Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier: b3jmVJWfmAnuwLKD9F3GVTNwr8R3Es/ZctGZMc6p8xM=
Subject key identifier: C9:C0:B2:11:7D:A6:86:5D:55:A3:D4:61:A8:25:9B:38:38:5D:7B:37
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial: 019A4EF49C565833D45A40146DEA620EAAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: W5e+98c5BBfeHhGsUBJUgcGtOBSRnVUWl1QVscAWQ3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9c:56:58:33:d4:5a:40:14:6d:ea:62:0e:aa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=c9c0b2117da6865d55a3d461a8259b38385d7b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:b5:a3:0f:bd:cd:3c:34:7f:d4:6c:b6:10:
f6:ad:55:c7:14:59:7c:e1:60:c2:71:73:ad:49:69:
0d:28:20:52:5d:aa:a9:96:04:26:b2:87:4e:bf:70:
0d:b3:9e:61:bd:0b:ee:00:bb:d5:4c:29:17:e3:ae:
97:86:25:47:12:0b:37:1c:93:5b:19:2d:bc:b9:5a:
91:a6:c6:27:36:95:27:08:89:2d:73:ac:50:75:61:
9f:c6:77:3c:6c:6b:92:f7:f9:bf:d3:ab:17:a3:fb:
9b:8d:11:7d:ed:ee:ac:c9:0e:18:cc:67:f4:25:e3:
d2:37:14:c9:1d:8e:aa:a5:62:84:c4:80:c3:9f:1e:
d4:a6:1a:f2:ee:30:ba:c5:43:b3:fa:e8:35:5b:5f:
10:87:92:32:eb:e4:7c:2c:73:bf:4c:15:c1:92:0a:
38:93:49:b4:45:02:dd:70:98:c3:c6:5c:0e:19:d2:
86:3e:b3:85:2c:12:c9:3f:6b:de:86:02:02:24:86:
59:98:d8:0f:30:04:aa:a1:c5:35:66:12:2d:a3:2a:
76:70:38:9a:83:e7:43:94:5c:58:c2:a1:65:c7:27:
89:dc:7f:00:09:08:f3:be:71:b0:e4:00:de:1b:be:
0c:3a:c9:54:a9:7a:9c:58:0a:e1:6a:93:6d:c8:e9:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C0:B2:11:7D:A6:86:5D:55:A3:D4:61:A8:25:9B:38:38:5D:7B:37
X509v3 Authority Key Identifier:
keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:21:72:45:1a:21:d7:21:f2:dd:d4:c3:b2:60:e4:2e:a2:
d8:ce:61:3a:54:60:0b:38:af:f0:ea:af:a3:0e:bc:4a:bd:9d:
e8:54:cc:21:c5:75:4c:b2:be:41:63:c1:1b:14:2e:b5:dc:88:
51:70:d5:16:6a:12:6f:37:c2:32:96:9c:2a:96:d0:bd:ed:e5:
e8:21:c3:33:82:3f:fe:f6:da:24:94:2b:53:22:57:31:4f:56:
c3:81:cf:7a:4e:f7:35:19:76:55:62:19:90:46:3f:0f:3c:5b:
1c:46:4b:06:0d:30:ac:de:b1:11:eb:c2:a9:ef:b0:12:21:7c:
94:78:3a:c9:90:f5:48:da:c1:b5:25:3b:e4:08:f7:1f:43:f6:
d3:3b:44:9d:ac:32:06:22:76:b6:bb:e7:72:00:77:93:55:64:
f8:4c:6d:1a:64:c9:9f:fb:82:a7:8d:10:1b:07:98:de:d1:3a:
2a:ac:c7:ed:44:98:14:03:28:ce:fa:fe:7b:82:fd:52:c5:9d:
1a:66:c5:5f:ab:51:b6:4e:c9:42:3f:f6:f2:44:16:22:5a:1b:
d7:30:ce:c0:e3:d1:ae:e6:ec:2e:81:c1:d7:65:01:46:4b:bb:
66:ba:c5:37:56:6c:70:d4:75:42:2e:0a:2b:e6:f2:7b:30:de:
bf:66:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:38 2025 by rpki-client