Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File: wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier: wxHXPLpaGwfH3AxPJuIEmMUrZ2Vi4p+Epu43XFVXwBk=
Subject key identifier: CB:70:97:D5:0B:B5:21:16:DF:29:28:4E:A3:C3:29:5E:4D:87:4F:84
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer: /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial: 019A71B7BB6227CF7B1751A6AB0D06F1FA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number: 0E13
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: UevT7U+QKexyLfS/DwPS0EWNB4pZxE7QiBSGhmHRxZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bb:62:27:cf:7b:17:51:a6:ab:0d:06:f1:fa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=cb7097d50bb52116df29284ea3c3295e4d874f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:9d:0d:ae:b8:35:68:d9:c5:5a:df:d7:42:
ef:75:9c:87:bc:84:90:f6:bc:eb:7e:ba:e0:f3:92:
2f:13:d4:74:04:47:de:98:2f:b8:be:3c:25:d0:9b:
cc:93:8e:5e:e0:c5:2e:3c:84:fc:94:f9:4a:aa:10:
28:83:4a:7c:74:ce:76:cb:8b:c6:f2:2b:d9:e3:45:
58:48:b0:55:1a:bd:78:ca:09:37:1e:9f:7d:6b:1d:
9f:b6:a3:83:02:4c:26:29:1a:d6:ce:77:89:2c:3a:
e0:fa:0e:8d:78:81:cf:f6:fd:b4:04:1c:fc:b1:bd:
c9:cd:b2:cf:37:c6:dd:fd:ca:fd:17:0a:f6:1b:cf:
4f:a7:5e:c7:95:3d:05:34:10:b6:bb:b0:d9:dd:b1:
d8:38:c7:30:58:78:0f:10:c6:fb:49:b5:27:64:5e:
86:ff:a4:d4:6f:a7:10:7e:5d:c5:71:41:c7:33:0f:
46:a9:75:04:bd:52:e9:65:45:ed:f2:4f:59:6c:12:
c4:2a:da:d6:8f:9f:e6:1b:10:ae:ce:ea:c3:39:6f:
de:aa:44:c4:59:1b:7b:09:b4:10:7d:ce:c5:f1:98:
ad:b2:13:6b:cc:3d:30:cd:76:b9:84:cd:d6:44:ec:
bc:da:d0:f2:eb:95:a9:62:a8:38:9e:c1:e3:b2:fb:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:97:D5:0B:B5:21:16:DF:29:28:4E:A3:C3:29:5E:4D:87:4F:84
X509v3 Authority Key Identifier:
keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e9:04:39:26:9a:a3:b5:12:40:d8:64:e9:92:b9:0b:bb:70:
91:19:60:65:6f:fb:a6:0f:74:78:5f:af:10:c3:c0:79:24:02:
f2:7d:94:88:2f:f6:48:2e:63:d9:14:7c:ee:48:5a:ad:8a:ef:
b1:c9:fe:c2:59:7b:fc:a9:ca:66:97:20:25:40:fc:b2:6d:d2:
44:e6:55:0b:a0:8d:e9:bf:7c:1a:58:13:3e:63:56:09:50:f3:
a1:48:f7:9c:44:c3:42:98:4e:14:f6:04:50:79:7c:ab:ce:b9:
c0:ee:eb:d0:e9:3f:eb:37:b2:27:5d:60:8c:7a:f3:84:82:e0:
fd:bf:d3:f2:2a:9a:69:09:95:6f:64:8b:13:a4:bf:86:8a:49:
ef:19:b9:75:41:39:d3:20:14:85:81:0b:f4:7e:28:a6:4c:2f:
aa:e5:6d:cb:7b:28:fe:d5:4b:45:70:05:48:de:e2:2a:6c:d9:
28:59:eb:49:93:c6:c3:37:61:99:b4:27:95:95:19:40:de:87:
de:0a:3d:36:93:61:e5:b3:f7:b9:be:06:bd:83:a4:f4:51:40:
73:32:c3:83:f4:dc:fb:81:e3:cc:72:62:b8:32:db:ed:bb:f7:
ac:ea:d8:73:1f:30:34:dd:e6:e6:4f:90:51:31:be:f9:1d:e9:
f3:f4:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:01 2025 by rpki-client