Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: 8u/CJyAR3MzddikqnTBAoDVI4EdKUv0zhQlR+2KC32U=
Subject key identifier: B7:46:C3:DD:90:54:34:B8:42:34:EC:BA:5C:03:20:95:E2:40:21:F8
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 019A72264AB5BF24E887786527F1ED639809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0DAA
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: C4b5RxqNyBRIP8cplJz6OymPrvlQc0l3twsU5FHO488=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4a:b5:bf:24:e8:87:78:65:27:f1:ed:63:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=b746c3dd905434b84234ecba5c032095e24021f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:3f:9e:ef:eb:d4:b4:4e:5d:98:c3:51:76:
ba:97:9b:9d:5a:06:f6:c2:ae:fc:f4:da:8c:bc:b3:
72:c9:6e:80:7c:bf:fa:9e:03:f1:ca:38:b5:78:07:
a1:bc:24:08:d9:f4:f4:6b:bb:0d:3e:12:7c:97:e4:
31:c7:c5:98:eb:6f:c4:ae:3c:bc:63:1e:83:df:cf:
ca:90:72:db:75:48:f8:43:2e:18:dc:1c:1d:ca:4d:
81:0b:7a:43:53:c1:f6:38:ce:30:01:9b:c3:bc:0c:
58:40:82:03:dc:1a:7a:9f:5b:69:00:09:6f:d9:ab:
dd:a7:b1:78:88:f5:3e:bc:78:00:37:2e:2d:39:02:
70:1f:05:c8:04:af:35:12:d6:e7:d9:7c:4e:cd:a7:
62:3b:a8:d9:2c:dc:4e:7c:b4:27:6e:ee:e1:e0:83:
d8:52:d5:82:0b:29:2a:85:bb:51:bb:52:82:17:61:
b3:70:70:57:90:6e:9b:c1:a9:5b:04:3b:a5:0d:c6:
00:52:cd:9a:4d:a1:97:f9:3b:75:0b:d9:94:56:eb:
63:d4:82:e7:87:33:74:0e:24:04:83:7e:0a:f4:53:
e4:be:f0:0f:18:a1:28:ad:3f:cd:f4:24:fc:9f:e2:
27:81:aa:ed:17:39:9b:38:19:85:4e:52:e8:cf:fe:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:46:C3:DD:90:54:34:B8:42:34:EC:BA:5C:03:20:95:E2:40:21:F8
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c9:b7:2d:b8:95:b4:e7:f1:b9:af:d7:8e:33:00:b2:49:7c:
d1:fd:ac:4e:0a:57:70:f0:d3:ce:98:4b:e2:76:a4:e1:49:04:
79:2c:4d:fd:9e:3d:ed:55:3f:6b:6e:3a:cf:80:0e:63:2b:57:
d9:52:b7:11:dc:46:e3:f8:52:a1:d7:d7:21:0a:e0:7c:44:86:
36:ac:e9:bc:b4:11:9c:39:f8:1f:48:03:90:0c:9b:59:fc:cf:
9a:56:ab:9f:d9:f8:63:77:77:15:78:50:3c:f9:b5:6d:dd:40:
b4:f5:82:c1:53:0c:92:08:18:94:be:98:63:1c:91:63:ab:3e:
fc:7a:a5:0d:71:36:80:95:18:ac:32:c6:9f:26:c1:59:35:dc:
fc:10:bf:aa:72:86:64:a4:c1:36:b2:bb:1d:28:45:ad:30:58:
70:03:0f:7b:05:64:9f:c3:cb:29:72:2a:b4:7c:3b:22:d3:2a:
7f:17:b6:9d:0b:b7:ac:1f:6a:17:e7:0b:7c:c6:4a:84:ed:f0:
d6:4b:5e:5d:55:ee:4d:43:53:76:40:73:f2:a4:ed:f8:e3:b7:
67:0b:3b:8c:39:01:07:7a:e8:fa:4b:b8:1d:b7:40:12:6f:ef:
b1:d6:7d:a1:9b:6f:e8:8d:a3:a0:0b:ba:c5:15:3a:54:b3:ed:
c9:dc:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:04 2025 by rpki-client