Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: q0+RkUslcSJ7pAll0vj9J0QSeWiN75C3660YjBx0g0U=
Subject key identifier: C3:C3:A2:0E:F9:3F:56:3F:32:3C:2B:DE:4E:A3:42:B3:BE:58:D3:28
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 019A4DAA6ED389705B870F7C4BBE5603F5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0C81
Signing time: Tue 04 Nov 2025 07:00:06 +0000
Manifest this update: Tue 04 Nov 2025 07:00:06 +0000
Manifest next update: Wed 05 Nov 2025 07:00:06 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: KcnQ3fR3gpj/2CiD1901ts8mQzaqYkIUEETUOi7pAUw=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:6e:d3:89:70:5b:87:0f:7c:4b:be:56:03:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Nov 4 07:00:06 2025 GMT
Not After : Nov 5 07:00:06 2025 GMT
Subject: CN=c3c3a20ef93f563f323c2bde4ea342b3be58d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:0c:21:db:30:a4:a0:e0:e2:c2:bc:33:2b:
bc:62:3d:e0:c8:99:08:95:69:28:37:7b:dc:3a:71:
9c:fc:29:5c:5e:fe:8b:77:95:11:a6:a3:9c:70:e1:
35:2f:3c:40:f1:e3:57:30:ca:4d:6d:46:88:35:c3:
0d:e9:7c:8e:e3:7a:af:c4:1a:27:2e:37:53:79:2f:
6d:74:00:a4:5e:b7:ed:f8:56:6d:5d:b8:5e:25:3b:
1c:e2:f2:83:06:bd:a7:d0:4e:d8:b1:64:f4:b3:9b:
c8:b7:66:01:16:9a:65:df:2e:b3:f2:87:4d:13:7d:
48:92:98:89:a9:a1:5b:7a:01:2a:78:9d:a9:83:2e:
e9:17:95:3c:54:64:d7:60:b1:17:a8:6b:10:81:6d:
59:92:8b:ed:c8:e5:9a:3a:14:02:bb:6c:52:9b:ea:
57:e8:86:d3:8e:cf:89:f6:ea:00:df:bb:9b:32:40:
db:d5:79:c2:cd:0a:4d:f2:52:75:07:d7:91:57:0a:
98:12:61:b5:a1:c7:db:07:7f:6b:0b:16:2b:bf:8f:
fd:89:ad:01:8b:d4:34:36:be:ca:20:1c:db:8f:b4:
b1:cc:a6:80:7f:18:7c:a8:48:29:36:e4:a3:0a:a1:
24:a1:6f:51:b5:11:e0:8a:dc:73:1d:9b:1c:4d:ee:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:A2:0E:F9:3F:56:3F:32:3C:2B:DE:4E:A3:42:B3:BE:58:D3:28
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7a:75:b8:df:0f:61:87:17:ec:0b:94:18:df:10:e6:df:f6:
71:3c:a9:3f:98:2f:84:5e:1b:48:5b:c3:ed:8c:4e:c7:2c:24:
9c:6d:89:69:c6:b3:a0:ec:0d:93:53:49:9d:ce:d0:62:c9:30:
96:aa:4a:ef:02:8b:8d:e6:19:ff:f4:8c:e9:b4:83:b1:56:11:
7c:00:05:f2:e0:7a:51:ce:ea:15:e3:cd:ab:50:a5:76:8e:51:
04:df:ad:de:7d:0c:93:a7:0a:ac:cb:fe:17:db:2c:e0:54:64:
a4:84:b2:3d:de:99:98:1f:d8:bb:cc:65:75:ef:3f:ca:23:e4:
52:70:67:a3:e0:50:4b:fc:fa:4c:0a:da:77:33:cd:f3:cd:e8:
7e:45:db:b8:53:e5:6d:0d:43:27:c8:b6:04:f4:45:f6:cb:d5:
d6:c4:0b:13:aa:69:ad:8f:6f:1d:cd:55:6d:cb:ee:15:77:28:
4f:1b:c9:a8:9f:1c:78:17:5a:d8:0d:6c:e2:41:a8:fd:48:81:
2a:e4:5d:92:2e:30:5e:50:ba:48:74:83:1f:d1:9a:97:00:fc:
eb:f1:35:2b:23:3d:96:09:85:6e:33:7a:a1:36:1f:ec:89:c9:
b2:88:00:ca:7e:2f:59:65:3f:ba:88:bf:95:de:cb:39:88:0f:
df:93:95:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:42 2025 by rpki-client