Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
File: wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json)
Hash identifier: ALI6fyhjX4YWavGba0gnu1gw9eAzJhHak8ZFM/DWOEY=
Subject key identifier: 72:EC:1B:AA:E1:23:25:D2:78:AE:E5:A3:F3:13:A2:C3:AE:15:67:ED
Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
Certificate issuer: /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Certificate serial: 0199FCFD34077ADBD0BD5E6E8C364CA9A03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
Manifest number: 041A
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: y7yZM4qxzmBBn+0kiG8WFHK0wpHdXv3wtVJDroC2Z+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:34:07:7a:db:d0:bd:5e:6e:8c:36:4c:a9:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=72ec1baae12325d278aee5a3f313a2c3ae1567ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:2c:29:7d:a8:ef:c2:94:65:3d:58:1f:70:
8a:a2:90:3f:b9:33:5f:6d:74:a7:a5:ca:9d:c5:87:
2a:14:ff:cd:9b:3b:25:52:26:d5:63:f4:41:0b:fe:
c3:4e:a3:a0:fd:e3:39:e5:33:57:a8:f8:cc:30:1d:
c9:52:9e:1b:f8:91:e1:5e:08:cc:05:9f:2b:89:95:
48:5c:54:09:3f:c9:c0:dd:6b:b5:2f:3f:13:38:de:
e8:d4:9a:22:d9:c5:e8:99:64:bb:9e:6b:77:44:58:
fa:c7:82:5d:5a:f6:b4:41:b7:8b:23:22:8a:1c:b3:
41:af:71:02:38:24:e1:a1:8f:08:48:2d:de:94:87:
e7:b2:42:99:0d:fa:a6:a6:a6:ff:c6:bc:5a:e6:d1:
cf:87:2d:93:fe:a2:dc:36:1c:47:4c:95:b5:10:05:
e6:05:4f:a3:2d:49:72:f8:a4:e9:c6:12:84:c8:4e:
65:91:1e:82:3d:5a:a5:a4:45:ad:f2:01:ee:97:16:
e0:65:d8:37:b6:3d:9a:a4:ae:30:6a:8b:99:c9:98:
91:5a:ed:9d:1d:9c:f6:00:87:d6:8a:33:f6:46:54:
b2:1b:5f:01:2f:74:f8:ca:ba:f6:9e:0e:a2:88:15:
f8:cf:e5:62:d6:c4:35:a9:1b:9b:b4:12:ce:6b:af:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:1B:AA:E1:23:25:D2:78:AE:E5:A3:F3:13:A2:C3:AE:15:67:ED
X509v3 Authority Key Identifier:
keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:72:70:d4:a0:be:96:43:ff:25:3f:dc:56:cc:dd:f0:c5:f1:
8b:fc:6d:b1:8d:d3:02:ea:72:20:a9:f6:a5:af:76:b7:d2:44:
bf:b2:f2:60:3f:df:f7:43:ea:9b:b1:8c:f0:98:03:1b:93:20:
2f:14:04:f1:83:42:4f:c0:d4:ff:92:37:f8:47:ae:f6:67:eb:
ce:fb:3c:2e:08:a2:54:49:e0:87:fa:b2:07:fc:92:0f:f1:e7:
1b:54:8c:51:0d:a6:b6:3b:8a:29:d2:40:78:26:38:35:92:ab:
94:7a:a3:d1:9f:d5:43:c1:23:8b:cd:f2:3c:30:57:e4:ea:7e:
02:df:56:a1:a8:bd:cc:11:73:4c:99:b1:b3:c5:68:9f:7a:20:
a4:74:81:36:df:34:48:0f:c5:3a:29:9d:48:e1:08:95:34:83:
2a:54:2d:f3:9e:58:43:90:f2:47:83:6b:31:e6:b0:5b:60:79:
49:ec:06:46:2e:d7:2e:0c:67:e8:79:8f:19:c0:13:90:04:12:
96:68:21:07:82:1e:51:fb:30:66:e9:3f:a4:40:96:a8:1b:a4:
2c:67:18:08:aa:65:05:64:06:c6:fd:a5:7e:a7:a0:f3:9a:db:
91:31:33:c2:75:a0:58:e6:d0:a3:65:0e:64:70:52:bf:17:53:
6b:cf:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:05 2025 by rpki-client