Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File: w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier: qO9DRjPOLyp9oaR6noOPXk1ABxRHEF+A8YCmLgVBJcA=
Subject key identifier: EA:92:50:44:3B:39:75:70:CD:5F:4D:AD:D1:31:66:89:0A:00:60:3E
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer: /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial: 019A7112A33527B9F12DEA6B118399FCFFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number: 15A0
Signing time: Tue 11 Nov 2025 04:00:37 +0000
Manifest this update: Tue 11 Nov 2025 04:00:37 +0000
Manifest next update: Wed 12 Nov 2025 04:00:37 +0000
Files and hashes: 1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: Fga4oQpU4xqhwYD2h4cKlhzIkxaUisUWOwmBK78FhMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:35:27:b9:f1:2d:ea:6b:11:83:99:fc:ff:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Validity
Not Before: Nov 11 04:00:37 2025 GMT
Not After : Nov 12 04:00:37 2025 GMT
Subject: CN=ea9250443b397570cd5f4dadd13166890a00603e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:94:62:2e:e0:2f:74:31:72:cb:a2:c4:e4:
7d:20:43:44:4e:66:23:c9:3a:ef:59:f1:43:c8:19:
09:5f:40:3c:f9:0b:08:ce:bb:77:cd:a5:bf:f8:ac:
99:d3:09:aa:28:22:4a:ae:a3:e6:46:c7:5e:61:72:
3c:f5:f7:34:c9:fc:c2:68:24:0b:5d:4d:5d:4e:21:
cc:2c:42:38:d2:06:16:f2:3e:61:5b:0d:cc:5f:28:
49:13:51:3a:97:be:53:95:c3:e3:00:39:73:07:fa:
ef:48:9d:44:f6:1f:97:18:7b:b6:f0:b7:32:34:c8:
42:b6:01:7a:53:1e:ed:12:78:44:78:72:7a:30:19:
d3:e6:7f:4c:28:c1:2c:2e:14:2a:97:10:2c:ab:98:
24:3c:a3:e4:48:c9:06:a5:e7:34:cb:6b:c8:fa:78:
e0:08:e5:96:f8:f6:dc:41:33:3d:a8:32:83:be:df:
bc:9e:d6:3a:21:ca:d4:84:ed:c6:d9:c3:7b:ec:66:
c7:a1:6f:08:32:44:38:b3:67:c7:56:32:69:df:f1:
24:a5:18:59:ef:dc:cb:2f:39:1c:d6:13:46:d5:86:
61:68:2e:9d:8a:85:d8:ee:d7:a8:5d:91:61:2c:64:
93:5b:a0:44:ca:a0:b1:02:92:e7:5d:38:fb:46:b3:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:92:50:44:3B:39:75:70:CD:5F:4D:AD:D1:31:66:89:0A:00:60:3E
X509v3 Authority Key Identifier:
keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:23:06:af:0c:54:71:fb:f9:58:d7:74:35:e3:cf:d4:c0:3e:
09:4c:a1:c9:0e:53:c3:cf:a4:41:bf:27:e8:4f:0d:fa:0a:18:
f3:58:22:f3:e4:38:be:06:9b:88:92:46:cb:3d:41:ad:52:5c:
c3:c1:1a:11:60:93:85:18:43:24:7a:d7:6f:43:6c:83:2f:69:
5b:86:5e:28:65:09:66:f9:01:7e:e4:e0:56:4e:23:ab:31:b7:
33:13:81:ce:58:19:98:d5:e1:25:c9:dd:3e:ec:d8:89:48:7a:
f0:db:e1:8c:22:37:e5:46:64:ce:ad:89:82:79:9b:46:b4:55:
05:40:0e:6d:8e:a8:0e:21:ef:fb:37:07:4a:ce:1b:c7:b3:da:
65:cc:01:15:73:d6:64:f0:ea:27:73:ab:16:74:db:3a:b7:86:
96:55:ec:24:42:c8:73:5d:a3:d5:c4:10:c0:01:48:79:78:79:
11:f3:a3:3e:70:84:3a:49:18:15:ee:65:74:6b:a4:a4:4e:43:
79:1d:c9:a2:e1:67:ad:dd:3e:32:1f:e6:92:b5:a1:61:2d:46:
13:fc:54:51:f5:13:cf:5c:22:56:4a:b0:55:85:19:81:4b:f3:
90:82:bf:6f:89:c4:35:d4:71:d0:ba:3e:a8:06:73:04:2f:17:
6f:63:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:12 2025 by rpki-client