Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
File: Wy17v8Kblv03I3vOZ4bFO604D70.mft (raw, json)
Hash identifier: 1Soq9TqKelabu631wvvzqG5K/4NQWQrkiFz/883kjbU=
Subject key identifier: 31:47:BF:26:D2:6C:70:A0:56:87:C5:CD:88:73:FF:19:AB:63:49:6E
Authority key identifier: 5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD
Certificate issuer: /CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
Certificate serial: 019A729378EC6CC30895942255ACC93D49BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
Manifest number: 02F1
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: Wy17v8Kblv03I3vOZ4bFO604D70.crl (hash: RA+S/FAYH0uiRVec1CovLbnnN4m1+TZ8v0EfTCNeJbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:78:ec:6c:c3:08:95:94:22:55:ac:c9:3d:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=3147bf26d26c70a05687c5cd8873ff19ab63496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:69:e2:49:d1:8c:1d:ec:1d:e5:31:17:18:
f6:bd:38:0e:f2:29:6e:cb:02:e6:ec:9f:04:80:1e:
1f:d9:e5:09:1a:98:66:bd:a9:85:09:f2:d6:13:58:
f2:06:61:20:aa:53:b5:4b:74:59:4c:8f:a1:f5:95:
ac:fc:86:fe:b2:5c:61:cc:d0:3f:25:b4:6e:b1:b7:
d5:d2:3c:86:9b:bd:6f:c7:42:1d:86:54:ab:80:23:
33:15:0e:cb:41:bf:82:8f:39:8e:21:bc:94:12:89:
9d:43:73:65:0d:d6:c9:fe:b8:4d:f4:51:25:89:33:
05:de:3e:3f:9d:8c:46:3c:04:b6:57:ba:ca:bb:9a:
34:74:c4:7f:7f:5c:f5:41:4d:3e:25:2d:45:6b:0a:
21:43:ef:76:14:ba:60:82:43:51:ea:44:7a:59:98:
f1:13:d8:99:5a:f5:a5:33:6c:43:3f:48:2e:75:22:
44:24:a4:c1:7b:66:9a:bd:5d:2f:27:2e:8a:28:51:
34:5f:c0:d6:c9:2a:9a:67:68:9e:55:79:a3:3c:ff:
8d:5a:d6:87:c4:fb:b9:53:e4:d8:1d:29:f2:8c:ff:
a4:53:74:e0:61:c5:ab:fd:9e:7f:d2:fb:83:ae:14:
02:3a:6f:14:77:f0:4b:be:88:22:25:51:28:3a:4a:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:47:BF:26:D2:6C:70:A0:56:87:C5:CD:88:73:FF:19:AB:63:49:6E
X509v3 Authority Key Identifier:
keyid:5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7b:45:fe:d5:03:9a:f1:3b:d8:32:d8:b1:7f:5f:a4:96:73:
d0:02:c5:b1:13:88:38:f7:a5:ce:bf:e6:5c:dd:28:56:d5:7d:
7e:65:35:3b:7f:4b:e4:a0:df:41:6c:23:e8:70:45:2b:22:68:
85:8f:b8:11:bd:b7:f4:3f:e0:34:c9:2c:14:53:00:b3:2e:55:
e6:79:83:a5:56:86:60:01:e6:13:aa:89:8b:2c:c8:78:6f:0d:
c9:ab:a4:ed:f8:45:c4:33:cc:60:39:39:fc:bf:2e:e1:4e:17:
8d:9d:09:cf:63:b1:11:ad:61:77:6f:42:6d:5b:01:bb:17:04:
02:d2:90:c1:9d:f9:de:0a:ef:eb:66:72:32:d4:4e:06:d1:16:
cd:1a:a2:fc:c0:c6:e2:ca:83:9d:af:6e:32:33:84:75:2c:d7:
fd:ce:55:7f:33:f8:0b:13:e2:d3:b0:13:8c:1f:b7:64:d0:73:
da:c3:30:3d:c9:25:7b:42:66:de:d5:21:4d:6f:68:ac:ce:29:
59:15:1e:bd:22:77:03:f8:fb:5b:79:e6:06:03:06:2f:53:0d:
02:80:8c:94:28:a2:34:58:57:57:dc:6a:74:eb:09:e3:21:ef:
52:67:eb:4e:72:bf:a0:da:87:13:9b:b7:1c:40:e1:47:93:3e:
23:fa:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:40 2025 by rpki-client