Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
File: Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft (raw, json)
Hash identifier: 90f0BuJBp1Ln5/eNpZ5Eg+S6MuA3PC3wQdWKNKc+6ZU=
Subject key identifier: 3C:88:92:6A:70:CB:8B:B2:6F:9A:71:84:6C:31:85:EC:95:0D:EF:DD
Authority key identifier: 5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
Certificate issuer: /CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Certificate serial: 019A4EF4BC32E29DBFA29E16B041A73E4443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
Manifest number: 1504
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl (hash: 5M6pF9bc7S9251qbOKsWbfbwCrBT74b4Kn5EU1WFhLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bc:32:e2:9d:bf:a2:9e:16:b0:41:a7:3e:44:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=3c88926a70cb8bb26f9a71846c3185ec950defdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:ab:1d:fc:17:82:43:24:ca:fa:0b:72:2b:
34:8f:9d:b4:19:38:14:0c:b7:4f:a9:ce:ac:01:03:
7a:c1:d3:56:ef:89:05:f5:c4:5e:e1:c5:bb:69:07:
00:f2:d3:aa:08:82:ab:c2:7b:f0:c8:f9:b1:93:17:
07:34:6b:90:13:5b:76:8d:5c:05:50:01:83:b9:c5:
44:0c:ad:d8:81:67:97:aa:2f:29:dd:4b:08:ed:de:
33:a9:1d:f3:4c:da:ac:d7:26:c8:6f:01:6d:56:2b:
9c:c1:cf:26:8e:1c:94:5e:01:e1:68:01:8f:9f:a2:
e6:d7:e8:da:92:66:fa:a6:22:75:d2:70:2c:01:65:
c0:7f:24:ab:1f:4f:ad:e9:9c:88:0c:e3:9f:d1:99:
3a:cd:71:d8:9f:52:60:0f:41:d8:d8:d5:bd:61:e6:
2f:c3:c0:cd:fb:26:04:77:fe:12:ff:65:e8:0a:37:
77:d8:52:32:1b:95:a4:5d:4f:12:45:a9:19:2c:e2:
32:d5:9d:20:38:bc:4c:44:5f:a2:c5:fd:51:fa:a0:
1f:b6:80:f3:09:59:a0:ad:d6:ba:66:9e:52:c5:72:
51:35:e8:89:cc:a4:19:2b:6e:1e:c2:9f:0e:78:02:
af:da:81:cb:1b:85:7a:11:0e:0c:7b:dc:05:23:52:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:88:92:6A:70:CB:8B:B2:6F:9A:71:84:6C:31:85:EC:95:0D:EF:DD
X509v3 Authority Key Identifier:
keyid:5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:85:a3:f4:d0:2b:fa:28:e7:a0:0e:3e:c9:e0:0e:38:81:
0f:9f:cc:ac:bb:35:94:46:0d:55:60:04:70:e9:f6:4f:1c:cc:
33:d7:8d:8f:d6:a6:c0:cd:e5:02:b4:d6:45:e1:4f:1d:c6:56:
63:b1:7b:bc:89:24:15:04:66:89:5b:dd:b7:26:26:4f:19:52:
1c:ed:1a:ba:12:52:0a:20:6c:2a:7b:24:02:fe:a9:19:58:d7:
01:9a:7d:3e:ce:ac:5a:90:94:6d:d3:28:f3:3c:3b:c1:63:fb:
88:19:32:ff:f8:9f:08:f4:f1:0e:8f:b7:26:38:b8:d8:3a:b0:
0b:ee:11:6e:5e:8f:ef:9e:a6:47:d2:7f:5b:86:3e:09:b5:b9:
62:ad:eb:0f:35:24:eb:c3:4b:ff:75:c3:f0:31:d6:47:d8:35:
73:4e:b2:2f:53:1c:c0:fe:78:a3:d5:7d:c3:82:ed:1d:c5:1c:
ab:c0:bd:37:0e:aa:d0:82:4b:dd:d2:54:61:ee:4e:62:a8:ca:
9a:11:d5:72:62:2b:e3:37:35:6c:0c:82:86:b5:4d:b8:9e:af:
4c:af:98:81:98:db:44:9e:38:fd:be:f3:39:04:fb:64:09:25:
72:a8:cf:73:78:ce:e7:bb:cc:85:1b:c6:b7:cb:2a:2d:09:26:
97:2f:50:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:41:23 2025 by rpki-client