Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: wwuNbENLkKa+Wni2jP3vlhaEDmt0V1xoD58yTr5bcvM=
Subject key identifier: CF:29:A6:D2:5C:8D:72:08:9A:DA:18:4B:8B:81:E5:1A:02:CE:18:1D
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 0199FCC6924E9A9E37D6CF0C51FCEC3509E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 1287
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: OUpOTQv3MzDdVIpMsdredrJ2bBkBgARsxMGhAFH5xl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:92:4e:9a:9e:37:d6:cf:0c:51:fc:ec:35:09:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=cf29a6d25c8d72089ada184b8b81e51a02ce181d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:3f:34:85:f4:e9:72:dc:8c:c7:93:eb:cf:
f4:0b:92:e3:2b:e3:93:72:3e:3d:1c:1f:a4:fb:00:
33:62:86:5f:be:80:22:c6:90:03:4c:3d:a7:48:d2:
d2:3c:68:36:5f:a1:52:e9:58:7d:b1:f2:c4:86:4e:
cb:e4:c8:ab:69:4c:19:a7:60:df:dd:ad:30:95:ec:
04:01:3e:2a:9e:96:75:2d:d8:1a:01:d7:62:65:24:
a4:0b:9c:18:59:26:70:a8:8a:63:24:08:3d:b4:3f:
70:ff:46:cb:6f:be:5c:27:0a:b2:e8:ff:24:a9:f0:
de:07:e9:d9:c9:a6:14:b1:a2:ff:f5:37:b1:49:7e:
1c:a4:2a:d8:c6:c5:d2:ef:46:97:94:6c:09:b3:11:
b4:7d:44:d2:ce:a9:fa:63:88:6b:46:88:31:1f:24:
58:f3:40:41:2d:19:66:d1:14:1c:ef:b6:13:c0:8f:
57:7d:b6:39:18:2b:5e:1f:c2:75:e8:f9:5f:84:b6:
01:88:8e:62:ac:c0:07:97:1c:2a:bb:1c:65:bb:3b:
2e:58:79:cb:a3:ea:d0:f0:18:7b:db:63:2d:b0:5e:
34:71:e1:63:87:45:95:64:ab:47:2b:1f:27:77:5d:
7b:26:cd:05:71:53:5f:b0:fd:3c:a2:df:d3:fb:9e:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:A6:D2:5C:8D:72:08:9A:DA:18:4B:8B:81:E5:1A:02:CE:18:1D
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fb:0e:4b:5e:17:3b:6a:ce:07:b7:04:65:6f:f1:2b:5f:90:
a0:38:e9:01:33:6a:05:80:b1:0f:18:14:50:8c:49:f0:9d:81:
3d:de:8e:4a:d8:8d:dc:30:14:8d:68:1d:e4:3c:5a:12:6c:48:
8b:c0:30:74:81:54:29:e3:6b:11:b8:8c:8a:d3:26:4c:4b:cb:
20:9e:0e:72:bb:19:12:ae:b7:1a:6e:2d:24:89:61:31:b7:5d:
05:e5:99:5e:18:d7:ae:31:df:14:c3:eb:34:3f:ad:80:b6:65:
be:8f:eb:e8:35:b3:6b:a4:4b:7c:19:bb:be:5f:71:e6:9c:b9:
5c:39:c4:34:8c:5f:64:63:83:5c:03:ab:6c:f1:9b:8a:3f:65:
b8:67:5c:c5:b3:cc:21:6f:11:27:70:13:75:94:9d:7b:08:15:
62:75:52:fb:9a:0d:f3:f8:63:dc:d9:9b:cf:d4:61:01:7a:2a:
8e:3e:1d:ad:23:ab:d8:b6:e6:b6:aa:bc:5b:1c:43:f3:4a:dc:
f7:d9:f4:a9:dd:5c:40:84:6b:63:7e:d5:99:50:99:8d:2a:18:
79:85:9d:d8:8c:4d:bf:77:36:c5:9e:9c:7d:e0:61:d1:51:93:
07:33:dc:b5:3e:f3:1a:c9:e5:a8:ee:c7:2b:88:45:84:a9:54:
c7:0a:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:48 2025 by rpki-client