Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier: wmLaaT1S8Ak5sPZt0eMgWB0tFIy4t8/ijw52PYsOSRU=
Subject key identifier: A5:E2:72:77:91:A8:77:6A:36:FA:B0:7C:D7:F3:71:9D:13:9A:FE:40
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer: /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial: 019A4E4F7D4E189535175A965927AE40029C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: pWveqxUs5f2X14kjNk6t1MXNOZLsOKrZy8l1EVPjYuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7d:4e:18:95:35:17:5a:96:59:27:ae:40:02:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=a5e2727791a8776a36fab07cd7f3719d139afe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:cc:67:2b:d0:21:51:f9:fa:f6:69:38:50:
6c:22:54:68:98:99:92:b3:00:a0:65:3c:de:16:ba:
c8:74:1e:60:61:a9:7a:69:c1:0b:fa:cd:00:7c:cd:
46:6f:fc:a4:81:d4:8f:4f:03:97:7a:52:cb:a9:d5:
e6:c4:e4:ab:3a:ca:94:50:2a:49:c1:57:45:7c:10:
f7:5b:3d:e8:be:c4:fa:4b:cb:42:5e:e9:ef:38:e6:
8e:b9:7f:37:96:5f:85:8c:d5:93:88:fc:aa:ee:f3:
f2:fe:c4:e4:be:dd:39:82:92:7e:7a:3a:38:7d:14:
0d:7f:be:a5:a7:7c:a2:3c:66:42:ac:d9:ed:1a:38:
96:c8:6b:05:a1:9f:d3:b7:be:01:22:53:af:79:a5:
12:c0:44:d8:6f:db:81:c6:c0:c0:b6:38:7e:44:df:
c1:cd:a3:0e:6b:54:76:7d:f4:01:c0:85:9f:f1:c9:
53:64:93:d3:7b:59:8a:cc:8a:5c:54:46:e1:20:47:
1f:fb:be:dc:09:e3:95:60:37:06:0f:d7:b6:20:7b:
db:b4:a9:cc:dd:36:ac:80:ee:e5:0f:aa:ed:68:f6:
6a:53:64:96:cd:23:4b:db:1a:e3:37:c4:9b:48:54:
66:cf:c4:2c:ac:ab:7e:29:f4:7c:36:c4:f5:c2:81:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:72:77:91:A8:77:6A:36:FA:B0:7C:D7:F3:71:9D:13:9A:FE:40
X509v3 Authority Key Identifier:
keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f8:bf:fa:2d:39:ad:f3:07:c1:09:00:96:07:3c:24:68:c8:
84:6c:fa:f4:1d:62:8c:dd:21:77:63:87:ae:ab:12:83:1c:b9:
60:15:c2:2f:22:39:eb:62:4a:14:2a:e4:46:ad:a3:3c:39:bb:
ec:4c:bf:9d:b8:49:29:c1:c7:d0:67:d9:d5:7f:2d:fd:2c:53:
4c:b6:46:e5:4c:6f:6d:29:8c:cd:49:5c:75:21:9c:0f:4c:b2:
46:87:22:f0:75:cc:97:37:9b:68:9c:19:35:20:a7:67:b1:4e:
1a:d7:35:b5:0e:f4:0a:65:cc:2c:c4:eb:8c:78:11:20:31:6c:
93:a5:0b:78:6b:57:41:82:ad:89:6d:ab:56:20:0a:cc:6c:de:
96:23:ff:56:d2:4d:60:4f:99:0f:9c:c5:bb:35:3e:7e:79:b6:
e8:ee:6d:27:88:ee:3e:89:95:55:85:af:23:d3:cd:47:4f:0d:
ae:84:15:01:7a:01:ac:f1:2a:cc:86:5f:76:39:cf:0c:fd:52:
e4:5c:62:57:ca:b7:81:2a:f6:8c:8d:20:fd:ef:5d:7a:90:62:
2e:71:03:f9:74:3f:08:4b:d4:c1:00:4a:3e:7e:00:88:5d:92:
d3:3a:a1:8d:6c:e0:8c:27:2d:5b:98:d6:66:49:35:d8:08:aa:
75:4b:8b:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT31OGJU1F1qWWSeuQAKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmZlMmMwY2ZkNzY5MTA0NGVlMzc4NDVjZmNmNTRlMWE4
NDk5NzQwHhcNMjUxMTA0MTAwMDIzWhcNMjUxMTA1MTAwMDIzWjAzMTEwLwYDVQQD
EyhhNWUyNzI3NzkxYTg3NzZhMzZmYWIwN2NkN2YzNzE5ZDEzOWFmZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNPMZyvQIVH5+vZpOFBsIlRomJmS
swCgZTzeFrrIdB5gYal6acEL+s0AfM1Gb/ykgdSPTwOXelLLqdXmxOSrOsqUUCpJ
wVdFfBD3Wz3ovsT6S8tCXunvOOaOuX83ll+FjNWTiPyq7vPy/sTkvt05gpJ+ejo4
fRQNf76lp3yiPGZCrNntGjiWyGsFoZ/Tt74BIlOveaUSwETYb9uBxsDAtjh+RN/B
zaMOa1R2ffQBwIWf8clTZJPTe1mKzIpcVEbhIEcf+77cCeOVYDcGD9e2IHvbtKnM
3TasgO7lD6rtaPZqU2SWzSNL2xrjN8SbSFRmz8QsrKt+KfR8NsT1woGjHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXicneRqHdqNvqwfNfzcZ0Tmv5AMB8GA1UdIwQY
MBaAFNVv4sDP12kQRO43hFz89U4ahJl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYt
MDEwN2VjMzNlNWI3LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wMzExMzgtODZlMS00MTgyLWE3YTYtMDEwN2VjMzNlNWI3
LzEvMVdfaXdNX1hhUkJFN2plRVhQejFUaHFFbVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfi/+i05
rfMHwQkAlgc8JGjIhGz69B1ijN0hd2OHrqsSgxy5YBXCLyI562JKFCrkRq2jPDm7
7Ey/nbhJKcHH0GfZ1X8t/SxTTLZG5UxvbSmMzUlcdSGcD0yyRoci8HXMlzebaJwZ
NSCnZ7FOGtc1tQ70CmXMLMTrjHgRIDFsk6ULeGtXQYKtiW2rViAKzGzeliP/VtJN
YE+ZD5zFuzU+fnm26O5tJ4juPomVVYWvI9PNR08NroQVAXoBrPEqzIZfdjnPDP1S
5FxiV8q3gSr2jI0g/e9depBiLnED+XQ/CEvUwQBKPn4AiF2S0zqhjWzgjCctW5jW
Zkk12AiqdUuLSw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:35 2025 by rpki-client