Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: SKFF+Tw+kmpr+jIcuHSu6cneihn/n0X/uYYjTFGLC/o=
Subject key identifier: A8:3C:F6:05:92:1C:4A:A8:73:5D:2F:58:B9:6B:2C:B5:A0:3C:61:DC
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 019A71B907C173FAA52CA900FF780643B71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: ehlwro0TSOxwOm4rnd18Gjfl1reKzM7bTCRjxLt/T8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:07:c1:73:fa:a5:2c:a9:00:ff:78:06:43:b7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=a83cf605921c4aa8735d2f58b96b2cb5a03c61dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:9f:b0:fb:b7:d4:f8:c8:ea:34:1e:6d:42:
cb:94:06:31:87:4c:65:76:c9:77:41:9f:ee:ed:14:
2d:f6:a1:8d:7e:47:b7:ba:c4:20:bf:5e:15:8c:b9:
de:a1:39:05:a0:fd:39:dd:a5:d7:ae:cc:fd:43:b6:
64:50:9b:af:46:fc:c5:85:a8:88:9f:8f:50:49:78:
f9:77:5d:c5:0b:6a:7a:1f:1d:0e:21:f1:a5:d5:25:
db:a9:c2:0c:6a:4c:7c:e0:3b:7d:8b:04:ac:01:32:
d3:d7:94:a5:4a:a4:52:66:4f:a4:76:7b:9d:ff:db:
15:05:62:2b:40:c7:b1:a8:d2:a4:c3:8a:d3:4b:09:
64:47:ef:5c:11:fb:e1:be:66:ca:db:c0:62:a6:22:
51:13:c3:49:aa:ad:7c:60:28:15:12:96:b8:6c:a8:
db:ad:5a:fc:ec:df:92:cf:94:8f:95:94:9d:ef:06:
61:e2:b6:8a:8b:fc:ae:24:d5:4e:65:4e:d2:eb:aa:
d6:9f:35:04:0d:df:df:84:f4:fe:ad:04:9a:32:7e:
77:f2:e6:9f:0c:16:f2:7e:8f:d7:ed:b0:d9:43:3c:
05:e4:b5:8c:23:84:e0:0d:e9:93:45:a5:97:c5:90:
02:ac:4f:fb:28:98:5e:09:0e:a0:ae:2d:de:d3:68:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:F6:05:92:1C:4A:A8:73:5D:2F:58:B9:6B:2C:B5:A0:3C:61:DC
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:51:d0:e5:28:4f:a1:e0:07:13:0e:f3:46:9e:0b:5c:15:e9:
d7:85:70:52:bf:6c:d0:94:05:ff:c9:68:48:7d:8a:4d:3e:13:
80:67:20:10:43:0d:94:39:13:e4:7b:fe:91:4b:52:d6:63:f0:
04:97:b2:7c:cb:97:21:60:2d:ea:e9:77:73:8c:72:e8:9e:f2:
5d:59:d1:1d:74:39:11:3e:a9:c8:a4:c1:48:f1:3b:ad:ba:b4:
a1:7a:48:37:39:e2:54:c1:d2:18:7d:42:90:50:02:37:33:77:
d0:db:e4:40:18:cf:5b:ea:a7:11:64:79:1d:de:5a:f3:21:fd:
b6:6d:49:09:33:f4:05:81:8e:4f:a0:5f:dd:94:f5:e2:4f:0c:
88:95:b5:97:e2:30:28:8d:ba:bf:e0:dd:4c:36:8b:9c:4d:0f:
f3:3a:e4:2e:e1:2d:91:eb:95:25:c5:93:16:2f:3c:54:53:0d:
4f:5a:37:60:72:b0:3d:ce:35:4c:05:b8:35:3d:47:f8:52:e5:
bd:54:21:5e:ce:9e:27:0d:35:de:7a:5f:d6:fe:99:c6:5a:3b:
a7:bd:be:ff:cd:f0:96:48:0e:05:ea:a4:43:cd:74:13:e6:6a:
b7:85:88:46:40:aa:95:4b:3a:b2:f8:8a:19:15:03:6e:78:f9:
67:ec:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client