Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: mfSQGpVmMkdDdiVsRRe+B9mnTn3XilQ6P9/GBPIE/zY=
Subject key identifier: 23:28:E2:F1:68:61:28:76:E0:99:DB:26:E7:24:51:C8:F5:DE:B6:B3
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019A71B7A67141C138DC0894CC2C05D1A814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 0370
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: NWutl3LWroXc1OOmmj7VMsqsu+sHrAit0JxCG02IqlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a6:71:41:c1:38:dc:08:94:cc:2c:05:d1:a8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=2328e2f168612876e099db26e72451c8f5deb6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:ed:99:76:5e:be:b5:2b:3e:b4:b1:3d:4a:
ae:2d:2a:57:a8:92:3f:36:cb:75:3b:12:3f:9c:98:
70:ba:08:f1:0e:68:5e:51:ae:23:42:af:f8:dc:49:
28:d1:e9:31:d9:11:aa:67:e9:8d:85:2b:92:f2:a1:
6a:ba:3e:56:83:46:14:fb:33:5b:f5:e4:5a:c7:cf:
7e:f7:fb:dd:8d:e6:2b:bf:bf:25:36:8a:96:97:c3:
19:66:72:93:3f:b2:e3:a1:6a:8b:a7:8a:c7:19:3e:
58:fc:8d:9a:2c:58:78:59:5f:44:ec:33:66:24:96:
22:6c:05:0c:d1:92:44:00:99:8d:16:fd:26:da:18:
52:e0:79:11:9a:cd:60:0c:d2:23:56:1e:95:71:fa:
d7:14:24:24:ac:80:2e:9f:24:18:34:97:91:bd:17:
a4:83:9c:1c:6f:4e:3f:17:c2:3c:ab:96:69:db:f5:
3f:9b:19:23:fe:73:e3:31:2d:0f:61:71:7a:62:ce:
c9:9f:93:20:ae:64:ad:ba:c3:f9:8f:bb:da:19:60:
df:25:0b:b5:6b:55:78:f0:86:70:26:18:41:6c:7f:
79:5a:21:f4:74:56:70:fb:78:9a:90:6e:d8:54:b9:
d7:0e:a6:df:26:21:4d:2b:e7:8f:17:84:e3:4e:6b:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:E2:F1:68:61:28:76:E0:99:DB:26:E7:24:51:C8:F5:DE:B6:B3
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:97:86:bd:ea:27:18:de:ca:64:f7:de:52:71:66:27:f4:
f2:cf:76:d8:57:e1:d5:60:1e:74:19:2f:48:4e:e9:7e:c8:ea:
33:68:f5:47:bf:60:05:30:cf:49:30:61:ca:96:af:80:bc:ae:
28:6d:7c:ac:0e:6e:25:f4:22:56:7c:16:34:82:b0:75:0b:5a:
65:56:38:a4:48:9d:9f:6f:ac:1b:f4:9d:01:20:aa:a7:ac:3c:
e4:10:1e:56:ed:c9:c6:c7:62:55:25:98:84:d6:94:08:52:da:
a2:c6:a2:17:b9:3a:cd:b2:a0:7e:5f:b8:66:f9:d5:94:99:0d:
d5:d2:1f:89:5e:9d:9a:23:00:ab:18:1f:70:4a:7c:06:79:3a:
79:99:6f:6b:8d:94:dd:6a:4b:a2:1f:a6:77:1f:54:7c:92:e3:
5b:89:ef:1c:01:1a:37:40:81:c5:76:64:d9:3f:dd:5f:be:f0:
fc:c4:01:cf:2d:96:0b:ed:d2:5f:f4:4a:bc:f0:c7:28:1c:7a:
d6:96:f1:f0:4c:fd:f3:a2:ea:67:22:f4:0e:a5:cb:9d:6b:e4:
d7:7f:01:f8:3c:63:01:90:f7:c6:e4:95:ab:82:82:90:85:4a:
d8:12:78:c8:95:1a:db:fa:0f:93:6c:2e:73:c4:79:5b:8b:3d:
cb:75:83:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt6ZxQcE43AiUzCwF0agUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjQyZTRhNWMxYzkxZWJjNGVmZmZmMTQ4YjMxMmZlN2I3
ZTg5NzAwHhcNMjUxMTExMDcwMDUyWhcNMjUxMTEyMDcwMDUyWjAzMTEwLwYDVQQD
EygyMzI4ZTJmMTY4NjEyODc2ZTA5OWRiMjZlNzI0NTFjOGY1ZGViNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoprtmXZevrUrPrSxPUquLSpXqJI/
Nst1OxI/nJhwugjxDmheUa4jQq/43Eko0ekx2RGqZ+mNhSuS8qFquj5Wg0YU+zNb
9eRax89+9/vdjeYrv78lNoqWl8MZZnKTP7LjoWqLp4rHGT5Y/I2aLFh4WV9E7DNm
JJYibAUM0ZJEAJmNFv0m2hhS4HkRms1gDNIjVh6VcfrXFCQkrIAunyQYNJeRvRek
g5wcb04/F8I8q5Zp2/U/mxkj/nPjMS0PYXF6Ys7Jn5MgrmStusP5j7vaGWDfJQu1
a1V48IZwJhhBbH95WiH0dFZw+3iakG7YVLnXDqbfJiFNK+ePF4TjTmtv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMo4vFoYSh24JnbJuckUcj13razMB8GA1UdIwQY
MBaAFMK0LkpcHJHrxO//8UizEv57folwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt
YzczY2JlNzBhYmI5LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5
LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCaXhr3q
JxjeymT33lJxZif08s922Ffh1WAedBkvSE7pfsjqM2j1R79gBTDPSTBhypavgLyu
KG18rA5uJfQiVnwWNIKwdQtaZVY4pEidn2+sG/SdASCqp6w85BAeVu3JxsdiVSWY
hNaUCFLaosaiF7k6zbKgfl+4ZvnVlJkN1dIfiV6dmiMAqxgfcEp8Bnk6eZlva42U
3WpLoh+mdx9UfJLjW4nvHAEaN0CBxXZk2T/dX77w/MQBzy2WC+3SX/RKvPDHKBx6
1pbx8Ez986LqZyL0DqXLnWvk138B+DxjAZD3xuSVq4KCkIVK2BJ4yJUa2/oPk2wu
c8R5W4s9y3WDZA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:58 2025 by rpki-client