Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File: 1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier: eK42C7Q9XK8g/TB1kcYAZ/MFqTFb02K0OvowKGhv7Yg=
Subject key identifier: 20:98:66:14:DA:96:97:33:26:93:B3:A9:CB:C5:11:C6:92:B8:0D:41
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer: /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial: 019A0CA68F2E8CEAC7AD816387BF12EFF1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number: 0765
Signing time: Wed 22 Oct 2025 16:00:33 +0000
Manifest this update: Wed 22 Oct 2025 16:00:33 +0000
Manifest next update: Thu 23 Oct 2025 16:00:33 +0000
Files and hashes: 1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: HU4nJPainVFuZfw3OImuJLGC6LQ0mW2DBw4yL6X601s=)
2: 3nfIx05AjEYVNh0f8uhQsoNdvl0.roa (hash: kNmQ6q+KoIWrsskhw+6QTieUtnc2+n6TEwJFoX3Do3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:8f:2e:8c:ea:c7:ad:81:63:87:bf:12:ef:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Validity
Not Before: Oct 22 16:00:33 2025 GMT
Not After : Oct 23 16:00:33 2025 GMT
Subject: CN=20986614da9697332693b3a9cbc511c692b80d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:97:38:0f:e0:4e:4e:06:2a:99:fe:2f:f0:b2:
68:d8:fe:2d:af:83:7f:3e:12:e2:1f:0c:03:06:ec:
31:21:17:a6:dc:1d:43:55:59:48:be:d9:75:0d:fc:
69:95:e2:c9:38:74:c1:89:06:11:e3:09:24:32:f9:
30:f0:37:8b:ba:0a:35:6d:89:a8:aa:d2:d4:7d:b8:
62:5e:58:08:d9:4e:50:f7:da:d8:45:67:53:1d:9b:
91:67:56:e9:44:ef:e4:a6:50:f3:0c:a8:be:fe:46:
d8:33:b0:63:5f:70:9f:60:1f:33:e1:0b:5d:18:d0:
29:fb:e7:ba:98:58:83:bc:1f:e2:f1:4b:f6:03:a8:
59:39:cd:fc:6f:68:18:66:c8:26:5e:42:1d:e5:46:
18:1f:e1:66:ed:aa:79:e1:99:d9:47:6b:23:e6:d2:
0c:cb:fe:7f:e6:24:7a:46:bc:ff:ad:4f:2a:89:59:
87:cb:ac:7a:6c:f2:45:12:be:3f:b4:92:4b:9c:ff:
75:d9:92:fc:9b:76:93:62:73:35:0f:e0:52:9a:52:
b6:b8:81:45:50:13:f4:56:cd:91:43:19:49:f5:17:
12:ea:03:4a:63:08:fd:85:c6:ee:8a:04:f1:20:11:
0a:f3:3a:44:a8:d1:f1:24:18:37:3a:18:70:2a:21:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:98:66:14:DA:96:97:33:26:93:B3:A9:CB:C5:11:C6:92:B8:0D:41
X509v3 Authority Key Identifier:
keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:59:83:0a:24:fa:90:df:13:39:17:b6:f7:90:a9:9e:79:
35:aa:ca:32:3d:fd:63:a2:fa:09:52:33:87:84:f3:bc:70:73:
ef:fd:28:c8:99:cc:1c:39:72:37:1a:3a:3c:75:a1:40:f2:15:
d0:1b:cf:67:60:81:a9:bf:02:f5:12:95:bb:0e:20:a8:f1:df:
3a:04:48:70:b3:b1:62:75:95:45:42:fd:76:ee:d2:a2:de:0b:
ed:58:88:38:74:41:de:74:0f:8f:07:27:c4:16:63:ea:b0:a2:
b7:5e:23:10:eb:2e:bf:cb:52:0e:86:19:65:b5:9a:01:21:48:
bc:4d:26:9c:6c:29:d8:5a:ff:f4:66:99:af:ad:56:28:0d:8c:
cf:3f:7f:44:83:06:05:f4:e1:d1:96:f5:00:d9:b0:d0:c2:11:
9d:4b:97:db:f9:fb:93:7e:c9:05:ce:f9:04:ec:bd:9b:39:30:
e4:af:aa:4d:03:68:ba:87:ab:33:15:68:75:25:64:db:58:f4:
51:79:93:5b:96:c8:36:7b:68:5e:3d:31:7a:18:60:90:4d:6b:
3b:c9:ae:94:66:43:aa:d1:a5:5b:e8:92:da:e8:85:58:d0:37:
4f:40:2d:02:80:bc:d6:18:bd:8d:d0:88:85:f7:64:2d:80:2f:
27:e5:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:53:55 2025 by rpki-client