Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json)
Hash identifier: zx7ZvZy8N8KqCrUY5qYjQak5SPBRbtiMGb+DF4wceJs=
Subject key identifier: 9D:A5:D5:AB:CA:DF:AA:38:B8:F3:02:07:DF:CA:3D:F1:7A:FD:8B:DD
Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Certificate serial: 019A522C571B3B8700B0825BEEEABC5D451F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
Manifest number: 170A
Signing time: Wed 05 Nov 2025 04:00:28 +0000
Manifest this update: Wed 05 Nov 2025 04:00:28 +0000
Manifest next update: Thu 06 Nov 2025 04:00:28 +0000
Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: 54JoJ1EJvDJwFKIIk3LgzQ6DyaHqm1Ve7xhZvhwRFMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:57:1b:3b:87:00:b0:82:5b:ee:ea:bc:5d:45:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40
Validity
Not Before: Nov 5 04:00:28 2025 GMT
Not After : Nov 6 04:00:28 2025 GMT
Subject: CN=9da5d5abcadfaa38b8f30207dfca3df17afd8bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9a:af:5c:7b:13:05:88:7a:bc:18:6a:3f:c3:
4d:ec:07:f0:60:dc:ce:3b:c7:d1:99:92:d0:5f:27:
7c:17:77:29:6d:5d:1d:4b:63:1f:29:a4:7d:e5:ff:
ac:4b:3e:17:2c:34:24:f5:e9:fe:f5:04:d8:3c:f0:
19:9d:1b:b5:8e:8e:af:76:48:e0:26:d8:e7:20:3e:
df:9a:d3:12:c2:0d:d2:21:55:06:4b:6a:89:c5:dd:
b9:e0:0d:e2:7b:31:82:af:54:35:fc:9c:25:23:cc:
df:4f:10:5e:4d:93:af:00:6c:eb:f0:e3:69:de:46:
7b:8d:09:57:d7:14:a3:33:25:fd:4e:64:f6:34:f4:
6c:04:67:a8:79:97:21:2f:91:aa:9c:7e:83:cc:36:
a2:63:5e:4b:9e:fe:75:dc:9f:dc:23:be:6e:b3:aa:
0d:69:72:ad:39:24:2a:08:fe:7b:6c:8c:7d:05:48:
00:2c:87:2f:c5:21:23:c0:ab:82:f7:2e:1c:e0:84:
3a:f6:90:55:6a:22:ae:65:3f:db:de:b7:b6:53:45:
15:a4:0d:be:d5:f5:70:0f:bf:c6:f3:0b:c9:7f:c4:
b0:23:6f:91:50:45:54:bc:56:5f:33:bb:f3:ab:98:
f8:0f:56:a7:9d:d1:1a:49:6c:82:49:9b:dd:c9:7a:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A5:D5:AB:CA:DF:AA:38:B8:F3:02:07:DF:CA:3D:F1:7A:FD:8B:DD
X509v3 Authority Key Identifier:
keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:03:87:d0:91:98:2f:06:7a:8b:85:93:ca:79:44:4c:f4:76:
df:fb:76:ef:bf:d6:fb:1b:fb:c2:f0:31:fb:db:29:b7:8b:5a:
a7:5c:20:e4:c6:3c:d5:cf:3d:aa:c9:eb:12:a7:81:07:bb:ed:
35:df:19:db:93:4f:3f:1d:a9:ff:19:2c:ac:f8:fd:05:07:98:
b5:af:5d:15:e4:7e:ca:34:a0:8c:7f:37:a6:c0:c7:75:be:90:
7f:cc:78:3f:3f:eb:a6:b7:ff:d4:2c:ed:1d:38:e0:03:c1:2f:
68:15:1f:a2:31:26:f7:1e:98:2d:0e:6e:09:b2:d7:04:b4:5a:
11:99:61:22:4e:2d:5b:89:b0:36:13:4c:e1:28:70:4c:af:74:
57:3a:aa:62:77:9f:44:0d:e8:3f:ca:97:23:2c:b9:40:41:f4:
27:2e:0c:d9:1d:ff:00:ae:78:b2:90:a6:52:b8:1f:37:38:01:
2d:66:27:d9:d2:09:6b:70:6b:76:cf:6f:f8:f1:0c:a5:b4:76:
87:11:19:9a:9f:af:31:f1:80:e4:c1:96:5c:90:ab:ba:c7:02:
b8:de:ca:5a:ad:c0:aa:86:63:44:08:d3:9d:e5:98:2d:ab:ff:
71:8b:0e:a9:17:86:e5:c2:54:d5:90:90:7c:df:bb:a4:d3:b8:
2b:63:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:24 2025 by rpki-client