Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File: WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier: wGtEwrLT86OGohF8gLGYZ49sdSws3WUU0gCq7JN517E=
Subject key identifier: D2:B7:CA:36:1E:DA:92:E8:2B:05:17:3F:BF:EC:0E:CF:52:58:50:98
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer: /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial: 019A5187BA36A6BC7C2F0EBD5A731A108E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number: 07F3
Signing time: Wed 05 Nov 2025 01:00:40 +0000
Manifest this update: Wed 05 Nov 2025 01:00:40 +0000
Manifest next update: Thu 06 Nov 2025 01:00:40 +0000
Files and hashes: 1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: t1upDwi0FdUrVOSUf+V8Ln7oQ24BxRv3MpRDALAGaIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ba:36:a6:bc:7c:2f:0e:bd:5a:73:1a:10:8e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Validity
Not Before: Nov 5 01:00:40 2025 GMT
Not After : Nov 6 01:00:40 2025 GMT
Subject: CN=d2b7ca361eda92e82b05173fbfec0ecf52585098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:e3:23:95:c1:04:9d:71:89:b3:d0:06:12:
89:b6:0d:11:35:ee:4b:26:39:6c:49:47:2d:4c:f2:
d7:b5:b4:4f:08:c2:58:d0:7c:fd:cb:2b:94:5a:cb:
fa:8a:36:b9:67:8c:88:53:72:ba:69:a8:85:7a:36:
f5:b2:bd:4b:50:fe:f1:bb:49:64:ed:88:96:e4:7c:
98:82:12:e0:7c:19:51:2e:dc:8f:1c:7e:64:47:b4:
bd:a9:f7:21:69:74:35:27:e4:26:6a:57:ae:d2:28:
90:1f:56:bb:0b:92:45:f6:fa:5a:88:5c:b5:9b:a9:
df:b9:a4:75:74:06:a8:8b:77:7b:db:39:7f:07:fc:
eb:26:3a:51:ee:d8:58:43:44:ff:5b:ab:42:aa:c5:
4e:ec:9b:a1:55:95:05:a0:10:2e:86:f6:91:c8:67:
bc:f0:8b:78:1c:da:b0:46:72:23:91:ce:e7:9b:99:
97:63:c1:fa:68:81:6a:76:62:df:53:d1:d7:3d:28:
74:d4:3c:da:0f:60:8e:61:ae:82:6e:64:04:8e:86:
d5:30:30:fc:cb:01:4b:c0:dc:f5:fb:2d:b3:79:ec:
72:4c:27:82:88:ab:c8:57:58:80:66:2a:a6:98:12:
14:a7:38:4c:a9:ee:82:5b:61:6c:4f:23:ef:c0:ad:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:CA:36:1E:DA:92:E8:2B:05:17:3F:BF:EC:0E:CF:52:58:50:98
X509v3 Authority Key Identifier:
keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:da:d4:16:97:4e:ee:4e:cf:b1:67:a6:b4:82:57:a6:44:f9:
34:e9:a0:51:f5:2d:1a:5e:0b:e6:16:07:e5:c8:6d:8b:2e:f3:
22:36:79:7a:e3:14:57:52:66:18:12:7a:0b:90:13:5e:5b:e8:
f7:be:6e:16:04:d0:19:05:0a:e8:81:f5:02:39:f4:a3:3c:ae:
56:00:f3:b7:0b:ef:19:32:bd:f6:89:1a:6a:f9:02:dd:13:20:
05:17:9b:0b:34:f7:66:a8:61:15:6e:9d:85:c4:be:ee:ad:fb:
0f:51:d0:7c:a9:14:a7:0f:88:eb:b2:a0:ed:84:3e:49:01:9e:
b6:cc:c0:34:b8:b9:91:e7:19:d1:14:ce:6c:a4:8c:ff:16:fc:
68:79:fb:2a:5c:c4:3f:f2:6e:8b:45:c7:89:52:65:f5:48:21:
ad:13:26:f6:b2:33:46:b2:07:f6:bc:5c:fe:97:af:d2:be:47:
87:75:82:dc:ce:f1:aa:d3:cc:ef:ba:29:29:db:52:b0:ba:70:
4e:08:2e:3d:af:d6:d1:86:2f:2f:8d:65:67:71:af:47:a3:4f:
81:06:e3:ce:f8:43:81:b1:2f:35:7d:de:bc:bb:ce:9e:07:8b:
ab:7b:2d:c7:7d:40:83:55:42:86:08:8c:3c:5a:e5:c3:d2:d9:
41:cc:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:40 2025 by rpki-client