Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json)
Hash identifier: 0DE0bF9huISGNel57iMMXrAP6myLzS2ah8p03H9TMMw=
Subject key identifier: 97:BB:64:A0:97:05:98:42:33:47:10:B3:7B:57:9C:6A:33:B3:DE:94
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019A4EF5C71FA31C5F32B56E8C4D8F04AAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
Manifest number: 035E
Signing time: Tue 04 Nov 2025 13:02:01 +0000
Manifest this update: Tue 04 Nov 2025 13:02:01 +0000
Manifest next update: Wed 05 Nov 2025 13:02:01 +0000
Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: t5zvAhTa20nnA76zH6ZpkPSNrYVf509XRD6tftWk7/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c7:1f:a3:1c:5f:32:b5:6e:8c:4d:8f:04:aa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Nov 4 13:02:01 2025 GMT
Not After : Nov 5 13:02:01 2025 GMT
Subject: CN=97bb64a097059842334710b37b579c6a33b3de94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:43:be:27:d4:a0:24:00:a9:de:61:2c:27:
a9:53:94:49:97:46:ef:e5:a1:c8:ac:fb:7a:ea:05:
25:c7:4f:03:73:1e:6d:6b:24:fc:a4:94:e8:5c:04:
82:cb:da:d7:6d:37:f5:f9:86:64:fa:fa:9a:fe:d5:
dc:29:a6:85:47:97:ee:75:1e:a3:73:a5:de:94:e5:
d4:df:e5:97:4e:3c:48:eb:e7:80:f1:3e:84:9d:0d:
57:2d:ce:22:cc:45:74:30:ef:04:a8:70:c7:26:79:
71:84:e1:31:49:9f:f3:34:f9:cc:2b:c4:67:33:08:
0a:5a:c6:81:2d:3b:4e:00:e3:29:1c:d8:5a:de:0b:
a0:75:c0:45:7d:b7:b5:a2:55:1b:fb:17:f3:f2:dd:
aa:2b:15:96:e5:72:31:34:d2:d7:a2:b8:89:5e:53:
8c:d5:dc:fe:0d:eb:26:65:dd:b9:a6:25:bf:81:47:
c3:55:26:d5:bf:02:5b:68:f7:12:1b:4b:ac:24:54:
b3:fe:c6:25:8c:85:3f:b8:0d:8e:f9:98:6d:35:f5:
38:f3:f4:7f:9b:f0:d2:fe:b8:87:2a:45:8b:45:dc:
2a:9d:d8:57:ad:62:cd:be:96:a3:1d:f5:c5:4e:c9:
6f:be:f9:44:c4:7b:f8:a0:78:59:5b:72:88:c0:22:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:64:A0:97:05:98:42:33:47:10:B3:7B:57:9C:6A:33:B3:DE:94
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:aa:d8:44:42:30:ee:36:c8:59:2a:db:26:9a:66:32:06:
b4:82:f4:7c:fe:b4:69:b6:06:97:e2:d2:5b:4d:9e:84:ef:68:
5c:29:d4:10:99:a4:15:bc:28:a7:56:c7:c2:6c:80:d2:5a:ad:
11:87:93:64:9e:40:6d:53:d7:56:1a:00:4c:50:bd:31:63:b9:
33:65:1f:46:9e:81:75:c2:cd:fd:d1:8d:21:1f:93:f1:d8:78:
c3:1d:5d:e3:93:c8:d4:26:e1:ba:9a:2d:8f:2f:6f:1c:fe:eb:
cb:9e:b8:73:8d:91:2e:76:2f:14:5c:c0:11:d5:1c:e1:03:33:
73:35:27:43:1d:74:e8:39:92:6c:db:e8:4b:3c:a4:d9:07:57:
fa:f7:b1:07:18:17:65:21:47:7a:52:70:de:93:ba:fe:90:24:
b3:f7:53:84:51:7f:4b:36:1f:63:0c:19:b0:d4:7f:79:96:df:
f0:24:e9:7d:0c:8a:8f:ca:d3:2a:4c:2f:73:94:ea:5d:f9:73:
fd:a8:94:09:96:ad:b9:38:db:b8:62:47:22:9d:d0:9a:6e:ab:
81:98:7a:0a:60:20:33:b8:68:a9:cf:4d:63:b7:4d:43:74:fc:
bc:17:57:5d:b0:2f:62:3e:bf:fd:06:99:aa:0d:6e:1c:53:fc:
20:b0:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:22 2025 by rpki-client