Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
File: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft (raw, json)
Hash identifier: VeO176KizqV/WibfMbwtRl/73lrwwnR19AHC3Mojubs=
Subject key identifier: 45:42:5E:11:CC:16:DD:47:1B:06:78:D3:5D:F8:A8:D5:CD:A6:32:94
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 019A4D063059C60DA01D1C898413F6607D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
Manifest number: 09BF
Signing time: Tue 04 Nov 2025 04:00:42 +0000
Manifest this update: Tue 04 Nov 2025 04:00:42 +0000
Manifest next update: Wed 05 Nov 2025 04:00:42 +0000
Files and hashes: 1: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl (hash: Q5PXm6g8Fp2ZnADoavJUcFV/I2kVQlMNqAIlJnUj4fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:30:59:c6:0d:a0:1d:1c:89:84:13:f6:60:7d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Nov 4 04:00:42 2025 GMT
Not After : Nov 5 04:00:42 2025 GMT
Subject: CN=45425e11cc16dd471b0678d35df8a8d5cda63294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:d5:71:da:18:57:49:2d:8b:7a:aa:5e:84:
a5:fa:2a:44:4a:55:7a:f4:e5:c7:97:77:8c:38:5e:
33:ef:a8:b9:04:c1:f1:7e:b4:e6:c7:62:9e:01:6f:
08:0c:63:f5:7d:1b:72:30:fd:84:07:04:83:96:83:
32:5b:54:51:a5:76:ab:b2:7b:68:37:4c:d9:bb:68:
49:8e:b7:e1:d9:5a:d9:26:e8:53:86:d3:b5:c8:54:
36:91:a4:db:21:f4:b9:ba:31:ef:d8:37:5c:c9:b9:
ab:1a:90:d5:b6:98:9d:7d:08:94:de:f9:75:57:29:
8c:5c:a0:be:98:04:0b:b7:a2:b3:f0:2d:bb:fd:9e:
cc:ab:c5:6d:cd:a8:71:de:91:4e:cc:a4:5a:d7:82:
55:2a:94:b9:09:2d:52:7f:bf:ce:49:3b:cd:67:d0:
b1:92:32:0b:a3:f0:1e:c6:19:53:d2:22:a8:4c:cc:
84:40:ae:23:fa:4d:0e:1c:fe:cb:d5:cd:25:00:74:
97:6d:dc:03:64:9f:87:45:0e:1a:c3:fb:b2:49:41:
97:af:94:02:85:c2:cb:bf:71:5f:63:5f:97:b8:25:
bb:4f:e4:b0:15:1b:31:0d:a9:a4:9d:5e:24:e0:d6:
7c:5d:af:e2:43:8f:36:47:24:08:cb:84:5b:85:e3:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:5E:11:CC:16:DD:47:1B:06:78:D3:5D:F8:A8:D5:CD:A6:32:94
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ae:cd:5e:92:35:8a:07:d7:25:0e:bc:0e:66:43:62:b0:0f:
c3:c7:5a:85:d6:c1:32:92:63:0b:31:a3:b1:00:43:08:7c:78:
05:49:c3:22:57:01:34:7e:47:c3:e9:e6:f5:7c:43:4e:24:ba:
ca:dd:90:5c:cc:11:f3:56:2e:b9:a5:e3:d4:ee:4b:9a:02:7a:
85:97:b9:2e:99:1c:9c:39:a7:96:3b:82:4f:e0:a7:31:22:ea:
a2:0b:70:53:b6:35:4e:a6:51:fa:2f:b2:cb:d4:73:f7:26:35:
08:8d:cc:6c:95:29:6b:af:1c:65:67:da:e0:0b:5b:be:07:a7:
04:97:03:fd:6f:83:06:32:df:4d:47:46:4b:31:99:ef:1b:af:
71:0c:4f:a9:ac:91:01:99:b8:a7:e8:d5:7c:13:f3:82:81:05:
9a:b9:c9:0c:83:32:52:dc:1b:fd:2b:6f:8f:e3:2d:91:37:96:
a3:f2:5a:5e:a7:61:9e:89:52:78:bf:57:ec:48:01:7c:6f:7d:
d8:4e:90:45:5a:b3:ec:92:4a:34:be:98:ff:01:fb:82:15:15:
b6:99:e2:e3:54:0e:da:e3:fa:c9:77:81:22:ef:f8:33:d2:63:
11:9c:f4:9b:1a:d0:b8:b1:92:09:c4:94:ce:89:60:6f:04:eb:
e8:44:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:44 2025 by rpki-client