Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: TVJGqCSGrh8tevZN7PHdWckB84kO/c5iAxXdgoJGLgk=
Subject key identifier: 6B:1D:DD:E5:A8:C3:45:B6:DD:6F:31:9F:DD:9D:23:34:19:F6:E9:7A
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 019A4E4F30DC155A1DA94BE069258A69F1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 0A12
Signing time: Tue 04 Nov 2025 10:00:03 +0000
Manifest this update: Tue 04 Nov 2025 10:00:03 +0000
Manifest next update: Wed 05 Nov 2025 10:00:03 +0000
Files and hashes: 1: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: fUAtRTBIsNVDpor/F6g4UYJ1yEl/QNXKcXrKTp3QaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:30:dc:15:5a:1d:a9:4b:e0:69:25:8a:69:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: Nov 4 10:00:03 2025 GMT
Not After : Nov 5 10:00:03 2025 GMT
Subject: CN=6b1ddde5a8c345b6dd6f319fdd9d233419f6e97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:ad:77:2b:f5:d8:7b:d1:cc:9f:7c:af:cd:
9a:7b:0b:63:5d:ea:e7:cc:7a:79:fe:d7:97:c3:33:
e3:c1:51:32:36:a5:00:34:e1:45:a3:a6:4b:9e:eb:
70:8f:fb:6c:c5:e6:7c:ae:86:f4:11:87:c2:05:07:
2d:6b:27:38:b6:ed:48:86:00:56:ad:aa:88:c2:ee:
c7:f5:1b:b8:71:79:1c:b2:41:4e:dc:e2:08:25:1a:
01:d7:3b:59:f2:38:f1:04:e0:12:be:65:fc:46:c1:
26:d9:27:38:ae:b4:9c:36:d9:d5:92:b8:e9:97:c7:
3f:65:cb:39:ed:e4:a6:ac:56:12:b8:20:61:5a:09:
80:40:98:f1:2c:ba:4f:a0:f8:32:0f:29:0b:d5:00:
01:fa:47:4c:35:e7:e0:97:0f:04:3f:14:6d:40:2d:
c5:1d:41:61:c1:8b:6d:3a:2d:55:01:1e:d2:66:e7:
c2:dd:a2:f0:9f:63:c7:29:78:95:f3:97:19:23:40:
af:d1:a4:24:3f:1b:13:73:4f:4d:4e:55:a8:8d:3b:
ad:00:b6:ed:b3:a3:ef:5a:25:d6:3c:bc:92:7f:75:
48:4d:97:c6:65:e3:c6:78:dc:23:97:3a:f9:53:74:
73:74:35:ef:af:67:a7:b3:6a:9f:ce:d4:3f:6c:b1:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:DD:E5:A8:C3:45:B6:DD:6F:31:9F:DD:9D:23:34:19:F6:E9:7A
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dd:93:90:ae:ab:41:61:f0:08:3c:a4:1a:13:df:25:78:56:
67:54:15:7a:ba:57:2b:66:12:cf:83:c2:30:7e:38:17:67:47:
8f:6e:6c:40:d2:40:98:50:46:d1:c1:75:16:8a:a2:22:6f:05:
13:6f:11:49:e7:06:87:68:bc:ca:f4:7f:0a:cd:82:62:43:7b:
70:44:d1:31:d8:fb:d5:78:ba:32:45:0a:e3:55:29:5a:68:f7:
1f:71:45:79:82:de:ef:71:ae:63:6f:b3:b3:4c:f1:63:22:e2:
32:d7:99:e4:a6:38:91:22:25:ec:9d:c2:59:3a:3b:fa:9d:0f:
fb:34:d9:52:08:a4:bf:cf:e9:31:56:fb:aa:9d:09:41:de:1c:
20:93:0c:f0:8a:bb:b1:f5:20:7f:7d:f7:27:65:d0:42:15:38:
fb:44:d2:bd:c7:ed:98:3d:86:f9:25:65:13:f6:25:58:35:8a:
b6:91:de:4c:54:6b:30:60:10:10:b3:58:23:c9:2d:2f:2a:f9:
9d:c6:d3:aa:e8:6b:2d:82:d8:7d:06:1b:22:cf:95:c0:7e:b9:
cb:47:26:79:f5:94:95:95:e3:40:01:2f:ae:47:b8:dd:d6:37:
f2:4d:75:7b:76:68:19:42:07:45:45:f8:69:c6:e0:29:d0:b4:
5b:15:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:45 2025 by rpki-client