
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier: 3DS0C7cJfyPu56ntrPHKIgbhZhm9W/4ad9z73Bsqy5A=
Subject key identifier: FD:46:1B:78:A0:14:A7:AB:90:47:92:77:6D:68:42:AB:E8:B9:08:63
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial: 019922FA1D244D3B70D18F9461B0CCF583B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: IKcRCqrISPM+T3yKD2ExoiSzeITVkvmm2BicDdFpH88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1d:24:4d:3b:70:d1:8f:94:61:b0:cc:f5:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=fd461b78a014a7ab904792776d6842abe8b90863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:32:23:bc:63:da:17:dd:d2:66:e3:f7:63:
bf:02:21:a8:ad:1b:1c:00:a9:00:6a:a1:63:3e:36:
dc:f5:e8:01:59:cc:99:f4:d5:11:78:85:df:9e:2d:
2a:35:6a:d5:5d:9a:5e:04:be:85:de:d6:56:88:5e:
b9:5c:83:52:3f:cd:b7:e5:78:5b:29:f3:bb:7f:d7:
e6:32:23:f1:74:cc:dd:36:69:c6:e0:50:d1:35:5f:
c4:1b:ef:11:f4:fd:17:01:89:dd:e7:6f:99:8f:72:
6f:96:28:f7:10:0f:b3:3e:64:b2:90:5e:f7:7b:cd:
b0:8c:da:87:2d:7b:0e:f7:12:09:53:50:dd:52:b2:
e8:95:83:67:c7:0c:ac:62:f3:d8:6b:23:21:6d:dd:
51:b2:67:d7:55:7b:f6:53:88:5b:94:9d:ae:1d:87:
c5:cf:bd:fa:35:47:50:37:5e:08:83:2a:24:6f:5c:
c9:74:60:7d:64:1d:82:66:89:50:65:5a:4f:39:11:
ad:53:76:f1:95:98:77:c6:21:42:5b:c3:cd:a1:8f:
ff:71:1c:20:3b:b1:4c:a2:3f:51:26:4e:10:55:5e:
62:94:f4:7f:7f:78:57:55:e9:d2:a3:be:b0:ec:f9:
ad:b8:a9:47:c9:a7:6d:e3:e5:51:21:7e:57:52:9f:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:1B:78:A0:14:A7:AB:90:47:92:77:6D:68:42:AB:E8:B9:08:63
X509v3 Authority Key Identifier:
keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:b2:5e:a9:f7:d3:25:3e:ea:55:d4:d4:74:95:33:e8:0c:
db:3e:18:7f:84:c4:aa:c2:79:b8:40:ed:71:60:18:c3:c7:ae:
52:49:ab:30:35:29:df:54:6f:ca:9b:d5:5b:8b:b6:00:78:e1:
df:13:f9:68:52:49:1e:49:99:38:a0:f2:13:e4:ce:62:4f:9d:
05:9c:ce:26:39:ad:e6:26:05:ed:e7:03:ab:3e:45:c8:64:b4:
dc:16:aa:5b:ee:67:17:63:e6:77:f5:d1:33:70:db:29:6b:57:
aa:1b:22:1e:e6:99:7e:ad:e2:2a:54:bc:52:6f:86:c8:76:9e:
46:a5:cc:a2:4a:64:f3:48:d4:50:21:cb:2c:a0:83:ee:f2:58:
b8:5a:c1:f8:2c:69:94:a6:3b:27:6a:36:aa:4e:4e:d7:99:64:
a5:ed:2a:9c:e9:26:63:9a:ac:c2:e6:89:ce:20:27:47:ce:eb:
68:1d:0f:c8:f5:45:cf:42:c7:fb:87:b3:33:d5:69:12:e1:a2:
e6:8a:43:2a:58:e6:90:d6:db:e9:04:ce:a1:c5:bc:b9:2d:ec:
45:e6:6d:52:d1:b9:5b:d9:37:4c:36:6c:5b:8e:e6:fa:ab:34:
76:de:b3:3f:47:e0:a7:d5:3b:d0:d9:ed:c6:12:38:4a:a8:fb:
6a:45:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:03 2025 by rpki-client