
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier: 3fOGKcN0VpeOlGnJkbIrD1eJEwGA3ncKaSyU0ODwgE8=
Subject key identifier: EB:24:D0:99:E4:38:CC:5F:23:52:F2:6A:65:A4:E7:F4:13:6A:0F:47
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial: 0199FDD929D859358FCF94FB1CD7AB9C0A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number: 032F
Signing time: Sun 19 Oct 2025 19:01:31 +0000
Manifest this update: Sun 19 Oct 2025 19:01:31 +0000
Manifest next update: Mon 20 Oct 2025 19:01:31 +0000
Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: rwqeBV3yyg7TgFjTBHHDYdGiadjMBQbDGt50isHHdLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:29:d8:59:35:8f:cf:94:fb:1c:d7:ab:9c:0a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Validity
Not Before: Oct 19 19:01:31 2025 GMT
Not After : Oct 20 19:01:31 2025 GMT
Subject: CN=eb24d099e438cc5f2352f26a65a4e7f4136a0f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:eb:dc:94:ba:5f:99:f7:eb:da:a3:00:3e:57:
5e:b7:5f:1a:3a:53:9b:8d:cd:95:88:12:bb:86:cf:
4f:fd:6e:f6:7f:34:8d:4d:14:54:3d:3d:bf:27:7d:
6c:8c:97:fd:86:27:68:81:5a:d4:45:0b:90:83:fd:
80:9e:20:fd:da:c7:31:31:5a:09:a0:c7:9d:30:ae:
71:7b:c3:30:03:44:5e:59:86:32:ad:3b:ae:34:7a:
74:d5:71:eb:0f:0f:fb:41:80:d4:a4:4f:45:69:33:
4f:1c:9c:53:31:f1:ae:dc:99:e7:7c:fd:86:57:e8:
52:f8:a0:99:9f:ce:27:73:35:a3:e6:c8:b2:9e:d2:
5b:6a:09:8a:fc:d3:e4:ee:78:56:dc:78:04:aa:0d:
ec:cb:25:dd:dc:49:dd:20:eb:50:ae:7a:12:e1:75:
41:06:74:46:91:fc:d9:39:3b:54:24:62:9c:ec:6c:
85:e6:96:93:7e:67:10:04:1e:84:3a:26:ab:af:2a:
77:6d:f2:00:f0:f4:e6:3d:0d:d2:9a:b9:9a:da:70:
ca:f4:15:d1:3b:70:60:48:6b:52:5e:3e:66:4a:fa:
6a:a7:3c:6e:a0:21:98:65:31:f0:1c:d4:1c:af:ca:
41:43:84:2d:e6:3f:df:87:80:88:33:a2:73:dd:84:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:24:D0:99:E4:38:CC:5F:23:52:F2:6A:65:A4:E7:F4:13:6A:0F:47
X509v3 Authority Key Identifier:
keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bd:96:12:c1:48:05:93:41:0f:2a:1a:d7:ca:3d:b9:77:78:
8a:d0:ea:05:e1:46:2f:87:06:5b:a8:e0:77:98:05:77:bb:16:
13:b7:ac:4d:27:0d:42:71:e7:07:66:26:96:f3:be:d3:53:d4:
d5:47:fa:5e:45:98:93:8d:86:4d:75:6a:1d:87:3a:a0:c0:fb:
6e:7f:a2:88:44:e5:9e:95:91:20:4a:c1:ac:2e:ee:18:d1:28:
1d:fc:29:17:bb:00:d0:23:b1:1e:8f:49:a9:47:e8:83:82:ea:
3f:49:b2:0a:10:bd:96:fa:f5:df:ce:08:c2:81:bb:d8:d3:e8:
b7:aa:b8:2c:b1:4c:6c:95:f3:a8:aa:a9:8c:37:f0:4b:ce:eb:
a5:fc:07:00:ca:b6:67:6d:8a:eb:f3:e7:ec:21:8f:6d:3c:f3:
4e:2f:61:f6:7d:ee:17:28:6d:14:a3:de:79:71:a1:c2:e9:7d:
6f:7a:c7:52:bd:ef:92:d7:08:5a:4c:bb:41:94:63:06:49:55:
7f:27:21:cd:22:0c:80:51:75:29:8c:19:22:11:1f:8b:6d:fc:
65:06:7b:41:96:65:13:a8:64:61:bd:5b:e9:ac:4a:36:f7:5a:
c4:f0:c1:42:5a:5c:c3:73:57:d5:e8:9a:a0:e3:76:ef:60:33:
9c:3c:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:23 2025 by rpki-client