Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier: ID+mvrZrDZhOjurBmNDlxfOMb7nx+9XIrbDD6zX3+yc=
Subject key identifier: F0:97:5F:3F:DE:BD:53:8D:C6:8E:F1:7B:C8:95:D7:89:BC:FE:75:5B
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial: 019A71B7A169C2EAD3ECA99FE3FB154EF11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number: 0817
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: H3KLgi38PA6/v43Z6a790u/V0DXYm2aQf00Iw10QpLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a1:69:c2:ea:d3:ec:a9:9f:e3:fb:15:4e:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=f0975f3fdebd538dc68ef17bc895d789bcfe755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:b1:9e:2e:b3:dc:66:0d:a7:5c:0c:de:17:
34:5f:62:01:cd:68:8c:8c:38:32:a1:89:2f:5a:5c:
58:85:1c:a8:2b:42:bf:84:03:d4:bc:1f:c2:2e:c8:
00:80:fb:43:68:a6:53:52:35:6c:68:68:86:9b:9c:
fe:d4:c2:ea:c7:91:0b:e5:03:bc:11:d1:60:66:c5:
8e:97:bb:9d:14:0c:d2:2f:4b:32:5f:62:96:9a:ee:
49:9d:4c:3b:67:47:dc:b5:ee:ef:95:fc:c6:f8:60:
65:50:80:c6:cf:79:05:0e:06:4e:e6:a8:e4:ae:6f:
27:ba:8c:2e:d0:90:2c:0a:4e:fb:c4:95:3e:e6:9d:
6b:f5:c6:25:b5:7b:4b:33:99:82:61:3b:34:4f:9a:
94:81:30:41:14:46:d8:ed:90:c9:8c:bd:5b:68:c6:
f0:1b:ef:bd:dd:6e:10:e7:00:9f:70:08:94:b8:00:
c2:4c:ad:30:dc:f0:04:c3:8d:c7:e3:6f:e8:d4:14:
8f:46:17:44:dd:74:5a:09:bd:6f:3a:1a:5f:80:d4:
7a:07:68:59:86:b2:c0:08:fb:a3:1b:4b:ec:71:5e:
93:14:e2:79:b6:ab:e6:b3:42:6f:ad:5f:87:6f:4e:
d3:59:cc:80:9e:7d:da:53:d2:88:c2:9a:04:75:0e:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:5F:3F:DE:BD:53:8D:C6:8E:F1:7B:C8:95:D7:89:BC:FE:75:5B
X509v3 Authority Key Identifier:
keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8e:94:24:95:a7:7d:fd:b8:7d:85:e2:10:ec:1a:18:df:3e:
2e:11:b3:92:6e:43:bf:d5:a6:85:b5:8a:db:7c:e9:b9:cb:fa:
15:dc:70:0e:55:a3:4e:24:02:ff:c9:93:7c:75:15:ea:74:33:
68:7e:be:76:18:bc:87:9d:71:c5:cf:c0:81:e8:92:78:19:0c:
a9:75:e2:c9:16:78:ca:14:01:ae:48:df:a3:98:ef:84:97:65:
e4:b3:98:02:4d:74:19:41:98:fd:81:cc:76:0f:c4:9b:ab:ff:
6c:4a:c2:62:94:e9:93:14:13:72:68:60:70:cc:12:5b:a3:d9:
28:d2:4a:14:ae:05:e3:6f:63:bf:cd:fa:b2:b7:db:b0:d1:b6:
9c:32:ec:d6:b8:f4:32:bc:73:83:03:7c:23:db:19:43:f0:00:
3f:36:9d:94:6c:5c:7c:92:0f:c2:1d:87:78:53:c7:d8:32:55:
df:24:6f:a0:77:27:e5:74:0a:08:69:20:65:ef:61:6b:a3:ec:
96:29:01:1a:2a:1c:0d:33:01:7f:73:a7:28:fb:80:4f:f2:ac:
9f:a2:2a:0c:41:b8:1c:03:a9:d4:09:8e:2c:1c:7d:9d:f4:80:
e2:9e:23:3a:c2:38:a5:bc:f3:49:3e:dc:a2:75:74:23:eb:24:
69:d7:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:42 2025 by rpki-client