Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier: sjg3IcNUhp3kybEAgf1dYVqnwbxqvR+vjMI19dBrVd4=
Subject key identifier: 57:DA:7C:19:52:C9:40:55:7A:3F:08:5E:FC:3E:52:7F:3B:A6:CF:02
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial: 019A7301A5E60B367963232B6C55E54FB445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 13:01:19 +0000
Manifest this update: Tue 11 Nov 2025 13:01:19 +0000
Manifest next update: Wed 12 Nov 2025 13:01:19 +0000
Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: 7yBgN8Xl7AKLQcqN7i/MQz8TCp+UXDPKOurO3KydRtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a5:e6:0b:36:79:63:23:2b:6c:55:e5:4f:b4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Validity
Not Before: Nov 11 13:01:19 2025 GMT
Not After : Nov 12 13:01:19 2025 GMT
Subject: CN=57da7c1952c940557a3f085efc3e527f3ba6cf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:8f:c5:64:42:fc:a0:dd:de:7f:b7:42:8e:
63:82:8b:f5:e5:40:f0:15:ec:ac:56:7d:c6:50:83:
4e:de:7a:4e:4f:f0:16:a1:e7:b7:4f:16:fa:7b:d8:
4e:3f:8c:e4:e7:f0:bd:a0:50:8e:39:9d:e8:c6:09:
ed:59:d7:a6:28:c6:0c:75:a7:3e:87:44:a7:18:dc:
bb:4d:97:15:c8:67:36:b4:04:5d:ab:83:9c:1d:25:
5b:7f:26:69:a6:12:e9:64:77:72:0a:d3:32:84:7a:
6d:d0:42:89:d8:85:d8:76:f8:ad:06:fc:4f:f4:70:
2d:de:34:b6:e9:a9:07:41:14:be:0c:70:4f:0e:f9:
d5:85:a5:a7:13:d3:7f:07:2d:5a:96:16:42:1c:19:
86:9c:4d:52:1a:56:9a:12:30:1c:a0:2b:14:63:89:
3e:56:26:b8:62:94:21:93:cb:b2:94:96:39:97:19:
4b:8f:f8:1d:c6:50:d9:51:a0:bd:88:16:3d:66:15:
27:7a:9b:38:a1:06:92:e2:a8:16:dc:6f:29:58:de:
30:6c:96:68:e7:46:94:e2:88:4c:b1:55:65:43:c5:
f8:aa:8a:17:56:b5:34:b7:35:48:08:da:8a:42:0c:
6d:23:00:69:1e:4d:c1:da:97:9c:a3:a7:35:13:8b:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DA:7C:19:52:C9:40:55:7A:3F:08:5E:FC:3E:52:7F:3B:A6:CF:02
X509v3 Authority Key Identifier:
keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:85:2a:12:be:52:24:2b:31:90:e4:1a:0a:a9:f4:b4:67:d2:
5c:d3:bc:0b:1c:58:ac:8d:a7:a6:fc:ab:75:84:f6:4b:90:3c:
17:45:2f:c4:98:42:da:90:35:c0:15:ae:8c:b5:13:75:9f:e9:
ba:c8:05:24:7b:41:64:2e:62:cd:d5:b1:65:d3:6d:ab:3d:54:
ab:e3:23:0f:93:68:79:d4:73:4f:50:96:5f:f2:83:cf:65:e8:
8a:66:ee:10:23:6a:3d:87:84:66:3c:95:34:d8:af:af:60:c7:
3a:fa:fd:c6:aa:28:d7:03:a1:c3:a3:79:c3:67:12:df:17:a4:
c5:a7:08:2a:33:6f:e5:12:87:8d:32:88:05:d1:7c:b6:ed:47:
83:f7:d2:fd:e9:c2:72:d4:b7:1f:ab:6e:a6:0c:59:eb:00:02:
f7:99:c2:5c:b1:6e:71:63:ab:67:50:0b:1a:af:10:4a:0a:3c:
da:22:d7:40:a2:57:e0:90:35:ef:c6:41:60:c2:fc:b6:9d:77:
49:25:49:fd:83:f0:53:76:29:d3:f2:4e:59:d2:f8:32:63:43:
9a:2d:30:b9:0d:46:da:f5:39:f5:ca:8c:df:85:32:c8:05:37:
16:cb:35:a4:8a:52:d8:54:03:1f:86:d7:73:b1:f6:42:71:48:
54:ed:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:45 2025 by rpki-client