Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
File: wA7St1AmRN0DbiOS-wMyz7FNuNI.mft (raw, json)
Hash identifier: mJhNC/adw0HouomlXxcUP/PyfwS1/RllWSSHLyVaCnE=
Subject key identifier: 67:94:25:C2:9B:69:BE:B0:49:91:3D:13:0D:D3:BD:A4:2B:A9:F8:A8
Authority key identifier: C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
Certificate issuer: /CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Certificate serial: 019A4DAA928093FDB08030DE45C0072CB773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 07:00:15 +0000
Manifest this update: Tue 04 Nov 2025 07:00:15 +0000
Manifest next update: Wed 05 Nov 2025 07:00:15 +0000
Files and hashes: 1: wA7St1AmRN0DbiOS-wMyz7FNuNI.crl (hash: Iw18dHZj+2uM82eqJ988dsCaE6xcgRja26t0w9WRk8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:92:80:93:fd:b0:80:30:de:45:c0:07:2c:b7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Validity
Not Before: Nov 4 07:00:15 2025 GMT
Not After : Nov 5 07:00:15 2025 GMT
Subject: CN=679425c29b69beb049913d130dd3bda42ba9f8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:15:c0:0a:32:c2:8f:90:91:08:6b:a4:8b:
98:b0:1e:93:32:9e:4f:24:59:69:b0:11:2b:f1:0c:
29:82:fa:93:80:fe:da:80:4d:47:8b:51:7f:e8:f1:
77:53:66:9c:79:12:c8:2e:8e:d0:b1:43:82:64:5c:
bf:6b:0f:0e:70:50:1f:f0:25:3b:dd:f8:b6:3c:93:
e3:41:60:b7:9d:0d:93:03:93:f1:34:0e:77:a0:0e:
34:d5:d4:b2:18:50:c7:2f:b1:e3:de:9a:b5:67:76:
5c:08:8e:63:68:17:c4:10:7e:1a:76:c1:3e:db:d3:
9b:64:45:f5:68:25:40:63:f4:77:8c:be:81:99:a0:
69:33:24:26:24:23:a0:7a:c2:f8:bd:17:6f:8c:60:
63:5f:d5:51:ca:43:f3:3c:f4:5b:c1:02:52:e4:16:
39:25:22:23:57:c2:6e:d8:8f:6f:dc:97:25:ed:e4:
1b:fa:55:da:01:49:68:2c:24:bb:05:ce:c5:18:c7:
c7:39:55:2d:26:46:f9:d6:89:5a:47:72:78:90:cb:
23:3d:e1:90:80:9f:73:d3:7f:11:17:d5:27:08:09:
20:a2:ce:f0:27:4c:15:f4:33:fe:4d:a3:85:ba:10:
c2:54:4c:28:be:85:4b:c7:3b:b2:d3:d8:5f:20:4b:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:25:C2:9B:69:BE:B0:49:91:3D:13:0D:D3:BD:A4:2B:A9:F8:A8
X509v3 Authority Key Identifier:
keyid:C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:7a:84:19:86:12:9f:1b:ae:2e:85:ea:9a:af:4a:79:0d:
ec:df:9b:b9:62:ef:0d:53:e1:4f:db:74:48:eb:35:aa:83:42:
32:d7:f0:18:51:8a:78:5e:80:67:5b:08:db:26:bc:b5:e5:99:
92:0a:db:15:a0:cd:d6:7b:12:76:d8:65:8d:3f:d3:5a:2d:cd:
ac:e8:c9:b3:d4:27:20:98:17:d4:e7:4b:72:c8:e7:79:d6:c5:
b3:5f:60:45:3a:f5:c1:23:1d:70:16:d4:0d:cd:23:25:a3:5a:
a5:08:32:59:2e:df:1b:da:cd:b0:2f:c0:86:96:0f:07:fb:9e:
9b:db:86:4c:6e:d1:40:4a:94:9e:f5:b6:3f:2f:2c:b3:1c:16:
65:44:e7:c6:53:e1:57:01:ba:b7:34:a0:ab:7d:bd:bb:d6:f7:
d5:14:aa:0d:4d:ed:67:bb:6a:5d:89:69:75:b5:ba:ab:a8:64:
38:ad:44:02:a7:2a:e6:82:69:d8:23:c3:03:2f:8d:57:bc:7f:
e8:eb:2f:a6:2f:ea:8c:8d:17:d5:f5:36:61:8d:ae:ca:82:c7:
88:29:65:7b:b9:4d:24:bb:d2:48:07:19:42:b5:83:8f:d3:7f:
e8:45:49:e9:a5:51:a9:da:bb:52:df:b3:be:5f:9e:79:6b:2b:
43:58:73:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqpKAk/2wgDDeRcAHLLdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGVkMmI3NTAyNjQ0ZGQwMzZlMjM5MmZiMDMzMmNmYjE0
ZGI4ZDIwHhcNMjUxMTA0MDcwMDE1WhcNMjUxMTA1MDcwMDE1WjAzMTEwLwYDVQQD
Eyg2Nzk0MjVjMjliNjliZWIwNDk5MTNkMTMwZGQzYmRhNDJiYTlmOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf8VwAoywo+QkQhrpIuYsB6TMp5P
JFlpsBEr8QwpgvqTgP7agE1Hi1F/6PF3U2aceRLILo7QsUOCZFy/aw8OcFAf8CU7
3fi2PJPjQWC3nQ2TA5PxNA53oA401dSyGFDHL7Hj3pq1Z3ZcCI5jaBfEEH4adsE+
29ObZEX1aCVAY/R3jL6BmaBpMyQmJCOgesL4vRdvjGBjX9VRykPzPPRbwQJS5BY5
JSIjV8Ju2I9v3Jcl7eQb+lXaAUloLCS7Bc7FGMfHOVUtJkb51olaR3J4kMsjPeGQ
gJ9z038RF9UnCAkgos7wJ0wV9DP+TaOFuhDCVEwovoVLxzuy09hfIEuDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeUJcKbab6wSZE9Ew3TvaQrqfioMB8GA1UdIwQY
MBaAFMAO0rdQJkTdA24jkvsDMs+xTbjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAt
MDllOGZhZmFmMGNjLzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAtMDllOGZhZmFmMGNj
LzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbF6hBmG
Ep8bri6F6pqvSnkN7N+buWLvDVPhT9t0SOs1qoNCMtfwGFGKeF6AZ1sI2ya8teWZ
kgrbFaDN1nsSdthljT/TWi3NrOjJs9QnIJgX1OdLcsjnedbFs19gRTr1wSMdcBbU
Dc0jJaNapQgyWS7fG9rNsC/AhpYPB/uem9uGTG7RQEqUnvW2Py8ssxwWZUTnxlPh
VwG6tzSgq329u9b31RSqDU3tZ7tqXYlpdbW6q6hkOK1EAqcq5oJp2CPDAy+NV7x/
6Osvpi/qjI0X1fU2YY2uyoLHiClle7lNJLvSSAcZQrWDj9N/6EVJ6aVRqdq7Ut+z
vl+eeWsrQ1hzJA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:26 2025 by rpki-client