4ff49bd3a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:a2:d1:28:00:12:ec:51:ba:d8:5e:8f:2e:
af:8a:c7:35:05:ba:c6:ad:40:39:cf:3b:2c:49:d3:
70:a8:93:75:f7:6d:eb:bb:4d:ae:1a:17:92:84:09:
a5:5a:3c:27:73:36:03:d9:05:3d:1c:8f:a8:d7:82:
1c:e8:df:38:c1:10:25:88:18:7d:8d:87:67:44:8a:
e7:66:f0:1d:08:f9:66:7b:b0:f4:08:9a:cb:e2:3c:
d7:63:8e:b5:a4:0d:fd:e4:b6:cf:4d:b0:27:fe:10:
8a:e3:79:54:ad:a5:d9:46:7d:d0:77:8c:1f:17:66:
4a:20:56:a6:e8:14:6a:56:93:ac:9f:63:1d:87:92:
ce:ff:c1:eb:7d:49:22:9b:64:e4:e0:f7:61:04:cd:
2e:ec:a8:01:59:f2:00:57:6b:cb:33:2f:8a:1f:90:
5a:21:33:93:fc:30:57:f1:d7:13:17:4e:94:d5:b6:
e2:3e:f9:1b:1f:b6:16:e6:5f:75:f7:81:1c:b1:60:
8b:28:da:9d:d4:f5:0e:73:fc:0e:40:4a:ef:fe:9c:
d1:34:21:50:4e:23:c3:16:af:8c:28:00:40:e7:ec:
35:3e:8d:de:01:8f:fb:a1:c7:0e:be:22:a6:cb:2b:
26:4b:49:8d:1f:18:6a:1f:bd:64:25:fc:ec:3f:4a:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:B8:E3:06:07:CE:14:D3:A2:B8:06:AF:8E:4F:F4:9B:D3:A2:9D
X509v3 Authority Key Identifier:
keyid:13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ac:09:a4:39:f5:c1:e7:22:15:00:e8:46:81:35:e7:ca:eb:
cc:08:66:76:a3:9b:5e:9f:6b:98:b3:37:1e:f1:88:64:89:a0:
7d:10:fa:96:6d:45:8c:da:cd:89:3c:18:89:43:cc:a8:7f:7a:
4a:3d:69:d6:ae:8c:9f:47:64:54:78:1e:65:a5:ab:6e:95:01:
de:de:ae:8c:b9:0d:78:43:51:10:61:01:bb:8a:d8:e1:84:9e:
80:bc:8b:e0:dc:7a:dc:22:68:31:cd:bb:ba:a8:bd:3e:de:7e:
f9:a7:6b:2b:1d:ef:a1:1a:85:8e:25:df:b1:ef:ac:4c:fc:0c:
42:9b:e8:bc:da:2d:90:34:99:57:9d:e3:db:ea:23:6d:8c:84:
eb:65:26:ac:84:61:3d:87:e4:2b:0d:7a:f5:1b:85:9c:ed:7d:
46:b3:01:b2:d0:1d:5c:56:1f:e2:50:a8:bb:d6:99:f4:f4:af:
e0:d9:b6:23:13:2c:74:56:9b:35:4a:5f:21:41:0f:6b:31:5d:
40:0e:bb:cc:8b:ff:e8:b1:a8:17:b4:25:61:61:cf:06:b0:85:
87:40:15:7e:01:ef:72:39:92:3c:68:76:f5:73:c9:e1:1a:66:
3b:0b:08:54:42:16:5a:68:28:f0:8d:a9:c3:47:c9:b1:98:fc:
9b:f4:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:52 2025 by rpki-client