Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
File: wa45j5qt0GOL_-okwceeuIMveHU.mft (raw, json)
Hash identifier: CKIci6MCbs3mauPHsbubaojOipgOzGHI6FioYm2LvMI=
Subject key identifier: C6:35:DE:7E:F8:D9:F3:C8:24:1D:25:C9:EE:9A:CD:58:0E:9B:7E:9D
Authority key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
Certificate issuer: /CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Certificate serial: 0199FC8F382323B596A77925B4CB09D54FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
Manifest number: 1432
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: wa45j5qt0GOL_-okwceeuIMveHU.crl (hash: 8diKVmpFmISG9Xq9+96tkC/Hpldo9PWPh6ITZ7YL8CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:38:23:23:b5:96:a7:79:25:b4:cb:09:d5:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=c635de7ef8d9f3c8241d25c9ee9acd580e9b7e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:91:4a:f5:a7:47:7c:85:26:f8:37:be:38:
6c:c0:ad:0b:ad:2f:34:7e:32:b2:fe:23:4f:82:e3:
4b:d0:ca:b3:1c:03:b7:52:76:05:62:e9:0d:fc:8a:
a0:ad:53:93:f4:10:98:5f:09:d1:49:49:56:bb:e2:
97:6a:e0:1d:f9:0e:75:cb:f1:1d:33:f2:d6:cd:92:
e5:75:bd:70:a0:4d:41:2b:d3:dc:d3:dd:32:f6:5d:
13:ef:10:4e:7a:07:b2:85:a6:ec:74:1c:ff:6b:84:
2f:9b:6b:b5:02:10:09:78:ea:92:fc:58:de:b2:cf:
7b:63:2f:92:62:b3:2d:a2:8a:23:2f:d0:cc:ed:fa:
77:b7:bc:99:ad:76:12:d0:41:75:4f:cf:c6:4d:af:
f9:4f:bf:12:ec:9d:f0:2b:a4:ef:75:b9:53:e0:4b:
e9:9c:51:bb:8a:30:9d:12:c6:ec:48:a6:f4:3c:49:
2e:bc:0a:a6:c0:b3:98:93:9d:1d:62:55:7c:33:46:
5e:de:22:3f:16:57:0e:b0:02:94:35:66:23:d9:3d:
86:5e:b1:eb:40:1b:c2:5f:ec:87:48:de:dd:b5:36:
9d:65:17:d3:fe:42:63:df:3c:b1:16:fa:d0:91:25:
94:8d:de:12:e6:c2:f6:8f:3e:54:8e:76:75:13:04:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:35:DE:7E:F8:D9:F3:C8:24:1D:25:C9:EE:9A:CD:58:0E:9B:7E:9D
X509v3 Authority Key Identifier:
keyid:C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:68:ea:df:bb:c5:42:5f:c3:47:cd:21:6f:0d:08:62:06:9f:
a5:48:06:03:05:54:20:9b:d9:5d:43:75:57:e4:4b:6c:57:a8:
b2:0e:5b:98:37:38:16:43:05:ef:b8:ad:5c:5b:bd:39:aa:2e:
0f:77:c3:7b:a7:e7:a5:16:35:5f:c8:b6:c4:9b:0a:2e:51:3e:
c3:4e:c6:d4:6a:ca:5f:f5:15:d7:e6:d6:73:9d:b6:64:68:68:
db:46:32:1a:f8:51:5f:fa:83:ec:08:14:b7:bc:ab:46:b3:57:
3c:58:84:a3:fc:e5:aa:3b:20:fc:49:38:84:7f:00:84:99:87:
f4:8b:10:ef:50:7e:4b:b3:aa:f5:e2:30:c9:4d:0e:c3:f3:d6:
64:aa:06:19:41:0f:0b:fa:7a:1a:0b:b7:e7:89:b8:a2:79:93:
eb:5e:2e:2b:20:27:2f:bd:71:35:96:dd:b6:39:b2:a0:e2:dc:
6c:72:0b:1d:ca:cd:70:bd:17:f0:35:ac:e6:e8:f6:db:2f:5f:
40:67:e1:7a:3d:cc:a4:33:85:fb:db:31:57:6d:80:6f:d0:21:
81:dc:88:8c:58:d6:5f:24:33:01:25:d8:50:e4:2b:0d:42:d7:
02:9f:64:ec:47:7c:9d:6c:98:dc:72:ba:61:a8:26:45:2d:b1:
aa:16:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:48 2025 by rpki-client