Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json)
Hash identifier: KgGiiMuw2gW/2ySFY5FEC/r3ecegeOkKs9Lc96nVqSY=
Subject key identifier: 51:97:ED:54:5F:4C:E3:4A:2A:CF:C4:64:17:F3:D6:0E:BD:BB:74:63
Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Certificate serial: 019A4DAB2CA12A304C9C69AF593DBBF912E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
Manifest number: 1063
Signing time: Tue 04 Nov 2025 07:00:54 +0000
Manifest this update: Tue 04 Nov 2025 07:00:54 +0000
Manifest next update: Wed 05 Nov 2025 07:00:54 +0000
Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: 2dAQWVEx047kmyh8WtaJD4avOFIhNurra1deyB4WCxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:2c:a1:2a:30:4c:9c:69:af:59:3d:bb:f9:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38
Validity
Not Before: Nov 4 07:00:54 2025 GMT
Not After : Nov 5 07:00:54 2025 GMT
Subject: CN=5197ed545f4ce34a2acfc46417f3d60ebdbb7463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:1e:b0:df:ec:9d:55:ef:36:45:d8:6c:94:
0c:1b:a7:3f:e1:2d:13:5c:f9:6c:f2:d6:e6:9f:f2:
b3:bd:63:e3:37:f7:9b:1b:19:15:d6:04:81:4e:48:
73:de:7b:dc:94:5e:ad:6a:ac:64:d6:2a:ee:4d:f6:
e9:2d:61:c5:21:4d:a2:cc:2e:1e:fe:33:40:5e:89:
2f:7f:c6:6a:d6:5e:49:d1:9e:19:97:8b:fb:2c:25:
44:a1:eb:2d:f5:eb:06:69:c6:3f:31:6b:64:b6:eb:
69:aa:0e:98:0d:b4:fb:55:7f:30:b9:75:46:03:7d:
64:d8:0a:d6:d8:d0:1c:18:7a:19:ca:31:c3:71:b3:
8b:c4:6b:79:76:ec:cb:b5:9d:6b:a4:16:2a:8e:29:
ab:57:ac:45:6a:6c:ea:13:dd:e3:75:ae:7d:50:1b:
79:34:9e:d9:f9:0a:11:3c:af:13:11:0f:88:8e:2b:
57:7b:88:0a:c5:b2:56:2a:d8:93:cd:f6:08:03:c9:
d5:cd:98:22:a9:8f:71:59:dd:24:52:a8:a0:56:de:
a7:1f:8d:b6:0c:ac:9c:e1:5b:57:0a:27:68:e4:7b:
fc:87:d9:af:53:f8:24:02:14:99:a6:3f:6e:8e:79:
f8:13:74:af:bb:93:39:49:8b:99:18:9f:10:8e:72:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:ED:54:5F:4C:E3:4A:2A:CF:C4:64:17:F3:D6:0E:BD:BB:74:63
X509v3 Authority Key Identifier:
keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:74:cc:ad:dd:9d:71:a9:c8:72:ce:4b:c0:71:ff:1b:47:
a4:f4:39:1b:cd:0d:2f:17:12:3f:aa:d1:df:b1:4c:ce:a5:96:
26:3f:a6:5e:c0:d2:80:9b:2a:ed:ad:03:d2:c3:af:5f:78:00:
8f:3e:12:18:6d:e4:62:8e:2c:a9:e2:fa:18:59:25:3c:a7:83:
fd:2b:68:8d:fd:51:62:92:64:4e:e2:4c:ba:60:60:22:a5:0a:
16:ef:d0:63:8e:1b:f9:a8:13:a4:12:aa:12:82:21:f1:ca:95:
98:30:99:00:0c:8f:9b:08:2e:58:12:db:e9:39:a4:9d:6b:6a:
f0:49:de:8c:c4:41:2e:e0:70:6f:73:f9:a2:93:55:4c:89:4f:
d1:07:ab:22:9e:e3:f2:7b:ca:47:c5:e3:fa:5a:e2:81:36:b2:
fe:b4:5d:ab:73:43:d3:96:2e:35:45:3e:c2:9c:35:d3:56:ed:
da:77:eb:80:67:32:89:01:92:b3:dd:9d:fc:15:79:98:39:01:
b4:44:3c:e3:ee:15:b6:2e:7c:55:58:f4:6f:d3:b3:97:7c:1d:
1a:32:ed:e2:75:42:e9:97:85:98:fe:df:e3:9d:51:24:75:0b:
7d:6d:bf:ac:7c:21:82:60:5c:96:32:72:93:0d:0b:31:0b:5b:
c0:1e:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client