Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File: wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier: 6pkNUIp9lmAE9jUwhViyJYlIEdWjcv1fqVaajH4BlMI=
Subject key identifier: E8:5D:F4:E4:83:B5:D9:29:FE:6E:89:E5:5E:94:0D:F6:82:AB:25:65
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer: /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial: 019A4EF51B4BD1597DC1282512A96B7C72F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: pstWUEbJ6QLbHl3Phl/Uk5c8EOp8bbFfH4Rf3TRUGoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1b:4b:d1:59:7d:c1:28:25:12:a9:6b:7c:72:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=e85df4e483b5d929fe6e89e55e940df682ab2565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:da:13:06:71:42:ec:74:17:ea:6a:65:bf:6f:
ba:0e:0d:c0:a4:6a:1c:3b:0c:2f:ce:74:4e:a2:d8:
c9:46:ff:cd:67:fe:ef:a9:fe:44:b1:bb:36:dd:3c:
ed:8e:76:5d:fa:06:0e:23:d7:9b:50:95:e9:74:c3:
f6:a3:45:e8:1d:04:5d:11:81:ce:f0:ff:23:f4:cc:
87:3a:3d:b7:e9:a5:7f:d7:df:4b:01:55:f5:c0:6e:
87:5a:11:13:5b:27:e4:8b:15:3f:f6:87:73:ad:31:
b6:fa:d0:08:a1:69:e6:f4:f8:ec:98:cf:7c:c4:de:
02:41:9c:a9:1e:fc:fe:c0:19:a0:56:ff:3f:fd:80:
ac:e5:81:1e:33:5d:1e:20:e0:8b:8b:a2:cf:3b:de:
38:7b:9a:81:c9:25:f9:c4:79:fe:14:4b:bc:50:e8:
65:f0:9b:12:87:b4:38:e9:a0:98:3e:98:53:a3:5a:
b1:85:16:8e:2a:1c:99:80:79:4d:1c:6e:53:8b:de:
2e:ec:e4:46:16:10:f7:59:4f:ff:be:57:f3:77:78:
2e:a3:e8:00:a5:04:7c:9d:43:de:4c:ea:94:ef:f5:
d2:16:ca:8a:c6:72:15:2c:43:bb:c9:1f:2b:ed:cf:
f6:2c:82:ad:c0:de:51:4e:ef:8b:5f:8c:e2:b9:19:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:F4:E4:83:B5:D9:29:FE:6E:89:E5:5E:94:0D:F6:82:AB:25:65
X509v3 Authority Key Identifier:
keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d3:ed:df:f7:04:e5:4b:c1:b5:c5:ca:b9:a5:7d:b6:2a:7a:
35:80:fe:8c:29:9b:39:81:93:b3:49:3b:12:0b:f5:ec:52:d3:
3c:f8:9c:82:e1:f8:d1:f1:da:c8:26:12:b6:ae:96:cc:36:2e:
bd:19:6c:03:c6:0c:20:e5:d6:b1:29:c6:2f:13:0e:4a:9c:09:
14:81:91:88:2b:0a:86:b8:bb:b5:49:f2:e1:76:17:90:6e:e4:
16:63:47:10:b7:68:a9:59:ba:d4:26:b8:12:81:74:27:ae:a1:
2f:5d:ab:81:a6:0e:3c:f1:53:e9:bf:9b:57:6a:45:b3:83:7a:
a1:dc:73:08:43:38:65:93:65:8e:fa:36:61:1c:97:eb:65:a7:
54:d2:59:bf:c1:fa:52:ab:03:a2:f1:ab:75:1c:b6:17:1a:b3:
a4:f6:3d:13:27:d7:10:d4:fc:c7:83:8c:aa:49:17:ba:fd:62:
30:73:09:69:cf:c8:48:0b:7e:d4:e6:32:d9:67:b7:bf:ea:ac:
3d:9a:aa:3d:28:d7:85:72:e2:41:91:83:0d:ea:7a:37:a6:f0:
4d:eb:42:ae:8c:dc:9d:d6:fe:8e:2b:bb:59:73:be:9f:58:83:
f1:6a:09:b3:ae:9c:bb:9a:cd:48:6a:bd:be:d2:f3:c5:79:34:
de:2e:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:37 2025 by rpki-client