Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier: DDU1q272NxLB/+wCT3fH6ScCzAeBjXmq1yEkh5Z1NA0=
Subject key identifier: CA:DA:9A:04:4D:91:75:A3:04:91:70:81:A0:C1:2D:89:9D:7F:0B:A6
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial: 019A71B7B80353BB592DAEC2E2B23927C535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number: 0D85
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: FPAGiEevjXvAPnNzS7AMMnyLVvFdaT+rMVb5GtCPvhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b8:03:53:bb:59:2d:ae:c2:e2:b2:39:27:c5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=cada9a044d9175a304917081a0c12d899d7f0ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:d7:d7:3b:0d:a0:34:78:ef:71:78:10:47:
e9:87:61:6c:60:e1:1f:74:fa:34:0a:ea:b9:f8:ff:
3e:c3:c3:a2:6b:a0:aa:7a:33:d2:0a:90:ad:b2:e3:
e0:b4:ca:63:8c:01:2b:d2:33:88:10:d2:cb:89:07:
29:ac:39:94:bc:25:29:47:b4:e7:2e:f5:7b:d1:04:
e0:80:7a:ec:40:0f:08:f9:5c:b5:6d:40:e5:8f:99:
1e:dd:11:86:ca:6b:33:4f:8a:51:6b:6a:bf:90:5a:
11:f0:d1:ef:06:ed:94:88:6a:22:b0:a2:51:86:8d:
74:9b:5f:e3:fa:f5:3b:5e:b3:53:31:ef:d5:c5:47:
40:cc:c5:d6:9c:3f:23:00:3a:17:3f:ac:67:b7:b2:
62:a4:d7:f4:b6:d0:25:d1:51:3c:4a:e7:1c:3e:6d:
15:fd:ea:e7:1a:4e:d3:a2:14:f4:4f:48:1a:01:4d:
8b:10:5e:7e:e3:a3:8f:fc:d2:57:3e:cd:03:8b:4c:
48:a0:b3:00:f9:9f:b1:b2:92:61:f8:69:cb:48:1b:
9b:4e:8e:2f:c2:9f:68:a4:31:7c:de:55:9c:86:f6:
4a:e0:63:bf:c1:74:c7:06:3b:5e:8a:9f:54:bc:c0:
58:00:19:13:f8:ea:fe:82:b4:72:b9:04:ff:c1:95:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:9A:04:4D:91:75:A3:04:91:70:81:A0:C1:2D:89:9D:7F:0B:A6
X509v3 Authority Key Identifier:
keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1b:15:bb:5e:8f:64:91:4a:86:16:27:08:df:b8:f3:a2:29:
e4:14:8b:75:1b:93:bb:68:fa:7b:fb:81:02:50:33:08:ae:80:
02:c9:ec:03:46:e1:4c:2c:d5:95:ab:9d:a4:bb:3a:8b:29:99:
ff:82:b0:e3:04:a8:a4:5c:7b:31:bb:ec:61:cf:9f:79:de:13:
d8:66:31:ee:64:3e:04:f3:54:8f:5b:6d:33:23:41:ac:a6:df:
12:ac:70:41:9e:d5:1f:35:46:39:08:b0:b1:55:c1:13:95:d7:
ba:ad:00:d8:9c:c7:1c:e4:dd:1b:37:5d:93:34:ad:b4:fb:5b:
be:e0:f8:10:92:d8:4d:a6:e4:c3:cc:bc:f0:a4:34:ea:28:74:
ef:e7:d4:7f:54:7c:91:97:f5:9b:5f:b1:50:95:28:68:0d:ff:
94:85:18:94:0d:35:12:5e:5a:db:ba:29:2f:a9:89:4c:3e:7f:
33:36:f4:32:bd:ab:bd:9c:2f:fc:2f:a9:19:49:33:ef:de:3e:
03:64:7c:24:a0:ea:24:3b:e9:5f:45:80:3d:c0:46:40:5f:e9:
4d:5d:57:52:f5:55:4f:a9:21:12:db:c9:c5:24:95:c0:0a:6f:
68:c1:ac:31:51:86:71:a6:45:a7:54:5b:8a:05:d8:2a:63:fc:
54:82:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:52 2025 by rpki-client