Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier: lD+o7x53AHVirkazh/QKtkQc7tLYc62sMiajIRW8+KE=
Subject key identifier: B6:DC:34:C1:C0:32:3D:79:22:F1:B1:C7:29:FC:AC:F4:89:51:89:92
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial: 019A4F62C93A3F9CF755CAAE8CA60D3F18D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:01:05 +0000
Manifest this update: Tue 04 Nov 2025 15:01:05 +0000
Manifest next update: Wed 05 Nov 2025 15:01:05 +0000
Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: AuymIXAmXsnDu2g0V9UM4AK2Ns+M6tSSfZSiep15jMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c9:3a:3f:9c:f7:55:ca:ae:8c:a6:0d:3f:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Validity
Not Before: Nov 4 15:01:05 2025 GMT
Not After : Nov 5 15:01:05 2025 GMT
Subject: CN=b6dc34c1c0323d7922f1b1c729fcacf489518992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:71:84:f7:f2:39:c3:77:47:0e:83:29:ed:
16:47:5b:bc:9e:a1:5f:d0:f9:c6:8f:64:8b:36:2d:
ad:c9:0f:e0:ce:0b:72:7d:1f:d4:b7:f1:69:f6:b5:
35:dd:80:34:63:1d:04:65:54:33:e4:9e:36:d8:dc:
6d:a5:95:fa:da:0c:9b:96:0f:df:b6:20:9b:86:8e:
39:c7:a6:dd:c4:bd:8a:91:d4:ef:47:c0:37:3f:40:
c6:07:aa:a6:11:68:84:99:98:1e:63:d3:e5:6c:f9:
ad:03:ee:d8:d1:a5:0c:03:12:da:ed:c4:1f:6e:0c:
51:ce:c7:90:09:57:62:b7:0c:cf:04:e0:f8:e8:ef:
3f:04:ea:01:5d:64:85:9e:f0:c1:86:92:5c:ad:7a:
3e:19:d9:de:a0:f7:e6:f2:f7:d1:04:30:26:72:15:
fe:ca:7d:00:ce:f2:b1:a3:e1:72:13:62:42:3c:60:
db:ad:1d:fa:60:94:fc:7b:5a:63:38:d1:96:05:68:
ae:0f:59:54:c6:6d:1d:eb:1a:1b:c6:7e:00:30:d1:
ec:56:28:43:8b:74:02:e1:99:49:4f:25:39:12:26:
23:df:ef:f2:2b:77:bc:55:09:a4:ba:a3:a0:f5:57:
d5:2a:f2:a2:96:d7:9a:76:a3:34:f8:3d:d7:4f:da:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:34:C1:C0:32:3D:79:22:F1:B1:C7:29:FC:AC:F4:89:51:89:92
X509v3 Authority Key Identifier:
keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0a:e3:b0:e8:5d:47:18:2f:d6:fa:09:e7:5b:38:a9:ea:7b:
91:e1:bd:19:22:ad:37:c0:99:a0:47:41:20:7f:f5:30:05:07:
af:72:52:01:a3:ab:dd:4e:fd:5d:0d:20:36:c2:68:ed:05:2d:
39:cf:53:21:07:6e:3d:62:bb:4d:7f:20:de:a2:4f:a3:03:f3:
d8:26:68:7e:00:2b:e7:21:00:41:ef:b3:2c:06:84:58:2b:7e:
ff:c1:75:78:79:b7:19:e8:e3:e3:9e:af:5c:d4:8b:68:f0:b4:
29:5e:5f:eb:66:6a:a7:6d:3b:d5:95:2e:42:c0:48:71:86:d4:
f8:0b:85:ca:83:b9:55:35:8d:1c:21:4f:07:30:12:17:7e:f1:
ab:5d:4a:76:b0:d1:e4:7c:8a:c9:97:b8:49:24:68:03:07:3a:
6f:93:ad:1a:a1:ea:28:7d:9b:86:df:14:26:91:5f:28:9b:fa:
88:b8:1f:99:47:7f:14:53:3b:47:8f:34:a5:87:c0:25:52:d3:
08:6c:91:34:7e:7e:e8:cd:39:9d:c2:d3:4a:46:34:ae:f3:2c:
77:9e:50:c8:4e:a2:66:9a:cb:7d:b8:ca:b4:72:de:2e:34:f1:
16:a1:2d:9a:8a:c2:7e:c4:12:86:30:80:95:4f:d8:1a:8a:c3:
80:9f:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:52 2025 by rpki-client