Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
File: W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json)
Hash identifier: SjGizIVlGFNarWaUHG217K5BLwh20uOEZrqNl0VJ7C4=
Subject key identifier: F3:A1:F1:3E:53:D7:2B:9E:38:43:34:6F:FE:BE:87:E9:1A:FE:5A:3B
Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
Certificate issuer: /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Certificate serial: 0199FD348EE0ECE70CE8DA043DFA92E6BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
Manifest number: 02DA
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: UQtRgHnMrClHH9h5ZqeBRcytBIvZyx7MAaeM/ZhAXD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8e:e0:ec:e7:0c:e8:da:04:3d:fa:92:e6:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=f3a1f13e53d72b9e3843346ffebe87e91afe5a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:46:79:54:bc:02:9c:17:32:7d:12:48:08:
90:1d:f4:24:37:10:a5:c3:e2:ee:c9:88:95:a2:0f:
ea:b0:47:87:c4:77:ba:82:f9:ae:2c:33:27:e9:ca:
6d:1e:94:82:d1:26:3a:1e:fc:79:c9:b3:96:2a:fe:
07:b6:f7:92:3b:c5:0d:44:84:6a:8d:d4:5c:e9:ee:
2b:f7:27:0d:be:ac:ba:10:a9:de:72:ad:13:f3:f6:
43:af:86:bf:aa:43:6e:4c:c4:1a:8a:63:4c:c9:b7:
2b:07:5b:07:f1:85:17:a2:c6:24:a2:f5:42:26:3a:
3b:1f:5a:7c:e8:6a:f0:50:83:83:7a:98:12:37:f1:
25:9b:db:c9:63:2c:41:89:76:94:c3:11:ec:cf:48:
32:a7:63:06:71:a6:42:12:12:a3:d8:58:57:9b:67:
de:26:8c:e8:36:c3:5f:cb:2a:a4:71:db:5f:fc:e2:
32:83:31:e0:47:74:0e:95:4f:59:c3:28:b9:3b:7c:
9b:be:69:ab:b7:71:8a:4e:02:d8:10:db:65:ef:e3:
2a:ea:a4:6e:45:4a:cc:6a:cb:b7:e1:d5:03:3c:dc:
25:38:d8:d9:86:7c:6b:31:35:b4:01:68:bd:4b:11:
6e:98:0d:46:2b:36:08:71:98:cf:ae:6a:28:39:30:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:F1:3E:53:D7:2B:9E:38:43:34:6F:FE:BE:87:E9:1A:FE:5A:3B
X509v3 Authority Key Identifier:
keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:df:48:db:29:a8:9e:a1:20:fe:96:c4:3b:2b:91:0b:87:7f:
7b:43:ba:48:e9:44:4a:be:09:58:0c:32:16:e1:53:ca:b5:b8:
ec:fc:16:c7:e9:ee:da:b2:30:bb:a9:ba:d3:8e:d5:df:1a:b8:
76:f9:12:b4:0e:7b:a2:01:22:af:1a:49:e9:97:f9:ed:ec:19:
23:7a:75:96:e8:d1:fc:bc:13:9e:09:3e:03:3f:20:47:cb:37:
5c:de:42:4d:55:d2:22:a0:9f:0d:43:37:ae:3b:dc:5c:4a:cc:
ff:b1:32:94:a5:2d:75:1e:91:b1:7c:f2:cd:fc:b6:00:af:09:
8e:24:e5:13:c7:63:b4:97:67:9c:80:60:22:e8:eb:41:15:57:
b6:9c:c9:1f:02:86:39:9a:67:63:72:83:d9:f4:c7:60:2e:0f:
dc:bc:9a:7c:f7:14:d9:58:93:3b:a2:af:dc:95:36:6f:8a:34:
fd:aa:2f:92:14:06:01:84:f5:4e:88:14:48:21:39:34:b6:1e:
03:df:09:c8:c5:fe:84:8b:c9:15:43:4e:db:98:67:69:9c:8f:
9e:14:93:10:b7:46:07:28:19:42:5a:43:c3:fa:a2:61:bc:ec:
cb:2a:0a:e4:69:f2:e7:7e:ee:2a:eb:90:57:8f:18:65:da:77:
be:a6:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:30 2025 by rpki-client