Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier: t2NCXFWoCu27T3IhudYX2JwWo6Bi1i4XoMG3Eoq7U8U=
Subject key identifier: 36:F5:E2:42:B7:FE:61:66:4A:26:9C:D0:AE:31:A5:AB:D0:07:5A:B7
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial: 019A4F98FAA473F0B192D57E426699F6D90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number: 145D
Signing time: Tue 04 Nov 2025 16:00:16 +0000
Manifest this update: Tue 04 Nov 2025 16:00:16 +0000
Manifest next update: Wed 05 Nov 2025 16:00:16 +0000
Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: 7ragkMnB/t6Uh03UbnV+TkYzWmpu8E3Z9GXtTK4X73Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:fa:a4:73:f0:b1:92:d5:7e:42:66:99:f6:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Validity
Not Before: Nov 4 16:00:16 2025 GMT
Not After : Nov 5 16:00:16 2025 GMT
Subject: CN=36f5e242b7fe61664a269cd0ae31a5abd0075ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:30:82:70:64:2e:99:34:66:71:34:2e:59:
2a:e5:48:44:f5:f1:4c:50:38:9c:24:42:1c:d7:b9:
51:f9:c5:68:04:69:c5:1c:60:e6:ab:2b:2d:a7:31:
4b:7a:5b:f3:13:e2:eb:42:43:6b:d4:cd:db:72:4f:
30:46:e5:de:cb:cc:98:58:b4:a3:b9:75:f0:3a:48:
53:13:a2:c6:89:9c:18:53:4b:ce:1e:e1:6b:de:2e:
31:c2:ce:c5:61:fe:e3:22:1c:53:1c:4d:50:da:bf:
52:89:17:d0:88:79:59:f9:fb:e7:81:fa:66:b4:74:
98:d6:a8:94:04:5b:84:75:fa:2d:20:bb:fc:c3:c9:
bb:57:d9:94:34:7b:a0:15:54:6c:e5:17:d9:af:53:
76:c0:6f:8a:8a:0f:82:df:06:0b:58:7e:15:31:62:
ad:eb:35:28:9a:4e:54:b1:6f:c6:af:e4:c2:be:c1:
2a:84:f3:17:dc:89:38:ac:64:23:09:e5:cd:a7:88:
2e:c9:3e:cc:ea:9e:4b:57:60:ad:b8:14:5b:92:c7:
21:2b:75:1c:0d:25:a9:ac:ae:3a:b4:37:c5:0d:ee:
ee:d9:de:e7:d8:46:b2:39:4f:ee:b5:e4:16:cd:a9:
ef:4d:22:97:ed:3c:28:84:ce:b5:d6:d7:4f:68:8a:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:E2:42:B7:FE:61:66:4A:26:9C:D0:AE:31:A5:AB:D0:07:5A:B7
X509v3 Authority Key Identifier:
keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:74:5d:ae:33:47:89:24:3f:62:e7:b5:96:d6:09:5b:98:
0d:73:b7:22:e4:4a:f0:35:b2:fc:88:c4:9f:a5:ab:5e:eb:42:
2f:00:ab:6a:37:cb:92:47:51:62:1b:7c:02:5d:96:8f:d7:b1:
3d:3e:ae:f9:36:c8:04:f7:6a:0a:50:1f:a1:e4:52:38:83:5e:
7a:dd:5e:e2:5d:07:76:c1:a3:ee:ad:e1:d1:09:ea:c9:d2:cb:
39:ce:3b:d1:b5:cd:98:8f:50:79:28:54:75:1b:1b:09:99:e6:
28:39:a6:4b:c9:4c:95:ab:08:98:6f:9d:da:90:c6:17:c3:93:
f0:67:db:b6:16:ae:38:a9:02:bc:1a:82:09:5f:80:94:62:2e:
90:02:e0:af:20:f0:4d:f7:7b:3c:be:85:ce:26:40:3c:67:53:
33:b1:75:c7:86:34:87:62:9e:06:04:aa:14:7d:14:f8:d6:d1:
5e:74:1a:f2:f9:d5:95:17:87:fe:5a:ac:ef:51:4d:18:78:fc:
99:96:26:9a:c2:56:aa:78:92:b6:01:37:aa:78:9b:80:78:3c:
d2:1b:47:e6:e7:f7:c7:1f:09:c6:7a:72:8e:f3:33:2d:c2:e5:
74:aa:b7:4b:50:f6:8c:af:19:5f:e7:f1:14:45:57:7d:7c:46:
14:cd:23:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmPqkc/CxktV+QmaZ9tkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWUzOThmOWFhZGQwNjM4YmZmZWEyNGMxYzc5ZWI4ODMy
Zjc4NzUwHhcNMjUxMTA0MTYwMDE2WhcNMjUxMTA1MTYwMDE2WjAzMTEwLwYDVQQD
EygzNmY1ZTI0MmI3ZmU2MTY2NGEyNjljZDBhZTMxYTVhYmQwMDc1YWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWMwgnBkLpk0ZnE0Llkq5UhE9fFM
UDicJEIc17lR+cVoBGnFHGDmqystpzFLelvzE+LrQkNr1M3bck8wRuXey8yYWLSj
uXXwOkhTE6LGiZwYU0vOHuFr3i4xws7FYf7jIhxTHE1Q2r9SiRfQiHlZ+fvngfpm
tHSY1qiUBFuEdfotILv8w8m7V9mUNHugFVRs5RfZr1N2wG+Kig+C3wYLWH4VMWKt
6zUomk5UsW/Gr+TCvsEqhPMX3Ik4rGQjCeXNp4guyT7M6p5LV2CtuBRbkschK3Uc
DSWprK46tDfFDe7u2d7n2EayOU/uteQWzanvTSKX7TwohM611tdPaIprgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb14kK3/mFmSiac0K4xpavQB1q3MB8GA1UdIwQY
MBaAFMGuOY+ardBji//qJMHHnriDL3h1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzct
OWQ1ZTYzNGFhZjlmLzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jMzZjNGEtODhhZS00YmQyLWJmMzctOWQ1ZTYzNGFhZjlm
LzEvd2E0NWo1cXQwR09MXy1va3djZWV1SU12ZUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrV0Xa4z
R4kkP2LntZbWCVuYDXO3IuRK8DWy/IjEn6WrXutCLwCrajfLkkdRYht8Al2Wj9ex
PT6u+TbIBPdqClAfoeRSOINeet1e4l0HdsGj7q3h0QnqydLLOc470bXNmI9QeShU
dRsbCZnmKDmmS8lMlasImG+d2pDGF8OT8GfbthauOKkCvBqCCV+AlGIukALgryDw
Tfd7PL6FziZAPGdTM7F1x4Y0h2KeBgSqFH0U+NbRXnQa8vnVlReH/lqs71FNGHj8
mZYmmsJWqniStgE3qnibgHg80htH5uf3xx8JxnpyjvMzLcLldKq3S1D2jK8ZX+fx
FEVXfXxGFM0j8w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:40 2025 by rpki-client