Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier: prYaH2/XiADb8GP9XwAuTeUq3SmHOs9pwqrLdXbyUjc=
Subject key identifier: 90:8C:D4:79:F3:35:05:89:C9:2C:03:63:98:4C:52:B0:3C:BE:A8:2D
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial: 019A5006DA610F5621F86C9CB39929E8A1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number: 14B2
Signing time: Tue 04 Nov 2025 18:00:17 +0000
Manifest this update: Tue 04 Nov 2025 18:00:17 +0000
Manifest next update: Wed 05 Nov 2025 18:00:17 +0000
Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: gqYcyqhvCuPVMjH8gMmUbnB9itgi/9mhz6OB/NupueQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:da:61:0f:56:21:f8:6c:9c:b3:99:29:e8:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Validity
Not Before: Nov 4 18:00:17 2025 GMT
Not After : Nov 5 18:00:17 2025 GMT
Subject: CN=908cd479f3350589c92c0363984c52b03cbea82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:5f:a3:aa:12:55:f5:28:82:3f:bd:4f:77:
37:1f:84:ad:d8:87:02:bd:0d:b4:9e:f4:01:de:38:
f3:04:b2:c0:82:0b:47:bd:e6:ed:d4:10:78:dd:fe:
05:91:db:12:0e:9b:38:e5:11:96:aa:92:94:8d:e3:
12:8b:4a:45:3c:49:f5:16:ff:23:f9:bc:69:53:c4:
c9:e9:12:28:d6:b8:e1:87:61:3a:58:1c:55:11:8b:
13:9a:ec:77:cb:c9:d9:81:21:1f:b3:c0:3e:08:bb:
0c:ec:2f:5f:bf:78:b8:29:d8:68:51:02:23:8f:d7:
83:08:f2:07:9d:f0:a3:2a:fb:36:98:85:50:51:8c:
9d:de:a2:30:5e:3d:fe:e1:9a:a4:b5:17:a4:47:32:
75:16:39:b2:e8:f1:22:b1:9c:e5:fa:53:2a:12:fa:
76:c2:6e:d6:10:12:0e:f1:4b:24:99:f3:d8:de:78:
ae:74:05:7e:ce:35:09:0a:5c:17:c5:ca:5a:b6:f6:
96:ae:25:d4:34:65:48:9c:62:bc:59:8e:3b:e1:02:
1e:9c:e2:6e:9c:14:2c:66:c5:d8:2e:00:9e:a8:f6:
2f:15:da:06:a3:9a:2a:d3:91:f9:41:7e:51:42:81:
ee:e5:75:44:b8:0d:be:7c:3e:19:3a:9d:cc:b4:0d:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:D4:79:F3:35:05:89:C9:2C:03:63:98:4C:52:B0:3C:BE:A8:2D
X509v3 Authority Key Identifier:
keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e8:7c:c4:a9:e0:e8:46:23:a6:0b:6c:b6:c6:46:94:3f:f8:
3b:2d:a2:19:c8:42:e7:f0:6e:99:8b:13:72:83:6e:85:f5:b5:
47:53:95:07:50:5e:dd:8d:72:a1:30:dc:5a:38:3a:c7:08:96:
a8:61:48:6a:7d:88:28:f0:22:2c:b7:9a:af:7d:e5:25:5b:a6:
37:09:16:33:d9:d6:1f:f0:a5:46:b3:52:06:6f:6e:b7:70:13:
53:43:a8:8a:2e:32:cd:29:fc:c4:c2:3a:3c:11:d0:13:8a:3e:
6b:f6:e3:82:f4:51:23:b0:9f:0a:4e:21:d8:3d:b9:09:c0:6b:
e3:54:a9:bb:5b:06:67:d7:98:d6:1c:8f:42:88:45:12:db:f6:
c8:a2:b0:7c:5f:90:70:88:22:29:6a:bb:90:55:cf:34:15:db:
65:fe:5f:3a:aa:9d:9b:8f:2d:c2:ab:3c:6a:f3:db:33:d5:b0:
ca:da:48:e8:3a:ee:cc:72:e3:02:bc:77:17:40:72:c1:3a:7c:
8a:d6:e2:86:14:31:cc:f7:fb:d0:90:e2:1f:8c:9d:33:78:03:
3e:d4:cc:f9:37:8d:02:b8:26:ec:c5:43:de:e9:fe:cc:b3:9c:
0a:f3:1d:7d:37:e8:50:8a:2f:97:72:a1:cf:f7:23:21:8a:5b:
9f:a1:20:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:44 2025 by rpki-client