Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json)
Hash identifier: f7+0tzfzN3nC2YBuQoMl7N2vO0HWI2CBMID5YUvNPtg=
Subject key identifier: 11:23:69:70:F0:1F:ED:A8:CE:DF:8A:03:26:86:22:07:09:9A:77:DA
Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345
Certificate serial: 019A4D06E9186B5A84D10FC2C4A391784CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
Manifest number: 0726
Signing time: Tue 04 Nov 2025 04:01:29 +0000
Manifest this update: Tue 04 Nov 2025 04:01:29 +0000
Manifest next update: Wed 05 Nov 2025 04:01:29 +0000
Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: n1pK/W72mLYU2368YjXWuKJZQ//gL6tA65NrHGFosyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:e9:18:6b:5a:84:d1:0f:c2:c4:a3:91:78:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345
Validity
Not Before: Nov 4 04:01:29 2025 GMT
Not After : Nov 5 04:01:29 2025 GMT
Subject: CN=11236970f01feda8cedf8a0326862207099a77da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:a5:74:3c:3e:ea:a3:60:b9:5f:c2:13:0f:
e9:b7:ed:19:1c:92:18:37:e1:fe:e9:0a:d1:b9:b9:
de:60:65:01:bd:f1:b4:16:fb:d5:5f:53:43:38:8f:
da:d6:3e:a3:22:fc:65:c8:02:d5:c2:aa:58:82:ac:
7e:a6:c9:78:60:fc:bf:7e:21:0f:a1:5c:2d:6e:55:
f3:ed:52:50:86:ad:50:9f:21:f0:99:67:a9:5d:6c:
7c:25:9a:f7:32:29:1b:4f:49:b7:cf:2b:ad:8b:50:
7c:38:09:28:85:f4:22:f5:18:e1:2a:b6:fb:ff:46:
65:65:06:ff:90:3d:fc:7b:39:27:b5:45:b6:91:2e:
0f:28:5a:b5:d9:c2:67:9a:f1:ac:3b:2d:9b:f6:af:
83:15:fe:94:41:d9:5e:3d:53:f4:f9:ad:b5:19:b2:
b7:b0:61:a7:22:6c:7b:84:66:eb:eb:2c:fd:05:8d:
e4:9a:26:96:d9:84:76:df:ca:a4:8d:32:94:9f:e0:
9f:4f:cd:91:5b:66:7f:a5:03:57:03:e5:ab:53:88:
58:08:2c:c2:13:c6:8e:99:3d:db:24:3f:44:07:98:
28:dd:64:75:8b:9a:12:4c:a1:b3:96:9f:21:b0:90:
d1:84:c4:73:a9:78:d5:29:7a:0d:ba:6d:67:aa:d1:
be:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:69:70:F0:1F:ED:A8:CE:DF:8A:03:26:86:22:07:09:9A:77:DA
X509v3 Authority Key Identifier:
keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:cf:0c:b0:5c:23:24:c4:57:62:46:14:d4:fc:0e:86:4a:
92:0c:a8:66:08:fa:15:da:16:89:70:f7:1c:14:aa:12:25:48:
3a:47:86:4b:f9:47:cf:0b:3b:49:87:8c:b6:9e:c9:7e:00:b6:
24:70:85:6f:06:ee:6d:f5:7d:e9:a3:ee:5a:d5:31:5f:e2:2c:
a9:6f:25:0d:5c:1d:86:84:56:16:fb:e7:88:a8:a6:65:60:e2:
f3:71:0a:66:ff:74:a5:7d:2e:24:e7:3f:5c:f6:87:04:ba:d5:
ed:7d:51:63:29:5e:fc:93:59:48:f6:0e:5c:2e:59:0a:e1:19:
ec:f1:a1:ca:13:ae:7a:a9:0a:1f:65:da:f5:c8:39:7f:fb:93:
17:39:b0:99:2b:d9:a2:c6:51:83:2f:67:d0:7c:68:dc:c3:70:
2e:d2:13:ca:c4:bd:31:d3:29:05:53:56:28:6d:99:88:a6:a9:
7d:cd:35:89:23:6c:cd:90:7f:b7:a1:6a:2b:7b:ad:be:e4:2d:
43:52:7b:00:25:7e:c0:a3:cf:0b:96:77:17:a9:8b:ff:df:c3:
03:69:89:92:4f:f7:30:b4:ec:a7:b0:12:76:1c:40:ed:6f:8e:
a9:a9:d8:a9:86:bc:25:98:ec:a9:dd:63:fd:d7:34:b5:13:1c:
cf:f2:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:03:02 2025 by rpki-client